rarbg2.to/images/logo.png
188.114.97.1200 OK 7.0 kB URL GET HTTP/3 rarbg2.to/images/logo.png
IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type PNG image data, 216 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b8eb049422ca2c631c0eca8b7c81ca1
299889c23d79c26331194b322881a881313438de
bb27a21606bb3c1a30c1ea4023d1d09d8b59d9f379ecba8c109f2cb7fed059ee
GET /images/logo.png HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/fullsearch?q=prototype+biohazard
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:17 GMT
content-type: image/png
content-length: 6993
last-modified: Wed, 14 Jun 2023 23:22:35 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5650
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BNA%2Fdeb25witwezOjUUVGX20gFGR6sQbj9SDSvBCjzsHvaDC2rC6K%2ByXrzCuA1PyRwNNWRCUFJWUsncHk9owqwSOvHQbb89tuEWy%2FjdjULdcOeTTXR%2FUQHjBvQE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbd5ae695695-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.25.14200 OK 5.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.17.25.14:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 14:41:17 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1774632
expires: Wed, 06 Nov 2024 14:41:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BN6z%2BXwehP6yyqMF2dQ%2F4klzz4Nruzdz2B3H3JeVE4D%2FNImDOw1AnV%2Bckn2UesSaRjc81%2FwTC12J4T0AFpQLDyGN1fzBDN1FFC%2Ff3hLT%2BskeXk0bQRxWsPITVCm7BmWitAd4BL4o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8278bbd5df13b4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rarbg2.to/images/bknd_body.jpg
188.114.97.1200 OK 2.6 kB URL GET HTTP/3 rarbg2.to/images/bknd_body.jpg
IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 4x1034, components 3\012- data
Hash ff562f2c5ea3e3688b020b900a4453c1
9e73127c60afbcbcb6c3222fb7497d311d40c077
4f37de59cdf4f1520597176979ac2a999bef1f389c86321ddb62b4bf1978bd2a
GET /images/bknd_body.jpg HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:17 GMT
content-type: image/jpeg
content-length: 2562
last-modified: Thu, 08 Jun 2023 12:06:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5650
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlIVUKZnzuNgIFy1lC3KL7ztgiDmzIYSrqlxgZ1WxZAV5CyZmYs1TPA8mcGHIM0nc%2FtBu9LP%2FcxYbZzbAa%2F%2BgQJwvC9eIWT3R4WD99ZFO6tdLgNxuu0j0vfULZE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbd69fb25695-OSL
alt-svc: h3=":443"; ma=86400
rarbg2.to/images/downarrow.png
188.114.97.1200 OK 4.4 kB URL GET HTTP/3 rarbg2.to/images/downarrow.png
IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 73cbe02708024f9ed1906201c457ce7c
47750814435e0902353c9528bfc077489268c5ff
e9e590a330c9d3f688f699225279b4c6d4d1c1eb131ad9373673332297d44dea
GET /images/downarrow.png HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/fullsearch?q=prototype+biohazard
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:18 GMT
content-type: image/png
content-length: 4429
last-modified: Thu, 08 Jun 2023 12:06:25 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1439
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lxaI0FL9eRfzI63WzEksV29QXBOVR3oJ2QMuNODJ9MzRjBbidCqpSy26C97UYUbwavrTZ%2BsdEyZ5%2BEl9jSAmXRYD2LUeP4asPr19hCQPb9irx4%2BySrw8rIk6b6U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbdcbdd15695-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.25.14200 OK 77 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.17.25.14:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rarbg2.to
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:21 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1773590
expires: Wed, 06 Nov 2024 14:41:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8sEhxgyz%2BSN1QRGyl%2FnFUrrnIzAJheo0rTZqthSMhCACxuSYC%2Bl1vS5niZu%2BPRtCEUieVWJZXs6sz73C4WwYqoheBkzACrat5MpcaUMQ8yBNd5hrVV7UjRcvC7en5oGrPjx%2FM5ha"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8278bbebab660b41-OSL
alt-svc: h3=":443"; ma=86400
banquetunarmedgrater.com/advertisers.js
172.67.219.12200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP 172.67.219.12:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 14:41:21 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: fffc24d53bcfc7d42189210afd627586
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 17 Nov 2023 14:41:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j9vVfJW%2FciarQlA1QETilv79%2FSczNDIwalp564L3D3DdPQxGHeWk4NYZeGwcOjSEGk%2BB0VuOr1H7u2GlN2gIPXe3vGarrzUEydF%2BFGRyDBhZKd6PTREiwo6Z6eYNtA9A3izY7tZWD93eJjI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbebaaf9b4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
daysstone.com/06/44/43/06444360220cd3121ea71b73847bab58.json
173.233.137.60200 OK 422 B URL GET HTTP/1.1 daysstone.com/06/44/43/06444360220cd3121ea71b73847bab58.json
