r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18934
Expires: Thu, 22 Sep 2022 10:27:10 GMT
Date: Thu, 22 Sep 2022 05:11:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 804f8bbb7f556d51a5f52d5ebd5b6eef
922cd7e06df278615a04abb81d811d14596c8180
ef4804d381a34ab67873a7755621081c49c646310e085a9b2356ae07098f6021
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 04:13:56 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: awZ9Y5GSbskmyFpTbCKQwWyugb_dvzvSZKudUcXlDmrApALIxPgIug==
Age: 3460
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zu53aMmmMjMa1WimDS1Mch9BoZoZlGQJDwwVE9PAqgmxdgA1sNFu4g==
age: 2182
X-Firefox-Spdy: h2
playfilm.to/movies/fidelity/
301 Moved Permanently 0 B URL HTTP/1.1 playfilm.to/movies/fidelity/
IP
ASN #208414 WEDOS Internet, a.s.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /movies/fidelity/ HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 22 Sep 2022 05:11:36 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-Redirect-By: WordPress
Set-Cookie: starstruck_d5e5e4765415fa90d89d6fc18db3b74d=98094ac8e7d41ea180e2e1cb89f6c04f; expires=Fri, 22-Sep-2023 05:11:36 GMT; Max-Age=31536000; path=/
Location: https://playfilm.to/movies/fidelity/
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 61cad8feb7f178722d112ce6be122403
1f191bba149d03588f5b67023d4520a388afb18c
199525870a21abf0a1faf91286d0427df5341905e3154a48f3f7ef851339a605
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "199525870A21ABF0A1FAF91286D0427DF5341905E3154A48F3F7EF851339A605"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=386
Expires: Thu, 22 Sep 2022 05:18:02 GMT
Date: Thu, 22 Sep 2022 05:11:36 GMT
Connection: keep-alive
playfilm.to/movies/fidelity/
200 OK 18 kB URL HTTP/2 playfilm.to/movies/fidelity/
IP
ASN #208414 WEDOS Internet, a.s.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (23037), with CR, LF line terminators
Hash b074c7ff42bf5b3100561c96796f6e1a
e7c7921c2f63e8bdb5acad889194ea49975f0052
c1b1638ba73bccfc656b43607ded162c2a655299fbf5d4e72a49b7dd2fcf48b9
GET /movies/fidelity/ HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:36 GMT
content-type: text/html; charset=UTF-8
content-length: 17666
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
link: <https://playfilm.to/?p=43458>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 05:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 06:03:22 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3TPTwlpzBV_fhWXKTDkcQbSt78tqm-QR6SPfw2aQ8Elrtkof6IqCfA==
Age: 494
playfilm.to/wp-content/themes/dooplay/assets/css/front.mobile.css
200 OK 2.2 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/front.mobile.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash 190a960f94a13fb289eb88b7bee7a8dd
a396a5234a9c50cb8b20e317d51fdb4e892d2a76
84ade07fb79df8950d5e616c079b0cc472510fb01fd73ac391aab08a35a156e4
GET /wp-content/themes/dooplay/assets/css/front.mobile.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 2239
last-modified: Wed, 24 Jun 2020 10:40:34 GMT
etag: "2ed0-5a8d21b0d2c80-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/css/front.gallery.css
200 OK 1.2 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/front.gallery.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash 277562681aca473a940b7c606138d7b2
f6b89c92f19a5e89082e7bdc60a86b0b0227bde4
df49f3ee7fd978b5a924341de341f5ba9a485507f194aa561e9393264c7798c9
GET /wp-content/themes/dooplay/assets/css/front.gallery.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 1206
last-modified: Wed, 24 Jun 2020 10:40:33 GMT
etag: "15ea-5a8d21afdea40-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/css/front.owl.css
200 OK 793 B URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/front.owl.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash 3e955dd9c0a2eb07fbf48048368ec9ed
27c5b703035175b18da56577c0bd76457b28ea6f
d0f60c53ad49c4c5f7d8ef3196f306f7a24511b6b2c629ed7cef0dd648dc7df1
GET /wp-content/themes/dooplay/assets/css/front.owl.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 793
last-modified: Wed, 24 Jun 2020 10:40:34 GMT
etag: "bc8-5a8d21b0d2c80-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/torrent-player/dist/index.min.js
200 OK 11 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/torrent-player/dist/index.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (31255), with no line terminators
Hash fef84c8a21d8bac9cc74441e44e3f0b7
e9f5d920f89e681e86e192f690c2d2ca82e6c3a6
b062cb73f2ac0a3d527a9c6cd3df85e25a1bb6ba4f44e2d9baeaa361ee8d6846
GET /wp-content/themes/dooplay/torrent-player/dist/index.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 10955
last-modified: Mon, 07 Sep 2020 20:23:11 GMT
etag: "7a17-5aebefcbfc9c0-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/css/front.icons.css
200 OK 1.4 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/front.icons.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash 3e0d84cd1041a1658fc32b931f83edc3
f39c6d0ad994609428fcadc46f3765ee46c3e01b
0964cec9d5278353e1f57c42a78e0c49c5b4a4b867a81675d9aef910c76cc64c
GET /wp-content/themes/dooplay/assets/css/front.icons.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 1442
last-modified: Wed, 24 Jun 2020 10:40:34 GMT
etag: "1d55-5a8d21b0d2c80-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/neWSUPFfCviQhBoyDQj0GJqqDpq.jpg
200 OK 2.3 kB URL HTTP/2 image.tmdb.org/t/p/w92/neWSUPFfCviQhBoyDQj0GJqqDpq.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash bca8c4d4e434c1694ade961f73fab271
063bbaf2d2b5d0986625107c305a7a18140d0dc4
8b65408a67085f768d8fd3dd8660be8c0c3f6de7173bbab5696a4304bdb2cab9
GET /t/p/w92/neWSUPFfCviQhBoyDQj0GJqqDpq.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2260
date: Thu, 25 Aug 2022 02:22:52 GMT
server: openresty
last-modified: Thu, 07 Jul 2022 10:07:26 GMT
cache-control: max-age=31449600
etag: "d017ea5dcc999d737d3c7b7bcb22c8b8"
expires: Thu, 24 Aug 2023 02:22:52 GMT
x-rack-cache: fresh
x-content-digest: 063bbaf2d2b5d0986625107c305a7a18140d0dc4
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: YWng5CNZLaV2nrEbqh_NCM5yzSrAOj74V5fPAoO158dQIetOSokZgg==
age: 2429325
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/css/front.crollbar.css
200 OK 1.3 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/front.crollbar.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash 9097184a9a52cf9c25a023556ca8ef4d
86de9696c7e93c2d6c15671f9bede74d9143e6aa
01bd1807f6d612d7cd87c2fda951353917521e65a6530f280cde3a9f190c5f64
GET /wp-content/themes/dooplay/assets/css/front.crollbar.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 1274
last-modified: Wed, 24 Jun 2020 10:40:33 GMT
etag: "23df-5a8d21afdea40-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/mcsbscrollbar.js
200 OK 11 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/mcsbscrollbar.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (36042), with CRLF line terminators
Hash 96d989c7f223737c102b54275708432a
b64a6029a9cba0b7c88e86532ddc8f0ab30138dc
bf1f5e91b919174e5c9ba0b64cbe29ad6be8105d0f8e0c21b92ad4b8d40eb580
GET /wp-content/themes/dooplay/assets/js/lib/mcsbscrollbar.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 11292
last-modified: Wed, 24 Jun 2020 10:40:44 GMT
etag: "96d7-5a8d21ba5c300-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/css/colors.dark.css
200 OK 8.3 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/colors.dark.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash b51fa5f5ea0942ca687f4f3db136e658
0b7039413a6968aac024e93bc43e4a350b0f3355
b648a03c5864366171ac1fa16466c1bbda29ca9ee74ecf181c6eed4e417f1b37
GET /wp-content/themes/dooplay/assets/css/colors.dark.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 8272
last-modified: Wed, 24 Jun 2020 10:40:33 GMT
etag: "c3a4-5a8d21afdea40-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 4.2 kB URL HTTP/2 playfilm.to/wp-includes/js/jquery/jquery-migrate.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 4169
last-modified: Thu, 10 Dec 2020 11:34:53 GMT
etag: "2bd8-5b61a907bf140-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-includes/css/dist/block-library/style.min.css
200 OK 12 kB URL HTTP/2 playfilm.to/wp-includes/css/dist/block-library/style.min.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 11681
last-modified: Tue, 12 Jul 2022 20:17:04 GMT
etag: "15b64-5e3a15a1fe5ff-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.css
200 OK 6.4 kB URL HTTP/2 playfilm.to/wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (37107)
Hash 446e08e4bb5f2ba560c70ff043ff7057
75bd9c06abd59091daa299343c30454fd7489f2d
55d70369868ad5e582c7f76c8c3c4c8495ced70ba69a978a4dee9c90ab0ed637
GET /wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 6369
last-modified: Wed, 09 Dec 2020 15:05:22 GMT
etag: "9265-5b6096363d080-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/n2rqZvE106r2xPhXu7Gt8JFbqZz.jpg
200 OK 2.9 kB URL HTTP/2 image.tmdb.org/t/p/w92/n2rqZvE106r2xPhXu7Gt8JFbqZz.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash f5b1bb41e96bc6012285647eaaa65563
2b21cb5114c85386fe957f82f91c23531f12ddbf
655cb1640434adabb0b2e259811424b9b81b34e897f4eda305ff0cbdd9f5f8da
GET /t/p/w92/n2rqZvE106r2xPhXu7Gt8JFbqZz.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2860
date: Fri, 09 Sep 2022 02:15:18 GMT
server: openresty
last-modified: Thu, 07 Jul 2022 11:24:41 GMT
cache-control: max-age=31449600
etag: "d348e4b69f90f33fa050ba7cf064fbd4"
expires: Fri, 08 Sep 2023 02:15:18 GMT
x-rack-cache: fresh
x-content-digest: 2b21cb5114c85386fe957f82f91c23531f12ddbf
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: h7psRkPhx72EWVxA-q-ljlDrfrlZ8iCjL_nDlxAjLRdcrOGLh-R21g==
age: 1133779
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4437
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:37 GMT
Last-Modified: Thu, 22 Sep 2022 03:57:40 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
image.tmdb.org/t/p/w92/zkLXihNFQqpqRKdtn1TDxjrdphN.jpg
200 OK 3.7 kB URL HTTP/2 image.tmdb.org/t/p/w92/zkLXihNFQqpqRKdtn1TDxjrdphN.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash 1bd71ae723f2d9792f32017f8cdf9b3f
c142f1d75f277d9c1833e8ae74a29f982db7749a
b3a2d79220c479d0df7d0c6ac6085f11e441ee4debf894157fdc79659d0812b3
GET /t/p/w92/zkLXihNFQqpqRKdtn1TDxjrdphN.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3671
date: Tue, 06 Sep 2022 03:25:38 GMT
server: openresty
last-modified: Tue, 05 Jul 2022 00:01:24 GMT
cache-control: max-age=31449600
etag: "3025d0bb46d19bc4a09f1c242c4f0720"
expires: Tue, 05 Sep 2023 03:25:38 GMT
x-rack-cache: fresh
x-content-digest: c142f1d75f277d9c1833e8ae74a29f982db7749a
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _ADT_b46JTgYjBDwKIgXuelS4uSyrrM5jGobywlrWeDmFx_H-cQ0og==
age: 1388759
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/idtabs.js
200 OK 696 B URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/idtabs.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (1541), with CRLF line terminators
Hash d1f750e0314079fb3af18d48f1b8d420
87a9aa29026227968f895285c4e14877399d52dd
36f0863b6483fd5aef2b31abcdb9b4c96fd8ad45212c527cb79a0a9f79171d81
GET /wp-content/themes/dooplay/assets/js/lib/idtabs.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 696
last-modified: Wed, 24 Jun 2020 10:40:44 GMT
etag: "607-5a8d21ba5c300-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/qsEfwms7pAGk4LxHsyYcCSdHnYo.jpg
200 OK 3.7 kB URL HTTP/2 image.tmdb.org/t/p/w92/qsEfwms7pAGk4LxHsyYcCSdHnYo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash 88fbe0a59dc21a4aea83df19d56f6fed
7443abbf053a39f0ad0dcbf3f63d0127d810eee4
d9f997d059a7ae6cee84201c285aead043ea20fbabb8d3d53c83cf2b43f44572
GET /t/p/w92/qsEfwms7pAGk4LxHsyYcCSdHnYo.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3661
date: Thu, 14 Jul 2022 08:35:33 GMT
server: openresty
last-modified: Wed, 06 Jul 2022 21:32:56 GMT
cache-control: max-age=31449600
etag: "3ccc7993a9d98a71eddeacce99f05cd4"
expires: Thu, 13 Jul 2023 08:35:33 GMT
x-rack-cache: fresh
x-content-digest: 7443abbf053a39f0ad0dcbf3f63d0127d810eee4
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jh7r8dYxK9XsNwCHniRbS6Swmt2_RVSkbfRnJ7Y7i-4MGOg_qpRJmQ==
age: 6035764
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2021/03/2qSRB9lL0F0D5sjgs8DHIpmIxLy-185x278.jpg
200 OK 8.1 kB URL HTTP/2 playfilm.to/wp-content/uploads/2021/03/2qSRB9lL0F0D5sjgs8DHIpmIxLy-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash 33828420fdaabdd78a994a21d9e6e967
2c6335beb0be4b84cca6f4af58dc1547f84c246e
bcc48e482cb8a8327541f937af06517c84eb55c0fa3cd1f5ed2376b4506acb7f
GET /wp-content/uploads/2021/03/2qSRB9lL0F0D5sjgs8DHIpmIxLy-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 8051
last-modified: Sat, 13 Mar 2021 07:01:39 GMT
etag: "1f73-5bd6596913ac0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/i13TLKMUM9UCAabyJ02fnP2o1vh.jpg
200 OK 3.4 kB URL HTTP/2 image.tmdb.org/t/p/w92/i13TLKMUM9UCAabyJ02fnP2o1vh.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash e045d68e90b3460afb74d1ae46004cf4
521796b83563e39e11c55410196b86efba3ff5b9
80afa5da90f7a8430634127a2ae210d0989b242669579191fe57042d31edb0e1
GET /t/p/w92/i13TLKMUM9UCAabyJ02fnP2o1vh.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3355
date: Tue, 06 Sep 2022 03:25:38 GMT
server: openresty
last-modified: Fri, 08 Jul 2022 04:18:00 GMT
cache-control: max-age=31449600
etag: "548646a595ecfd2f665c944752ecd542"
expires: Tue, 05 Sep 2023 03:25:38 GMT
x-rack-cache: fresh
x-content-digest: 521796b83563e39e11c55410196b86efba3ff5b9
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: i-P38n_PhUcppecyKqOtfXjYRyQHZrobC29HiMYZ5Eac6wfiZxNYaw==
age: 1388759
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/starstruck.raty.js
200 OK 3.4 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/starstruck.raty.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (10362), with CRLF line terminators
Hash e570549c558d03182bbb3310bf9f74e1
b255bd9cbce2eddd069d17500c90540e4ce157fe
d0ef987fbad634d350400a14b6ffd3efe73d759719b38b0d3e6ecba07b8a0c15
GET /wp-content/themes/dooplay/assets/js/lib/starstruck.raty.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 3369
last-modified: Wed, 24 Jun 2020 10:40:45 GMT
etag: "287c-5a8d21bb50540-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/pvSKmtlH8q9fVqXZwlFIl3CgKie.jpg
200 OK 3.9 kB URL HTTP/2 image.tmdb.org/t/p/w92/pvSKmtlH8q9fVqXZwlFIl3CgKie.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash ead0135b6ec0b50a32847e15965f5511
6c5bfcdfbdf3ef4c1918265e3d6c26ec6950cce4
20c84ac63b917fc81e1d7658082eaf7f8d35a4fcbf3b30be5fa6b0f0fa76c991
GET /t/p/w92/pvSKmtlH8q9fVqXZwlFIl3CgKie.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3853
date: Fri, 02 Sep 2022 04:18:09 GMT
server: openresty
last-modified: Sat, 05 Feb 2022 23:43:04 GMT
cache-control: max-age=31449600
etag: "33d097ab46d844a8b730cb6a412080df"
expires: Fri, 01 Sep 2023 04:18:09 GMT
x-rack-cache: fresh
x-content-digest: 6c5bfcdfbdf3ef4c1918265e3d6c26ec6950cce4
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: y3ST78SXTOztRGG7qvHfW86HJKdOztTx1Q7f82BrBTZbi8FxJwu7Cg==
age: 1731208
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/owlcarousel.js
200 OK 6.5 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/owlcarousel.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (635), with CRLF line terminators
Hash cb53f352197ad4694b519cd39a15d89a
989666863e43e16e52387ea60f4337bfc2d0f82f
a41a2740986b795aca47b8f6bce69eeccf16db71d5e98708107f9c1b1169f2c2
GET /wp-content/themes/dooplay/assets/js/lib/owlcarousel.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 6492
last-modified: Wed, 24 Jun 2020 10:40:44 GMT
etag: "5d82-5a8d21ba5c300-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/kWvhO7smdXXT27du4YzcIvAPNwb.jpg
200 OK 3.6 kB URL HTTP/2 image.tmdb.org/t/p/w92/kWvhO7smdXXT27du4YzcIvAPNwb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash 018328191a1f50360f038437681537bd
65d701c7f59b288561853444c28d8e603301eada
55b5e6d5479b186685d38eabfffebd10f8a8558d7a413842fa70f952b35ab8ff
GET /t/p/w92/kWvhO7smdXXT27du4YzcIvAPNwb.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3632
date: Tue, 20 Sep 2022 06:24:27 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "5ebabea32667adf145af13f543193e8d"
last-modified: Sun, 01 Jul 2018 12:07:21 GMT
imagery: degrade=85, sample=2x2, difference=1.113
cache-tag: kWvhO7smdXXT27du4YzcIvAPNwb
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QNtlu4PfEwp8q0EghN-CZRpDXbixjPboeDdgxbOm39a-lIJnSdyQCg==
age: 168430
vary: Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/starstruck.js
200 OK 592 B URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/starstruck.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (1309), with CRLF line terminators
Hash 37db5fc8f2793acbe601f38fb675cfef
88cafe46a620e53a9e623b1428c06797eb969e19
23fa681acfa24598f4047e2175604eff6998e2faebfa0d390d56358791583bbc
GET /wp-content/themes/dooplay/assets/js/lib/starstruck.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 592
last-modified: Wed, 24 Jun 2020 10:40:44 GMT
etag: "51f-5a8d21ba5c300-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w300/hQRLmQTIFr7kagzRYqMvCGR9gwt.jpg
200 OK 8.7 kB URL HTTP/2 image.tmdb.org/t/p/w300/hQRLmQTIFr7kagzRYqMvCGR9gwt.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x169, components 3\012- data
Hash 7eeb8ba75e370fda3cd5311772553410
b2b6febb6669d49c912bddc6e4317df7769b863f
0680c3e616368346b1ef0a079311c03cd03b59385a1408ec51ddb2fc1ba579ba
GET /t/p/w300/hQRLmQTIFr7kagzRYqMvCGR9gwt.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8691