IP 173.233.137.60:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerLet's Encrypt
Subjectdaysstone.com
FingerprintE0:BD:89:D2:DF:A5:7E:87:71:6E:8C:D8:21:31:53:25:29:38:79:9F
ValidityWed, 04 Oct 2023 06:20:28 GMT - Tue, 02 Jan 2024 06:20:27 GMT
File type JSON data\012- , ASCII text, with very long lines (422), with no line terminators
Hash aa245522fed737c3190182ba573f2106
4096010c34628dad827f2e93bc2c5d30f4f00a75
51ee27fb43bb8af1d14952db48c5ee79593214948fbac0e9b79ae5cb2b2d0a29
GET /06/44/43/06444360220cd3121ea71b73847bab58.json HTTP/1.1
Host: daysstone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rarbg2.to
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 17 Nov 2023 14:41:21 GMT
Content-Type: application/json
Content-Length: 422
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 586be5bd9232b3da4140bdbc0ce411a1
Strict-Transport-Security: max-age=0; includeSubdomains
toothacheformer.com/pixel/pure
192.243.59.20200 OK 0 B URL POST HTTP/1.1 toothacheformer.com/pixel/pure
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerLet's Encrypt
Subjecttoothacheformer.com
Fingerprint4D:A5:91:6E:C7:40:64:1C:6C:8B:AB:7B:09:4E:20:25:F6:8A:13:61
ValidityMon, 09 Oct 2023 12:18:56 GMT - Sun, 07 Jan 2024 12:18:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /pixel/pure HTTP/1.1
Host: toothacheformer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rarbg2.to/
Origin: https://rarbg2.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.19.5
Date: Fri, 17 Nov 2023 14:41:21 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
toothacheformer.com/pixel/pure
192.243.59.20200 OK 0 B URL POST HTTP/1.1 toothacheformer.com/pixel/pure
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerLet's Encrypt
Subjecttoothacheformer.com
Fingerprint4D:A5:91:6E:C7:40:64:1C:6C:8B:AB:7B:09:4E:20:25:F6:8A:13:61
ValidityMon, 09 Oct 2023 12:18:56 GMT - Sun, 07 Jan 2024 12:18:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /pixel/pure HTTP/1.1
Host: toothacheformer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://rarbg2.to
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 17 Nov 2023 14:41:22 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL ocsp.r2m03.amazontrust.com/
IP 54.230.218.11:0
Hash 4619ac8f08b01b4cdca85e0753c69a37
fb1451c9530d1876b5235c00b31ca292c60d89c7
a4e9fb5a33fa18737ffe2483fbb6fdd83a7ced82e028f50b946ddb283a24f802
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 17 Nov 2023 14:41:22 GMT
Last-Modified: Fri, 17 Nov 2023 14:01:58 GMT
Server: ECAcc (ska/F7A7)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uNP_YYs9gcieQOMiDH5gBNTNGEZfkImVbeO9PEuktSz3u4SdL8xMnw==
Age: 2364
professionalswebcheck.com/stats
18.159.20.213 40 B URL GET professionalswebcheck.com/stats
IP 18.159.20.213:0
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
File type ASCII text, with no line terminators
Hash ef219846a39b01a3aa4cc0f77395f913
1d2b5238af2c36fd2d0dfbfa3f7eef8ca9af35e8
78a5d2a440f396acff4473f70c91d8f8a0cb88237c3bc57b0ed42aa7daf48ce7
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rarbg2.to
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 14:41:22 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://rarbg2.to
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=c7147ac4-97c5-4775-a1dc-113b2495b2da:3:1; expires=Mon, 14 Nov 2033 14:41:22 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
rarbg2.to/favicon.ico
188.114.97.1200 OK 1.2 kB IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 988017a518155f4918dde174340c1f1f
95ed5317a6e4f5a87ca9f15ecaba5a613cd4ba33
2c261781ff90aa85c4ed3b45a62ad6e54ed5bf6213bf3ea875bec2b0b16eb34b
GET /favicon.ico HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/fullsearch?q=prototype+biohazard
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:19 GMT
content-type: image/x-icon
last-modified: Thu, 08 Jun 2023 12:06:59 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 507
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3WB4ZA4jZ08%2FGQsTmM8jXdEEircZWsPc371DNvdDuU7cgA6oxfTwQ1Zsx6pFnQ%2BF0%2FpuU7KGAUhpYn2o29XM2F%2FY35vsRm5fhZMGPHB8W%2FC73JLYZVV%2Bv80faGM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbe0fa385695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
friendshipmale.com/sfp.js
172.64.196.8200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP 172.64.196.8:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 14:41:22 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 09e87d19fdfe2acde5280274f0b0d699
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 17 Nov 2023 14:41:22 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sAlzr%2FJl7pBcPhVFXEk%2F2o2KHjHelk2TnFdftYjyZwENYVqsbugxkXFO%2BFaHjwOnZqc0n5LCDygMY%2BTK6AZNF3LQxcE8nuknUldjTgu5lyCW2trdLpYKDT6WP614AF4EYah7ZME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbf1ac706559-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rarbg2.to/fullsearch?q=prototype+biohazard