date: Thu, 08 Sep 2022 17:17:13 GMT
server: openresty
last-modified: Mon, 04 Jul 2022 00:11:13 GMT
cache-control: max-age=31449600
etag: "c22c1a4b7bf54f430eb461e36e1ec2ad"
expires: Thu, 07 Sep 2023 17:17:13 GMT
x-rack-cache: fresh
x-content-digest: b2b6febb6669d49c912bddc6e4317df7769b863f
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lYoR6s3S2qJc_ZTlGY17TU-lTvyQRu3HU_lQUERb_aPLXedSmGPUnA==
age: 1166064
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/isrepeater.js
200 OK 3.0 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/isrepeater.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (10378), with CRLF line terminators
Hash 19f8ada3ff281f7864ddcb9d685c9d62
ca000eb59586cc5a7b9ea9c1856359c9fd711dfe
2964c44d9e7e1de3e00c8bd161e4ccd28ac9e286c57f1b3f35076fdce2713bc6
GET /wp-content/themes/dooplay/assets/js/lib/isrepeater.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 3008
last-modified: Wed, 24 Jun 2020 10:40:44 GMT
etag: "288c-5a8d21ba5c300-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/NYHEx4fG5HSWIaR2cYzADw2xXh.jpg
200 OK 3.2 kB URL HTTP/2 image.tmdb.org/t/p/w92/NYHEx4fG5HSWIaR2cYzADw2xXh.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash 5d2a5fc086a9d332f7fce99e133bcb2a
2c8e04717e8d052b789162f9124fd2c24328f58b
7546f2d6b37f3c5e90c613b3c2931501b2c291c3b7f1661e1f6ada13d86658d1
GET /t/p/w92/NYHEx4fG5HSWIaR2cYzADw2xXh.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3182
date: Fri, 26 Aug 2022 11:52:51 GMT
server: openresty
last-modified: Mon, 11 Jul 2022 04:00:56 GMT
cache-control: max-age=31449600
etag: "952fd3cebb853b8e35fd38ba9bbbdfec"
expires: Fri, 25 Aug 2023 11:52:51 GMT
x-rack-cache: fresh
x-content-digest: 2c8e04717e8d052b789162f9124fd2c24328f58b
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VDB1B0W1erH6t8YAEG9Utei3xdmEFbFnA78csn0GaxJg7gp0bPa3XA==
age: 2308726
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/lib/blueimp.js
200 OK 8.7 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/lib/blueimp.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (32032), with CRLF line terminators
Hash 97d14045c932cbf3ca996f5e502a4d64
32514bd88d978075d86449539031b523c55a4bde
83e8d87e61138ded9dd8967ba40025d90e18ec5b1860d2b73aeefde25c387dc6
GET /wp-content/themes/dooplay/assets/js/lib/blueimp.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 8657
last-modified: Wed, 24 Jun 2020 10:40:44 GMT
etag: "80c4-5a8d21ba5c300-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/rmNaNEUOqcwRor74AJybHvXZPAB.jpg
200 OK 3.1 kB URL HTTP/2 image.tmdb.org/t/p/w92/rmNaNEUOqcwRor74AJybHvXZPAB.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash b88bb7354726cc5d805b1317e679785c
8b1cbabd03735423b02707e89eb1715d7d3a5636
b7c87b4ce1ba180d419d67d846837552dc7f4ffbebbc33c1882da1e934636b2b
GET /t/p/w92/rmNaNEUOqcwRor74AJybHvXZPAB.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3077
date: Thu, 25 Aug 2022 12:06:49 GMT
server: openresty
last-modified: Thu, 07 Jul 2022 11:02:23 GMT
cache-control: max-age=31449600
etag: "02b8f363fe91fdd9c2fb887aeb2f1ae3"
expires: Thu, 24 Aug 2023 12:06:49 GMT
x-rack-cache: fresh
x-content-digest: 8b1cbabd03735423b02707e89eb1715d7d3a5636
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: hc3nx9ble6vVGKufwzLSeRTahvTXLYTsDG_gvQXohy8nm7jPhNsefA==
age: 2394288
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/min/front.ajax.js
200 OK 3.3 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/min/front.ajax.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (616), with CRLF line terminators
Hash e684a9c1fe6db09d12bd9639027d8bb5
30c402d0ee8ceb599cb16067d392d31a9120ceff
b313a19e4f8e5976476a9d99a0a445e64e4606dd877c2df18da2ec81ea3765bf
GET /wp-content/themes/dooplay/assets/js/min/front.ajax.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 3333
last-modified: Sat, 10 Oct 2020 18:46:16 GMT
etag: "57e9-5b1557ae94e00-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/dsZ4MJoYEZdbq6OH82Xb44of8cR.jpg
200 OK 3.3 kB URL HTTP/2 image.tmdb.org/t/p/w92/dsZ4MJoYEZdbq6OH82Xb44of8cR.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash 4c5395853665db0b890bdb48878d7968
f98adf585a1a0968c8a530eb8ab42424f59a3009
9121e7f5afe36125d3e36934879fdfeaa332585d28d151152dbe703c1604a108
GET /t/p/w92/dsZ4MJoYEZdbq6OH82Xb44of8cR.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3315
date: Sun, 11 Sep 2022 07:39:15 GMT
server: openresty
last-modified: Sun, 03 Jul 2022 11:59:43 GMT
cache-control: max-age=31449600
etag: "5b050fb3a942e6dccb2d5bcd7208c4ef"
expires: Sun, 10 Sep 2023 07:39:15 GMT
x-rack-cache: fresh
x-content-digest: f98adf585a1a0968c8a530eb8ab42424f59a3009
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: PiYnkzdSAfpQOViGIg1EVQXr4bcovacN-CblC0ZkiIDOObArB4RWDA==
age: 941542
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/img/flags/ru.png
200 OK 1.0 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/img/flags/ru.png
IP
ASN #208414 WEDOS Internet, a.s.
File type PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash a578828f0b80cddaa8186b8d421eddc5
e17e95d3f9661c031e14bab4322030c5ef38bab2
1414e980bf6d3c306ed011205f4f063e98c6e1a05d17bbca614771801e68b518
GET /wp-content/themes/dooplay/assets/img/flags/ru.png HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/png
content-length: 1013
last-modified: Mon, 17 Aug 2020 08:11:38 GMT
etag: "3f5-5ad0e51dae280"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w300/Ac13NZcvuVYXXDhw1GyzILTGJy5.jpg
200 OK 8.6 kB URL HTTP/2 image.tmdb.org/t/p/w300/Ac13NZcvuVYXXDhw1GyzILTGJy5.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x169, components 3\012- data
Hash efe3d9e5c67b5918ed1d74fc635efb22
53fc41f1729bfa8c61fdd2bea25e4cba4c7bbbff
3691c266c2a52a6f49fabc5fdd6579f5b37951d0a610fbe77e0e4d7613b3060f
GET /t/p/w300/Ac13NZcvuVYXXDhw1GyzILTGJy5.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8565
date: Wed, 07 Sep 2022 02:44:51 GMT
server: openresty
last-modified: Sat, 30 Jul 2022 08:05:51 GMT
cache-control: max-age=31449600
etag: "0e64ed709e3e4cfadf1b60ff74d8a217"
expires: Wed, 06 Sep 2023 02:44:51 GMT
x-rack-cache: fresh
x-content-digest: 53fc41f1729bfa8c61fdd2bea25e4cba4c7bbbff
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XgfOvO85QWX0vVD60s09BHumiOHr7MttsvS4lJVIyf0Ke3VffEossQ==
age: 1304806
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/06/playfilm-logo-2.png
200 OK 9.4 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/06/playfilm-logo-2.png
IP
ASN #208414 WEDOS Internet, a.s.
File type PNG image data, 359 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 880aea3c7f28005d7cb94b3eed4db0cd
03d9e4a1fd416e67668b5312b4c1b6276d1d07be
001d5069a5b3fb83684fd06f350833cec31dbfc82ca066c5710240eb2981664c
GET /wp-content/uploads/2020/06/playfilm-logo-2.png HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/png
content-length: 9404
last-modified: Sat, 05 Sep 2020 14:26:13 GMT
etag: "24bc-5ae91c4744b40"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w92/1mCIIHNwYLWdgAyAMESIQGr06hX.jpg
200 OK 3.4 kB URL HTTP/2 image.tmdb.org/t/p/w92/1mCIIHNwYLWdgAyAMESIQGr06hX.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 92x138, components 3\012- data
Hash 0cd527c3a142395b0aa6d543611e23b3
7491d295e37ad9dfaeaab6564848fac5342b3d9b
b840a9e57299e30db2fcc05f98e78cd58cb39b5c02ac6e23f70073b5462619cd
GET /t/p/w92/1mCIIHNwYLWdgAyAMESIQGr06hX.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3356
date: Fri, 08 Jul 2022 02:04:12 GMT
server: openresty
last-modified: Sat, 02 Jul 2022 02:30:32 GMT
cache-control: max-age=31449600
etag: "f9ff6e7f01bd528d18911ce346bc0535"
expires: Fri, 07 Jul 2023 02:04:12 GMT
x-rack-cache: fresh
x-content-digest: 7491d295e37ad9dfaeaab6564848fac5342b3d9b
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KAIQp1gOsoWHDnwZkSWeCqJk5ErqsSsvSz0WvNlPU43K1WT1ytaIzg==
age: 6577645
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2021/08/5czEYrrPBF7HlzSDmc4Reoelg2N-185x278.jpg
200 OK 8.1 kB URL HTTP/2 playfilm.to/wp-content/uploads/2021/08/5czEYrrPBF7HlzSDmc4Reoelg2N-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash 6fa3c3b5bc5bcd8a5df79af9724b12e7
2becbcb9af89c1ef73cb7d22054bafdb797211fa
4b16b5567fd9459afcbfec4ac145a1875a80fa21e182518243245b07d04b5367
GET /wp-content/uploads/2021/08/5czEYrrPBF7HlzSDmc4Reoelg2N-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 8088
last-modified: Sun, 08 Aug 2021 05:57:34 GMT
etag: "1f98-5c905f1e6af80"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.min.js
200 OK 19 kB URL HTTP/2 playfilm.to/wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (32015)
Hash 175a5621bcd60aecbd1692b61d3d7be9
fb5468f87352be3715e8915edf82a1d289551fe9
3abfeb8f82de9974f9e76ce29f1a583a53b5657d9a2f32e883783a98919c3f00
GET /wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 18592
last-modified: Wed, 09 Dec 2020 15:05:22 GMT
etag: "ff6e-5b6096363d080-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2021/03/mOPM2xKN7i4AON0KNciOa5Ez8Rk-185x278.jpg
200 OK 12 kB URL HTTP/2 playfilm.to/wp-content/uploads/2021/03/mOPM2xKN7i4AON0KNciOa5Ez8Rk-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash f0b28c614b52d4692f46d8d06bf4bd4d
675f5987a89bf63d245109adf9a303e95f92acd8
c2c47cc0d2aa6116b298d2652fef8a97f2bb7e5afcad1d18114436f6614b72fc
GET /wp-content/uploads/2021/03/mOPM2xKN7i4AON0KNciOa5Ez8Rk-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 11653
last-modified: Wed, 17 Mar 2021 11:50:28 GMT
etag: "2d85-5bdba16d24900"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/css/front.style.css
200 OK 19 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/front.style.css
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with CRLF line terminators
Hash a2bbb2e1cf11727a73cf5631642ad6a5
10b5a657843eb81676c4e4af6a190fd0d9974ef1
d161537e642e1b6f4499d85287eeb1f064a5eed6db18b7579bd54dbcbc793ff2
GET /wp-content/themes/dooplay/assets/css/front.style.css HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: text/css
content-length: 18742
last-modified: Fri, 05 Aug 2022 09:53:13 GMT
etag: "1fe17-5e57b6f36a019-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-includes/js/jquery/jquery.min.js
200 OK 31 kB URL HTTP/2 playfilm.to/wp-includes/js/jquery/jquery.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 30908
last-modified: Sun, 07 Nov 2021 12:46:53 GMT
etag: "15db1-5d0324552efc6-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/plugins/search-filter-pro/public/assets/js/select2.min.js
200 OK 19 kB URL HTTP/2 playfilm.to/wp-content/plugins/search-filter-pro/public/assets/js/select2.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type Unicode text, UTF-8 text, with very long lines (64217), with no line terminators
Hash 2f55805e7f80e8baf45c0efec137b3c5
b6b0ab7a5d4fdb8c4673c192e61dc42f022d0e40
35b0b814bdffa65d46da3f969eff6c7398162e614795ab7c0f1e0ee9ef2d7841
GET /wp-content/plugins/search-filter-pro/public/assets/js/select2.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 19008
last-modified: Wed, 09 Dec 2020 15:05:22 GMT
etag: "1042e-5b6096363d080-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/11/aO1RMsLlMGkiYCWuGGSfknIwXsh-185x278.jpg
200 OK 9.0 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/11/aO1RMsLlMGkiYCWuGGSfknIwXsh-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash ede16556720c85119c4b0269a8cd60ab
fc6d8429a561aa7703603f4fbe82b273ee733edd
732a745e7d1481a35a2778c4a0fb0e1995e12b0d771690b909344cb7d60107d5
GET /wp-content/uploads/2020/11/aO1RMsLlMGkiYCWuGGSfknIwXsh-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 8994
last-modified: Thu, 19 Nov 2020 08:18:13 GMT
etag: "2322-5b4715e7b5b40"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2021/01/Greed-2019-Poster-185x278.jpg
200 OK 12 kB URL HTTP/2 playfilm.to/wp-content/uploads/2021/01/Greed-2019-Poster-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash 8cc87a166a3df36d436227064778644e
5d6e18f3fa4b81bbc8d2ea2d93a453526e456f76
310ce97a64aa4770fc5a73283af8311b66b0566dab88a511c44c44573cfbc47a
GET /wp-content/uploads/2021/01/Greed-2019-Poster-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 12129
last-modified: Fri, 15 Jan 2021 06:23:08 GMT
etag: "2f61-5b8ea67ddcb00"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2021/06/1r3qoXJ7DQKCjmpx7SGG7tgSnU5-185x278.jpg
200 OK 8.9 kB URL HTTP/2 playfilm.to/wp-content/uploads/2021/06/1r3qoXJ7DQKCjmpx7SGG7tgSnU5-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash 9b84acb9cab769c21da0921aab814baa
52366f5a8cbbffcb1358bc00985febfc826bd6d1
027ca83d746af3b7e5407fd519307d1f1abd9c084f5f5950d608f592ad93d01d
GET /wp-content/uploads/2021/06/1r3qoXJ7DQKCjmpx7SGG7tgSnU5-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 8935
last-modified: Thu, 17 Jun 2021 05:21:46 GMT
etag: "22e7-5c4ef621f4e80"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/09/zzFftAIaCkNDt8TL4yQN8RweLrw-185x278.jpg
200 OK 10 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/09/zzFftAIaCkNDt8TL4yQN8RweLrw-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash bd7dc204f6c03b178eee6183eee0fb87
91fc87a1363104c5ba9c479b03832865be4cda0a
5fb22f7b97ea97657d787f9160cf554b2fafc4af626651a61fb0ff78778d1dcc
GET /wp-content/uploads/2020/09/zzFftAIaCkNDt8TL4yQN8RweLrw-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 10399
last-modified: Mon, 14 Sep 2020 08:25:38 GMT
etag: "289f-5af41c77ac480"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/05/8PkKsI7EXAcnov2ap6dnu3fYWFe-185x278.jpg
200 OK 12 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/05/8PkKsI7EXAcnov2ap6dnu3fYWFe-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash c088a921140a7685c54408220d55c4a1
99efe926ae6848ae157a8a2360d4a224f07cdb66
d2ab8fb5848a7dc33a77b477eb20132cdf8f5df3156befb5fb7103f9662e9981
GET /wp-content/uploads/2020/05/8PkKsI7EXAcnov2ap6dnu3fYWFe-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 12385
last-modified: Wed, 24 Jun 2020 08:28:37 GMT
etag: "3061-5a8d043295740"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/08/It-Chapter-Two-2019-Poster-90x135.jpg
200 OK 2.5 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/08/It-Chapter-Two-2019-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash 560396c74d237dc8db408829487fa7da
9fc633bc2781ec521be7ad8b81b3a6e924f63c21
56554583fe744b60014139661a92d31c28746e04ac7a2f504db08b3555aba479
GET /wp-content/uploads/2020/08/It-Chapter-Two-2019-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 2514
last-modified: Wed, 12 Aug 2020 13:17:24 GMT
etag: "9d2-5acae0227c100"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/07/Kim-Philby-His-Most-Intimate-Betrayal-2014-Poster.jpg
200 OK 6.5 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/07/Kim-Philby-His-Most-Intimate-Betrayal-2014-Poster.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 183x275, components 3\012- data
Hash c05f9ef220673c7ce125848b611c843d
cc083f4c57e048bc70665b5fabfa22068322397c
56006b4fb3e0f2fee14b0e93a6517271ba3643b8dbdc0ead5310b9a509857170
GET /wp-content/uploads/2020/07/Kim-Philby-His-Most-Intimate-Betrayal-2014-Poster.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 6532
last-modified: Sat, 04 Jul 2020 06:20:51 GMT
etag: "1984-5a997a4a536c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2021/07/b5RMzLAyq5QW6GtN9sIeAEMLlBI-185x278.jpg
200 OK 11 kB URL HTTP/2 playfilm.to/wp-content/uploads/2021/07/b5RMzLAyq5QW6GtN9sIeAEMLlBI-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash e19490adea2cb89a9d1cd3d9e144cd2b
143f322c1c7ace8b8009fd240dc0ddb1a43d7e6a
1d7688b676dfa37c9ffda34ad8a8a3b5b0348d8d392cf48a9ba939f4e9ac9ad6
GET /wp-content/uploads/2021/07/b5RMzLAyq5QW6GtN9sIeAEMLlBI-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 11338
last-modified: Sun, 04 Jul 2021 06:51:07 GMT
etag: "2c4a-5c6469cf70cc0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/09/57D3h8wb3LMURTyG0dv2VtHfvCM-90x135.jpg
200 OK 4.3 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/09/57D3h8wb3LMURTyG0dv2VtHfvCM-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash a41795b81a0f031804545b44f1a4621e
5ac0196984890c4816d4b9921b8006ba1c0cc771
4ef50cc79ccf803eb9dd0d3ef483cd67f1e2cb75e159bdddab4768de5cc26a25
GET /wp-content/uploads/2020/09/57D3h8wb3LMURTyG0dv2VtHfvCM-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4280
last-modified: Sun, 20 Sep 2020 21:12:51 GMT
etag: "10b8-5afc5324edac0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2022/01/r3tn7a90Dy0QZM5cBQCdFADPkn1-185x278.jpg
200 OK 11 kB URL HTTP/2 playfilm.to/wp-content/uploads/2022/01/r3tn7a90Dy0QZM5cBQCdFADPkn1-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash 3422a8e3040d87143259378114b2ed7a
dd011a06895d6e6a91ade9b0f3a28f184acbead4
4968b5e2fe3648e2a9003b5da2f56f28f3b0722678c9c48bfc351c2127f59472
GET /wp-content/uploads/2022/01/r3tn7a90Dy0QZM5cBQCdFADPkn1-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 11160
last-modified: Thu, 13 Jan 2022 06:24:37 GMT
etag: "2b98-5d570bd9ef5c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/08/Fifty-Shades-Darker-2017-Poster-90x135.jpg
200 OK 3.9 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/08/Fifty-Shades-Darker-2017-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash bd51e5ca596543d7186f78ca005d42c6
b5ebec539f43a2881b25d7488324dc1187934dbd
64b6a8e177864f8c79f9f3527531202a15f2274f152e5c1a78cbd7b1bd957e01
GET /wp-content/uploads/2020/08/Fifty-Shades-Darker-2017-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 3940
last-modified: Tue, 18 Aug 2020 12:52:51 GMT
etag: "f64-5ad265d67cec0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2011/05/Kung-Fu-Panda-2-2011-Poster-90x135.jpg
200 OK 7.3 kB URL HTTP/2 playfilm.to/wp-content/uploads/2011/05/Kung-Fu-Panda-2-2011-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash 2cc2c8c44f9a8c00748f6ddb86725162
c0bbbdabc3fda7de8c11f2be50b62a0df3bf854a
e5d401db401756602324dd1d5c9bbcaeb209436694db418b21056e9ee6d6f7ce
GET /wp-content/uploads/2011/05/Kung-Fu-Panda-2-2011-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 7259
last-modified: Tue, 07 Jul 2020 10:33:43 GMT
etag: "1c5b-5a9d7867dafc0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/05/Spider-Man-Far-from-Home-2019-Poster-90x135.jpg
200 OK 4.4 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/05/Spider-Man-Far-from-Home-2019-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash ae72af581b904d6158495599c3f58a00
bc8c126d3a0fe4b3caa9f9063e143d58ba78d417
fbac01320a49795024c9f10436eb0c5e375f86a732e8a928da0b47fc62423203
GET /wp-content/uploads/2020/05/Spider-Man-Far-from-Home-2019-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4382
last-modified: Mon, 21 Dec 2020 09:08:25 GMT
etag: "111e-5b6f5cceed440"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/05/bJSL1U3vtrJFbUC5TVDSZ8Ztooo-90x135.jpg
200 OK 4.2 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/05/bJSL1U3vtrJFbUC5TVDSZ8Ztooo-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash 24e77aec92c330359a61e895b7bd5a05
d613051a7038c016eb2a3e7083dc672513c9906f
d3c9afde84e6cdfb7e028ae5bac4fd370c224dd2acbab7dbcee4f47400c4a5a0
GET /wp-content/uploads/2020/05/bJSL1U3vtrJFbUC5TVDSZ8Ztooo-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4243
last-modified: Wed, 24 Jun 2020 08:29:09 GMT
etag: "1093-5a8d045119f40"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/06/frTwEqSMWQ27oQeuiBO5PT0ZNqq-90x135.jpg
200 OK 5.0 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/06/frTwEqSMWQ27oQeuiBO5PT0ZNqq-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash d11946cc81b325e1c07f9fcb89ef0829
dbb5708f1e659dfded50da047431098f226fa144
9b597c39332a663b7fc9b75386584473d713beb60db11dd7f85516e58412fdaa
GET /wp-content/uploads/2020/06/frTwEqSMWQ27oQeuiBO5PT0ZNqq-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4989
last-modified: Wed, 24 Jun 2020 08:36:03 GMT
etag: "137d-5a8d05dbec2c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/04/aYNUbKCXhlUSYb7SHEvOQhKW4X0-90x135.jpg
200 OK 3.4 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/04/aYNUbKCXhlUSYb7SHEvOQhKW4X0-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash eaf92c6ee34e05e2b26a5578b3e54e40
03f471ed7f3b9f71862ea7c1e4b14bdf3bc826c1
888b7c119a24ed00f2dc0866bc91a742465d30afd4940879eb8d36a0b4f86bd9
GET /wp-content/uploads/2020/04/aYNUbKCXhlUSYb7SHEvOQhKW4X0-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 3372
last-modified: Wed, 24 Jun 2020 08:21:03 GMT
etag: "d2c-5a8d02819d9c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/05/Ip-Man-4-The-Finale-2019-Poster-90x135.jpg
200 OK 3.1 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/05/Ip-Man-4-The-Finale-2019-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash ef388be717de783952781030f54488cf
b75d805c9b75c6e6f0782fc88ff307bd03f7ade9
81e52a814975e3df8ad69bdac99e0ed647d347f1ab757791eb0e5ee7e6022b2d
GET /wp-content/uploads/2020/05/Ip-Man-4-The-Finale-2019-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 3084
last-modified: Sat, 25 Jul 2020 04:11:06 GMT
etag: "c0c-5ab3c474a6a80"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/09/Perspective-2019-Poster-90x135.jpg
200 OK 3.7 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/09/Perspective-2019-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash ffbd50d42aff59ed3dec0bd08e98af04
070cb4898b48338a33ff5ecd7a20571b38f4e712
df13099b5f0b21baba1f013551509422b4d322fe5dde9176c4ebc72696b62719
GET /wp-content/uploads/2020/09/Perspective-2019-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 3739
last-modified: Fri, 25 Sep 2020 16:05:35 GMT
etag: "e9b-5b0257ca4b1c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
playfilm.to/wp-content/uploads/2020/10/lAaJc9842RDVrjvR3OLPMTeHkiA-90x135.jpg
200 OK 4.5 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/10/lAaJc9842RDVrjvR3OLPMTeHkiA-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash 02afafd2ab4c0990abc3b7f790f25111
da6b657bbf8148266e86b6e2e8a171b0fd193d4f
e90622e6a3aa4dbf040b2b0e31b6c662657310b156b2cdc22ac331a1aaa20c5b
GET /wp-content/uploads/2020/10/lAaJc9842RDVrjvR3OLPMTeHkiA-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4529
last-modified: Thu, 29 Oct 2020 07:08:21 GMT
etag: "11b1-5b2c9f1f3a340"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/05/nAn3MRAUwbjVApN3qYkvsTEOAvx-90x135.jpg
200 OK 4.9 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/05/nAn3MRAUwbjVApN3qYkvsTEOAvx-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash fa08885f5f88abbead71e963ad83780d
ce4633a00713cd31876db7c6e52d70e01c9fb2b4
2a492c1d5d50fe07e3c2dad415db20ed485d2dfed576f24c0fa0bdc585cae0d1
GET /wp-content/uploads/2020/05/nAn3MRAUwbjVApN3qYkvsTEOAvx-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4940
last-modified: Wed, 24 Jun 2020 08:30:54 GMT
etag: "134c-5a8d04b53cb80"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/08/Suck-Me-Shakespeer-3-2017-Poster-90x135.jpg
200 OK 5.8 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/08/Suck-Me-Shakespeer-3-2017-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash 8015a33ee13a6a20d34e4cb0c886b302
63384564862c0e20f2f39bd66e8b28fdb8e2548f
9c38d8b92105b7da61bdd3ac4dc2c9c3f7b0be43a9fc5d32977fe86fbab5f3e3
GET /wp-content/uploads/2020/08/Suck-Me-Shakespeer-3-2017-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 5758
last-modified: Tue, 18 Aug 2020 15:06:07 GMT
etag: "167e-5ad283a0115c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/10/dWsVFZgpKEmWNrpmv832c0KdvNk-90x135.jpg
200 OK 6.5 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/10/dWsVFZgpKEmWNrpmv832c0KdvNk-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash c339ce32fb4eb637f2d49a1418c32565
4c54a80f6b77acf288a9967fe777d4cc9aab48b6
3cc7df7063af9a438f6869871184bbbfa857d93c1029502ac6f10456c0017b66
GET /wp-content/uploads/2020/10/dWsVFZgpKEmWNrpmv832c0KdvNk-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 6450
last-modified: Sat, 10 Oct 2020 13:46:49 GMT
etag: "1932-5b1514bfea440"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/04/wbpmtx3XUZIwHA8sVqWpHyTIV0V-90x135.jpg
200 OK 5.5 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/04/wbpmtx3XUZIwHA8sVqWpHyTIV0V-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash bc4f843eb251320e2e94325353eb0c48
34c5c5826b3145d5443790424aa9644996dde405
dafcb2180513762731dc6757d8dd26720128a4cf5cd53ce2c44146a0a68daedc
GET /wp-content/uploads/2020/04/wbpmtx3XUZIwHA8sVqWpHyTIV0V-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 5531
last-modified: Wed, 24 Jun 2020 08:27:05 GMT
etag: "159b-5a8d03dad8840"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2016/01/Kung-Fu-Panda-3-2016-Poster-90x135.jpg
200 OK 5.0 kB URL HTTP/2 playfilm.to/wp-content/uploads/2016/01/Kung-Fu-Panda-3-2016-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash 8b82aa2f0d4c0558a411909b3b3dc823
9fa26abaaaab492fc5488cc87db7a10eabb11b4d
1d72384a291494e6c80fc0c4c3215bb511f8b70e8e89a6c40fcb3c54841ce1d6
GET /wp-content/uploads/2016/01/Kung-Fu-Panda-3-2016-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4953
last-modified: Tue, 07 Jul 2020 10:41:07 GMT
etag: "1359-5a9d7a0f496c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/11/The-Glass-Room-2019-Poster-90x135.jpg
200 OK 3.7 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/11/The-Glass-Room-2019-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 90x135, components 3\012- data
Hash bb74b752de2b458bfd1fca6e068a463d
3a03bec4331881a664733ad0432b5d3f10c2f724
3968a9069003977ae9cf8ca81d8b98b32e03146096f17d93c8d4f137b0f27e9d
GET /wp-content/uploads/2020/11/The-Glass-Room-2019-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 3697
last-modified: Wed, 11 Nov 2020 08:20:31 GMT
etag: "e71-5b3d077fa11c0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-includes/js/jquery/ui/core.min.js
200 OK 6.9 kB URL HTTP/2 playfilm.to/wp-includes/js/jquery/ui/core.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 7e2b78a6e8a9b90385330755ee1cf3e5
684c325f39d45e42ae44a9e42f5e9fe4fb0b909c
43f124dabb4bc663cc1cc8d3161c1e6365cf8445d873ed5d69bbfdb507cf24a9
GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 6914
last-modified: Thu, 26 May 2022 06:49:46 GMT
etag: "50eb-5dfe4987258d0-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/min/front.livesearch.js
200 OK 1.5 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/min/front.livesearch.js
IP
ASN #208414 WEDOS Internet, a.s.
File type HTML document, ASCII text, with very long lines (4760)
Hash 585e5509930871ef8a430dec63403213
4a2f89ccc2164a11d0ce8e2412fd5c4f6e0a27da
fd4dfc3963ed218c95737753849c0b2b5d5816491e2663d181e30384e3852375
GET /wp-content/themes/dooplay/assets/js/min/front.livesearch.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 1504
last-modified: Wed, 24 Jun 2020 10:40:46 GMT
etag: "1299-5a8d21bc44780-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2022/06/xa0TZUNYlXEF8TuHJEkIRvHE7lx-185x278.jpg
200 OK 16 kB URL HTTP/2 playfilm.to/wp-content/uploads/2022/06/xa0TZUNYlXEF8TuHJEkIRvHE7lx-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash b56129eba8dab5effe04699707291770
ce979484b16ae3fc733150cad969e2a5a1f0a7ad
d41bf50178cd2f8da32a37dd73b0c69aed49764d347db0c41171344579aa3a90
GET /wp-content/uploads/2022/06/xa0TZUNYlXEF8TuHJEkIRvHE7lx-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 16513
last-modified: Wed, 15 Jun 2022 06:33:45 GMT
etag: "4081-5e176b3f90d72"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LuHJO4lRD9y39hVY5uerQg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ct7kY1YZSU+iqxb19mVPcXp3fX0=
playfilm.to/wp-includes/js/jquery/ui/datepicker.min.js
200 OK 11 kB URL HTTP/2 playfilm.to/wp-includes/js/jquery/ui/datepicker.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (36560)
Hash 01c8b2443d039a1bfcd1636ba1a4ed1e
aa8f6ae060067210f9172204c244e48d925fd7c0
3ead9dd682f597ca6ad784b9c990ee20c6524b267ef54d4bd232ad5eb733a7d5
GET /wp-includes/js/jquery/ui/datepicker.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 10897
last-modified: Thu, 26 May 2022 06:49:46 GMT
etag: "8f87-5dfe4987287b0-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a819de80933fe2687e25371490c7406a
be5b3585d89199437d5038f4a50c4b8165b639b8
75110ab216beb402e40713ed0ec55e68bcd4fe0f114af121be7e299788bbf9e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 05:11:37 GMT
Last-Modified: Thu, 22 Sep 2022 04:05:18 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6x36_dcphPkSiJGZoqAApzmNsvcc_2g0Cjnz6FbZcLjc-EsuuCi2qg==
Age: 3979
playfilm.to/wp-content/uploads/2020/12/zs4WiSuGScu4OGue0fS37a5OnOw-185x278.jpg
200 OK 18 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/12/zs4WiSuGScu4OGue0fS37a5OnOw-185x278.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 185x278, components 3\012- data
Hash 59543cb2fc47c564341c67498aaa777e
d1b5551029fdba342008de886ae886790993de2a
45dce81700477ff64d7ec876d90e76ec916433a2c90eff212982dbb293700c42
GET /wp-content/uploads/2020/12/zs4WiSuGScu4OGue0fS37a5OnOw-185x278.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 18007
last-modified: Tue, 08 Dec 2020 15:47:17 GMT
etag: "4657-5b5f5db744b40"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/themes/dooplay/assets/js/min/front.scripts.js
200 OK 1.5 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/js/min/front.scripts.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (4675)
Hash 430d8a7a3350a9ca4fbd886c7e4bb9ad
545bb128b9c8cb4f5b6a38783731af412ee16f73
2e154a58400acff9168299cc91992b29facba32ab8fd9c56617811dc7d96f6e9
GET /wp-content/themes/dooplay/assets/js/min/front.scripts.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 1510
last-modified: Wed, 24 Jun 2020 10:40:46 GMT
etag: "1244-5a8d21bc44780-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-includes/js/comment-reply.min.js
200 OK 1.4 kB URL HTTP/2 playfilm.to/wp-includes/js/comment-reply.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (2946)
Hash 28214bc78b9edfcfbc9c7b651fb4f56c
fb0847abdb33dd943a2dcda4c4b905fb5cdd116c
11691bc1acc1f3a7ab8ef7c67fb720ca58fb72e52f510009f7b0cbc2589d45e0
GET /wp-includes/js/comment-reply.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 1351
last-modified: Thu, 26 May 2022 06:49:46 GMT
etag: "ba5-5dfe49875084f-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2019/03/Spirited-Away-Poster.jpg
200 OK 231 kB URL HTTP/2 playfilm.to/wp-content/uploads/2019/03/Spirited-Away-Poster.jpg
IP
ASN #208414 WEDOS Internet, a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3\012- data
Size 231 kB (231094 bytes)
Hash 10626fd4013b241b2da44414331f5522
9dd619ba76d6f919eefb87101865afc8c839d5cf
96d9bc0f396849fa7ada29221a08d81ff513101b6370903cdaccda32adcf8d90
GET /wp-content/uploads/2019/03/Spirited-Away-Poster.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 231094
last-modified: Wed, 24 Jun 2020 07:42:44 GMT
etag: "386b6-5a8cf9f11e500"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-includes/js/wp-emoji-release.min.js
200 OK 5.0 kB URL HTTP/2 playfilm.to/wp-includes/js/wp-emoji-release.min.js
IP
ASN #208414 WEDOS Internet, a.s.
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: application/javascript
content-length: 5009
last-modified: Thu, 26 May 2022 06:49:46 GMT
etag: "48b9-5dfe49875084f-gzip"
cache-control: max-age=259200
expires: Sun, 25 Sep 2022 05:11:37 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19292, version 1.0\012- data
Hash 19007b17e56daa60133bce9e9b352a95
bac1384caeae5762e7a1d8c18037f69c8cd21bc4
fd88a03358ba14440b78c6329717bdf6ed1a9fe97c3ad4e0a0a39d31fb1ac546
GET /s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playfilm.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 20:03:15 GMT
expires: Tue, 19 Sep 2023 20:03:15 GMT
cache-control: public, max-age=31536000
age: 205702
last-modified: Wed, 27 Apr 2022 16:12:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70sCFlq20.woff2
200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70sCFlq20.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26844, version 1.0\012- data
Hash f9a462667158cc17c0b961a0ae5704f1
2522cf452ab2b226855b6b231242fe0dd6d54f31
3ce9155591efa79b6811324ce08ccf7c0820c91cf6fd19bccbaae8ccf762b980
GET /s/questrial/v18/QdVUSTchPBm7nuUeVf70sCFlq20.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playfilm.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 04:25:21 GMT
expires: Fri, 22 Sep 2023 04:25:21 GMT
cache-control: public, max-age=31536000
age: 2776
last-modified: Wed, 27 Apr 2022 16:12:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
playfilm.to/wp-content/themes/dooplay/assets/css/fonts/icomoon.ttf?k4wkth
200 OK 21 kB URL HTTP/2 playfilm.to/wp-content/themes/dooplay/assets/css/fonts/icomoon.ttf?k4wkth
IP
ASN #208414 WEDOS Internet, a.s.
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 14295f67edc73c8347d68095bae61600
d22548eafa28fb00605e26878c56178baa2687fb
0833e6c75b1caf281d32e8a8aaa4e97bb814b603296828245b2bd7d2dec43aff
GET /wp-content/themes/dooplay/assets/css/fonts/icomoon.ttf?k4wkth HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/wp-content/themes/dooplay/assets/css/front.icons.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: font/ttf
content-length: 20596
last-modified: Wed, 24 Jun 2020 10:40:35 GMT
etag: "5074-5a8d21b1c6ec0"
cache-control: max-age=600
expires: Thu, 22 Sep 2022 05:21:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Thu, 22 Sep 2022 04:41:10 GMT
expires: Thu, 22 Sep 2022 06:41:10 GMT
cache-control: public, max-age=7200
age: 1827
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/06/favicon.png
200 OK 11 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/06/favicon.png
IP
ASN #208414 WEDOS Internet, a.s.
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 724a6c46e0ac67d4cf60325e23ece012
a91912dd8a7d7939431b26c4c798fc870dc7693b
a340a109673f9c6cca11fc274d543c2ef41e11aa10dd287406c72b759e960e7a
GET /wp-content/uploads/2020/06/favicon.png HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: image/png
content-length: 10999
last-modified: Thu, 25 Jun 2020 12:39:13 GMT
etag: "2af7-5a8e7e137de40"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:38 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j97&a=492110615&t=pageview&_s=1&dl=https%3A%2F%2Fplayfilm.to%2Fmovies%2Ffidelity%2F&ul=en-us&de=UTF-8&dt=Fidelity%20(2019)%20%E2%80%A2%20Full%20Movies%20Online&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=303541709&gjid=16069948&cid=402139451.1663823498&tid=UA-16506090-6&_gid=1667995425.1663823498&_r=1&_slc=1&z=605266673
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=492110615&t=pageview&_s=1&dl=https%3A%2F%2Fplayfilm.to%2Fmovies%2Ffidelity%2F&ul=en-us&de=UTF-8&dt=Fidelity%20(2019)%20%E2%80%A2%20Full%20Movies%20Online&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=303541709&gjid=16069948&cid=402139451.1663823498&tid=UA-16506090-6&_gid=1667995425.1663823498&_r=1&_slc=1&z=605266673
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j97&a=492110615&t=pageview&_s=1&dl=https%3A%2F%2Fplayfilm.to%2Fmovies%2Ffidelity%2F&ul=en-us&de=UTF-8&dt=Fidelity%20(2019)%20%E2%80%A2%20Full%20Movies%20Online&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=303541709&gjid=16069948&cid=402139451.1663823498&tid=UA-16506090-6&_gid=1667995425.1663823498&_r=1&_slc=1&z=605266673 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://playfilm.to
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://playfilm.to
date: Thu, 22 Sep 2022 05:11:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/06/favicon-webapp.png
200 OK 12 kB URL HTTP/2 playfilm.to/wp-content/uploads/2020/06/favicon-webapp.png
IP
ASN #208414 WEDOS Internet, a.s.
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash e9a79cf886b31d1831c24b2b713a188e
9b90dc609f6020f3a7480f671fb8c04730a90870
3470063a80bb06bf7733832459fd492625aab501b00975ad126f139090d30f6a
GET /wp-content/uploads/2020/06/favicon-webapp.png HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: image/png
content-length: 12508
last-modified: Thu, 25 Jun 2020 12:40:50 GMT
etag: "30dc-5a8e7e6fff880"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:38 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-json/dooplayer/v1/post/43458?type=movie&source=1
200 OK 85 B URL HTTP/2 playfilm.to/wp-json/dooplayer/v1/post/43458?type=movie&source=1
IP
ASN #208414 WEDOS Internet, a.s.
File type JSON data\012- , ASCII text, with no line terminators
Hash 4a4e51275cdab57cf0d3266c9bfa370c
d8dee152e570f50f2b0cf437791fb2caa8862325
c2300885fa3fc2cdff0546612cd00ba16e42502319e1f38c9804636d89c7d94d
GET /wp-json/dooplayer/v1/post/43458?type=movie&source=1 HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Cookie: pll_language=en; _ga=GA1.2.402139451.1663823498; _gid=GA1.2.1667995425.1663823498; _gat=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: application/json; charset=UTF-8
content-length: 85
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
x-robots-tag: noindex
link: <https://playfilm.to/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin,Accept-Encoding
set-cookie: starstruck_d5e5e4765415fa90d89d6fc18db3b74d=eca3030cf4e4cc6659c784e67beb69cf; expires=Fri, 22-Sep-2023 05:11:38 GMT; Max-Age=31536000; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3010
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 05:11:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3010
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 05:11:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3010
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 05:11:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 888247c1153f8770b880395734749107
7c27c02029eb49e726a076679be2c793da696e45
515852e0d38cdaf86bce45fa5e0df453d08ca36cf6ecfa0c4b868c2143afe333
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8748
x-amzn-requestid: 83c28267-4d10-476d-8b11-08b48b046985
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG6CGtroAMFyqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab840-1167c5285b6837d311bfe2a9;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xo0ilY8z0C3rDISFOM5EixEK7HAelSut4hgNNwGYAVQIfPP8C6pUCg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 07:23:10 GMT
age: 78508
etag: "7c27c02029eb49e726a076679be2c793da696e45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a504981ee10d8341b64f19001464ae8a
56f228d7358ba9deef000f53214dc7c1dc358109
0ea3b6ed12f3adf9d56e7d9b61f284d28107d99f28ee4e66b4c078a9a1a0cbee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 873e88ab-7afc-4b14-b428-d90ec2079741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO2wuE0AoAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3804-0d25ab397a16c78907914e23;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UStTyIXPucbY9WmDl3W5bTyeT-2SJ5CTUjv8TLeexqZtKd1p2sJrNA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 03:11:18 GMT
age: 7220
etag: "56f228d7358ba9deef000f53214dc7c1dc358109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5edcd9aee78a6cacc9241b47cbce598
f95b843029e84dbb188427a8c2ff8c9f32740465
6a56c3d0eb1d641e565d3d7d31b42be03bdad30beb20b994ffc9a6f2aaceee1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5650
x-amzn-requestid: 41ceb886-c038-4ba0-9e3a-a27879cf48ce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwjFVjoAMFWNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84d0-3f4f6a367c893c7a0669dffe;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d8Kelwi2OY0jt17q80szh8-ErN3ZQM1hhl3HZeNQvlKijygQIJtNww==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:16:00 GMT
etag: "f95b843029e84dbb188427a8c2ff8c9f32740465"
content-type: image/jpeg
age: 24938
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c0201d377c57a684452c0d26372e674d
3829f81048cc63b5f0d1e82dfbe3b8e31646e733
efa055dc93267be2dddd94b334c0655c2e1f1682467fd738e013a778aea175b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14397
x-amzn-requestid: c5a03ce8-f695-4ad3-8c42-c3bfd47d6279
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1wLGqKIAMF-Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6329699a-2b130d8b1a4b1b9131db8984;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:19:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: itH-GLLUay6dtfjGStUDeT3wOwVf-S3tWSY31HjriEFaRUiD8aFKNw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 07:41:48 GMT
age: 77390
etag: "3829f81048cc63b5f0d1e82dfbe3b8e31646e733"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91c56f0b9810bfdd84e10a626b89e389
15d83e44d568938b6c9c87201e898cedb3edec0a
942de9764e1c408f7512759774aab0479db201e6fae15ccc39e653adae4cb86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8678
x-amzn-requestid: c671a9ab-c5d0-4743-b13e-cc9a47e3d2fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vEThIAMFSwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-17ed13811d3833ea00a34423;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hp-WIGb9M8tEmNGOVjx6UQKx9E4-1oJmka0a6seG7inahqYByPmRAg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 27436
etag: "15d83e44d568938b6c9c87201e898cedb3edec0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62818de3c50f957b2e5680851a1768c9
80e48c9ae48c89598780736b089c98e22d58df9a
16f2c2d23e8641a3f297a175730343d11120a228c0fe846c0fdf1e39212c522c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8549
x-amzn-requestid: 6d44626b-16c6-4f19-ae52-d5350065b390
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwPHJJoAMFdfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84ce-46ebc35612eb7a4473b36189;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e5m6NaDUH_3GPDkxbk6iKhffSJzyYMA97Illy7mtg9um3jcYBR6TXQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:11:23 GMT
etag: "80e48c9ae48c89598780736b089c98e22d58df9a"
content-type: image/jpeg
age: 25215
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8f43a1e3a83345c912dd3a5aef53c8b
a05da38fecaa4129cc108b3d5a7719509934e880
d829af8454dbdddca6159feb66051f08bdd7c848b5d2580cb4fd7dbb910fabc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D829AF8454DBDDDCA6159FEB66051F08BDD7C848B5D2580CB4FD7DBB910FABC4"
Last-Modified: Thu, 22 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14230
Expires: Thu, 22 Sep 2022 09:08:49 GMT
Date: Thu, 22 Sep 2022 05:11:39 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 3982cc1b5a9f98ed7fd094723bbc92a9
003e2f171bdab25dd72369b3e04c14f5ef5e275b
686d1af0679b7179f29d291f31a0d38d8cab6e89545d720c5f6a5c57b71cd19a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:39 GMT
Last-Modified: Thu, 22 Sep 2022 03:24:45 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 3982cc1b5a9f98ed7fd094723bbc92a9
003e2f171bdab25dd72369b3e04c14f5ef5e275b
686d1af0679b7179f29d291f31a0d38d8cab6e89545d720c5f6a5c57b71cd19a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:39 GMT
Last-Modified: Thu, 22 Sep 2022 03:24:45 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 3982cc1b5a9f98ed7fd094723bbc92a9
003e2f171bdab25dd72369b3e04c14f5ef5e275b
686d1af0679b7179f29d291f31a0d38d8cab6e89545d720c5f6a5c57b71cd19a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:39 GMT
Last-Modified: Thu, 22 Sep 2022 03:24:45 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
ocsp.sectigo.com/
200 OK 281 B IP
Hash ae2dd9daa27ac558e17e4f64afec7769
b83283f6aecf70d7573e06376f8c77c228956afd
e50025798d25899fac8276961b047c874dbfc8c1d17add1c4533db12fdfa5074
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 05:11:39 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 01:05:13 GMT
Expires: Tue, 27 Sep 2022 01:05:12 GMT
Etag: "b83283f6aecf70d7573e06376f8c77c228956afd"
Cache-Control: max-age=416612,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74e88a888bd8b4f4-OSL
h4ahsm.cfeucdn.com/video_short.mp4
206 Partial Content 3.1 kB URL HTTP/1.1 h4ahsm.cfeucdn.com/video_short.mp4
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 639ec085afd48ff720cb1716bb09c075
04789db6677b1e59ae5b2c8c3b565f7ad8bf5c52
7e3c990c8c3e6ad1a07710e7032c1ff22975d6322937e80b0446a07de1b227cb
GET /video_short.mp4 HTTP/1.1
Host: h4ahsm.cfeucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Thu, 22 Sep 2022 05:11:39 GMT
Content-Type: video/mp4
Content-Length: 3078
Last-Modified: Sat, 03 Apr 2021 21:17:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6068db6e-c06"
server: YouTube Frontend Proxy
Expires: Sat, 22 Oct 2022 05:11:39 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Origin,Range
Access-Control-Expose-Headers: Content-Range,Content-Length,ETag
Content-Range: bytes 0-3077/3078
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash afa4b0a649c1fc0b9264fee4bc5ca946
7f20960deff9992897b12c0bd635c26af9e5afeb
0b33344b65e491a8ea3ace0ddaf56d294f50f8fa55dda4b13aba372b87d82cb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B33344B65E491A8EA3ACE0DDAF56D294F50F8FA55DDA4B13ABA372B87D82CB0"
Last-Modified: Tue, 20 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9001
Expires: Thu, 22 Sep 2022 07:41:40 GMT
Date: Thu, 22 Sep 2022 05:11:39 GMT
Connection: keep-alive
alleviatepracticableaddicted.com/ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js
200 OK 11 kB URL HTTP/1.1 alleviatepracticableaddicted.com/ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (32156), with no line terminators
Hash b716167914dbc27b1e28500bec9f1574
82924f679c101643c1b50753bd2aadea3b76b427
15b65965607d4cbf158c77c1adb4b0288e6bb0db2f17ae0cb4249a15808c9167
Analyzer Verdict Alert quad9 Sinkholed
GET /ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js HTTP/1.1
Host: alleviatepracticableaddicted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 22 Sep 2022 05:11:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8dd5e9411a59f6c474b3e7f34d5c978f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
waaw.to/player/get_player_image.php
200 OK 13 kB URL HTTP/2 waaw.to/player/get_player_image.php
IP
ASN #262254 DDOS-GUARD CORP.
Hash 2d55422f148ce09f52784986fb5d1c0d
ebe7636266e1478286e512563dda749e58c0e138
8d1fc934f6504b8b274e9cdae37bf9754baf5014853f269a8947a79b5d9a5c18
POST /player/get_player_image.php HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 73
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Cookie: uid=xvBb0bMpeHxpR3P*IfLp0CurZGU9anAB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=U1biNas81syfIP0JAXd5; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:39 GMT
content-type: application/json
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
pragma: no-cache
x-file-located: temp, filename:../files/temp/video_images/3/r/1612170098lh7r3-3.jpg
x-clickarr-add-e: 1
x-image-size: 30014
x-img-cr: j
x-origin-location: get_image
cache-control: no-store, no-cache, must-revalidate, max-age=0
content-encoding: gzip
x-inferno-location: player
x-inferno-limit-req: DELAYED
X-Firefox-Spdy: h2
waaw.to/f/JjiChhaIM4Km
200 OK 41 kB IP
ASN #262254 DDOS-GUARD CORP.
Hash f7b33d9170c9aa9845d11b538be35b76
414d319170a900cc757afa89d2b1dfd174d24889
392f9cf3fa0207c4d79e4cbd0860fcfc185419b98ee5d81c6ae00043cedc5088
GET /f/JjiChhaIM4Km HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=HAzoEvtUpG5TUeLzY5jT; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
expires: Thu, 22 Sep 2022 05:12:39 GMT
x-cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-origin-location: player
cache-control: public, stale-if-error=30, max-age=30
content-encoding: gzip
x-cache-status-inferno: MISS
x-inferno-location: player
x-inferno-limit-req: PASSED
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash f256516b6e8431deb88496a17023ca1c
5b5947885465ab75598f9b605655f87c1410c6be
5e6d11f96fe0acc1e6cc0c082fb6c75354326fa9c77adce38c17f24067aef2fc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:40 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://waaw.to
access-control-allow-credentials: true
set-cookie: uid_id2=207c5e8a-a86c-4d6a-b957-9b84094b36ae:3:1; expires=Sun, 19 Sep 2032 05:11:40 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 23 kB URL HTTP/2 creepingbrings.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 8528e6e216d265dd667e25d003ad6729
11bccebd454ce962333cbbbad09088b4a923bcbb
15a3cc64710971813dd4294a0d256d4d34f2b17bcaadd1dd2d717c9cc2b08a24
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:40 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: fdb275607f11dae1f3650d4727300095
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 22 Sep 2022 05:11:40 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TL7jcVrnN%2B%2BxaoMbU8SU4zknffy53dOAfPQ2%2FDntmNr21ZdUyqpff1FNpPkvdSJbO%2FLF%2FUo6LssJhtOnV5F4wr7YcZLXUXqbfzBQolpSITnszLxG6WzevoLnrQR7YVs2dkiQn6s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a8c6de28871-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 767ecb8bd327713c3edad30a7a9608b9
4ff44e83efa60fd5d80afb463098eebd50e9c368
c2bc0d214a29a3e5e7ad6009ecb148c4e43ca0b201d239e24f655daf7bc5f2e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2BC0D214A29A3E5E7AD6009ECB148C4E43CA0B201D239E24F655DAF7BC5F2E2"
Last-Modified: Wed, 21 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8215
Expires: Thu, 22 Sep 2022 07:28:35 GMT
Date: Thu, 22 Sep 2022 05:11:40 GMT
Connection: keep-alive
waaw.to/cdn-cgi/trace
404 Not Found 376 B IP
ASN #262254 DDOS-GUARD CORP.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f00938f49ab980c43231c717a84aede
c7971fc7ddc1e66311f465478475cd82ec5d7939
6e7dd7cae9b79b49cb490f7dc88edef35e9706eccb17c2d42a3ab9850727caa6
GET /cdn-cgi/trace HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Cookie: uid=xvBb0bMpeHxpR3P*IfLp0CurZGU9anAB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: ddos-guard
set-cookie: __ddg1_=OeaDuLYB0hhqVpXk2mK3; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: text/html; charset=UTF-8
x-origin-location: /
x-cache-status-inferno: MISS
x-inferno-location: /
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2
governessmagnituderecoil.com/f9/f0/4e/f9f04e429487bb9ba54c1aa49ea7bed4.js
200 OK 29 kB URL HTTP/1.1 governessmagnituderecoil.com/f9/f0/4e/f9f04e429487bb9ba54c1aa49ea7bed4.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 2d7ae3fe1d971103fb4b69693c85047c
e97b2de6703194698672240b7d714d61d2467403
9ef42e6a680abc7441465f6f0ab4a8595b508fec79b876e864e33867bd3bfa36
Analyzer Verdict Alert quad9 Sinkholed
GET /f9/f0/4e/f9f04e429487bb9ba54c1aa49ea7bed4.js HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 22 Sep 2022 05:11:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a171288dea962224c02c08258f7ec59c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
waaw.to/js/video.jquery_plugs/modernizr.js?12
200 OK 1.1 kB URL HTTP/2 waaw.to/js/video.jquery_plugs/modernizr.js?12
IP
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (1227), with no line terminators
Hash 7344c3814771c03ad301bc83b66a78ec
ff84fddc2d21d3e4edb6c7a3bdc9e258754daf40
ab193f9a4c2c722d8ff277d7fedb75c2b55085d0f67aaa55a62bf41d83d3d424
GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=vV4O5pjLTi2dd6SkkTCF; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 03 Jun 2018 17:19:35 GMT
etag: W/"5b142327-4cb"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
unpkg.com/jquery@2.2.4/dist/jquery.min.js
200 OK 31 kB URL HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 86e51c467871177e84aee5fd80b6e9ff
73617beef453429e331071f31583358e3dd831fa
ad7522b87d53eaa9d0d38442d318f462fa004ba31ab6ae09f4197d26408a7c92
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:39 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01G754SVY4BFC19MXYRYRMED91-fra
cf-cache-status: HIT
age: 6867000
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e88a86bc6db521-OSL
content-encoding: br
X-Firefox-Spdy: h2
governessmagnituderecoil.com/sbar.json?key=ab0be2a44b7ecf91bdbd5cd360d84937&uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1
200 OK 3.2 kB URL HTTP/1.1 governessmagnituderecoil.com/sbar.json?key=ab0be2a44b7ecf91bdbd5cd360d84937&uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5664), with no line terminators
Hash 4c0639594205d2d8787b93a635c35566
2852f0df429fe02dbc45685609dce073a97febda
0a2a8d4fa1ac151817b3a507ff10fe254ea814fcc340a82d0387196414c52623
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=ab0be2a44b7ecf91bdbd5cd360d84937&uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 22 Sep 2022 05:11:41 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://waaw.to
Access-Control-Allow-Origin: https://waaw.to
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17334947; expires=Fri, 23 Sep 2022 05:11:41 GMT; secure; SameSite=None
uid_id2=207c5e8a-a86c-4d6a-b957-9b84094b36ae:3:1; expires=Thu, 29 Sep 2022 05:11:41 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Sep 2022 05:11:41 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Sep 2022 05:11:41 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 23 Sep 2022 05:11:41 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 23 Sep 2022 05:11:41 GMT; secure; SameSite=None
slecab0be2a44b7ecf91bdbd5cd360d84937=[3364901]; expires=Thu, 22 Sep 2022 05:11:46 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba45d30c6bc7990749c65efd6c659fe2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eec52ba77099578fe886b6bf13206678
ba500db4ec07ee84a6d93155776463ade3b341bd
e620b2115c6c3ac305db8e7fea38c298dd67d7506cf72b1ca9ad0b1530de62aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E620B2115C6C3AC305DB8E7FEA38C298DD67D7506CF72B1CA9AD0B1530DE62AA"
Last-Modified: Wed, 21 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5466
Expires: Thu, 22 Sep 2022 06:42:47 GMT
Date: Thu, 22 Sep 2022 05:11:41 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash d7ca55e5daf00e83baa4aecf66912f50
7bea98e8aef3994e343e65bb5710dc251f8dae84
725a51112765453ae553fadf82735c44e2a884f71d689d86dce10fa7165b14fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 361
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:41 GMT
Last-Modified: Thu, 22 Sep 2022 05:05:40 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash b2494aa6483ac8a65bf0e6bcb2d8c554
894888054ce1647c8ae1f2afefe4faeecebaa95d
63a85091d4a67a58e301d159e3c330d37264929824c1de55d6af76f308093013
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "63A85091D4A67A58E301D159E3C330D37264929824C1DE55D6AF76F308093013"
Last-Modified: Wed, 21 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8436
Expires: Thu, 22 Sep 2022 07:32:17 GMT
Date: Thu, 22 Sep 2022 05:11:41 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash b7a556e012ef2ad5033d6828be41a6fe
81082e4d3b89c3bd71d4acc17d4717bc15f1383c
5f18e2035118b6323cc8d9000dc10ea05ec18df8b1d62dfcaf283c79ed0f410b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5F18E2035118B6323CC8D9000DC10EA05EC18DF8B1D62DFCAF283C79ED0F410B"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1835
Expires: Thu, 22 Sep 2022 05:42:16 GMT
Date: Thu, 22 Sep 2022 05:11:41 GMT
Connection: keep-alive
governessmagnituderecoil.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytzi4Y8KTkoqjMwYASd9Ld09M9Yw7BGFcWNx8kirmI1tfMllvT1anqnp7d05IQyUUY%2F4PeN%2FtBNIiC1wSZDeSwp4ynBd0%2FQRDBkweZyeJoXX7v1XuHx%2Fv9vtoujomPgh5dvmI2ldb0fLPu1966FQQXaqsqLQa1QSv%2BPI4u1Gz%2F3XZc99%2BufSj5ujkf%2BoHvB35QW1ZWdszg%2FFSEyh62g3rbr0dhPWhGGNj%2Fc1d4cNSD6B%2BTl6HEZPGJdwaKj5H2frgs3Xpusnc%2B6BWa5saiL%2FY%2FSddTU6bozWHHeuik%2ByduGPds%2BTFMujuLC9P%2F18jUhHhPH4Ol%2Bychwfo7s5xMQ6Zg4kWU%2FTGkHkPRMbi5CyWeEYALXL2GtLd31diSbjxX6VSdkMW%2F%2FoQqJ2TxtzNIe99f0mpQu2l0kSuTOgw6FdRgDNUdIysOkG%2BegioPwPM7UIIg7VVQ4ujN0E94U7boEm3FfCkSMV1i7Way1GatyG9HrBFTOStGqTFUZwwth6BuAYXzUCgPRcdDkXnoiaMaD4Ig8QWnfqvNeUMkksXCD2jSCWjgxy0UfJp9iDwbgushuN1CZrewroawxc9waxWc8OBygr6oUEqC0hGUlKBUBGVOUParXaFd6Ko9oV3BgpMZnsxGNTJ5d5vumrwrU7KdHZOXpoV5p%2B%2BMsC6PapT5TIY0ilgieacdMMFEk4tG7ItW1G4kcKqCcqdAnYdNNSGvPTqHTE3IC5%2F9CkYP4PQBuDoLWrwOWo6S0AddG0UtH5vp3trt2%2FXcQJgKWb6IfMPb1sfkldnKGrfOQvLDi1%2BwK5M%2FHvwNbitktsKX6glBV98f3TAl2blhSkd%2BvJblqqc26XSdN3Oay4VvP5IbpbFi5bIbPniPT4UpfPixdPkqTYVKu458d0kJIe2ysVySRyvuU8muF27tUmHTIlu9%2Fv7ySi%2Bz0jll0jGomhDy9BBcTcjpn3Znl%2FrqvXtQdgxbVOgVh%2BTkQZkD8GwLLpvnd