188.114.97.1200 OK 80 kB URL User Request GET HTTP/2 rarbg2.to/fullsearch?q=prototype+biohazard
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (55897)
Hash cff02636aaeaa8f6bb79374e4cc52f63
c626f5e6d2e5caeca1a78d3345ea1301c2943e49
cc04ae066c19e381a1685c6981b62a7c4b1d5a299f6f6e482faa912981e5db8e
GET /fullsearch?q=prototype+biohazard HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 17 Nov 2023 14:41:17 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6iU%2FDnari54uNywehi0nPPOP%2Fsit2LvsN7aaWALaXiAPnf%2FUZGXTchVD146P%2BQp7%2B98SFOCEqYd28WqU57ObZvcXrriFCL35KyYA10VuV1TTFhTLcpj5RE7FNzg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8278bbd27ff856ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rarbg2.to/api.php?url=/q.php?q=prototype%20biohazard&cat=
188.114.97.1200 OK 239 B URL GET HTTP/3 rarbg2.to/api.php?url=/q.php?q=prototype%20biohazard&cat=
IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type ASCII text, with no line terminators
Hash 94608caa8454de222fe87b6ccdaf087a
781606e7fe330e7afac7ae8f889fc072d5f55785
3bba5851cb559fb21396b136ec4e49341595f38bdfcda3716f8019c504d18135
GET /api.php?url=/q.php?q=prototype%20biohazard&cat= HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/fullsearch?q=prototype+biohazard
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:18 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g6b4dGzwgpQBcuOHGotoFWhcU74Hh2oarmDNTJXgrsNfLTKTokxgKPiyJ%2FV4Q3RXKQoVVdjQ6WuK19WdK1Pn93wRBfkZk%2BW2y2lwUxRt1%2FNuTiqOdZc%2BWDCXJl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8278bbd69fb45695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
rarbg2.to/css/style.css
188.114.97.1200 OK 15 kB IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
Hash e29a0877bbdbe4a5c0a10572369f05fd
5c808d2bc5802ffe33a9a7921ab89c9d0f351a31
067bfcda72a2bbb5fe668e67edf06cd0feea9c656e3e11138ef17f5d91b389b4
GET /css/style.css HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/fullsearch?q=prototype+biohazard
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:17 GMT
content-type: text/css
last-modified: Fri, 09 Jun 2023 14:53:59 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1qpCmDXGT59MFBUYUjCuVk6%2FXKeWUS2pMgIXlfGVBpCnlGOhabbAcBZlgctIzGRSPKRrnPbCUZhxe90fQ8vF2EbdmccWSKIHROt%2FiOXpr%2BFbrwQeuVusqgZ%2B2aY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbd59e5f5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
rarbg2.to/static/main.js
188.114.97.1200 OK 30 kB IP 188.114.97.1:443
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Certificate IssuerGoogle Trust Services LLC
Subjectrarbg2.to
Fingerprint3D:ED:1C:46:A6:AA:CD:E2:54:43:97:39:E1:AD:C5:32:6E:03:35:2C
ValidityWed, 04 Oct 2023 15:45:29 GMT - Tue, 02 Jan 2024 15:45:28 GMT
File type HTML document, ASCII text, with very long lines (6606)
Hash 02aae9d9439f9bb7c7844b635ad38bd1
d465d315cf68f47e9f32997621dbe4791d62af45
998070788b6b6aa6489833e5246f219b65803a2533ff171b89615c322d122c3a
GET /static/main.js HTTP/1.1
Host: rarbg2.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/fullsearch?q=prototype+biohazard
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 17 Nov 2023 14:41:17 GMT
content-type: application/javascript
last-modified: Thu, 08 Jun 2023 12:06:47 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1440
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HP8D1MQifjFynDFmMcrmEWmmTr09e6s5PgNOvmPck5gU8d42qIqy1M2dQ2188mopCalQb%2F10tWxAf0Ijp%2BsVaRz%2BCFFAaGXYF9EpLnUd6rr3M1miH1zu8y4b5pw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8278bbd5ae675695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dismantlepenantiterrorist.com/pxf.gif?uuid=c7147ac4-97c5-4775-a1dc-113b2495b2da&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=06444360220cd3121ea71b73847bab58&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=14
0.0.0.0 0 B URL GET dismantlepenantiterrorist.com/pxf.gif?uuid=c7147ac4-97c5-4775-a1dc-113b2495b2da&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=06444360220cd3121ea71b73847bab58&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=14
IP 0.0.0.0:0
Requested by https://rarbg2.to/fullsearch?q=prototype+biohazard
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=c7147ac4-97c5-4775-a1dc-113b2495b2da&eb=9dc9c1d31cb8b7965ee9d24b6e1f79e7&te=b7f6eb057aaaa451b9eeba0ff496141a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=06444360220cd3121ea71b73847bab58&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=14 HTTP/1.1
Host: dismantlepenantiterrorist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rarbg2.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache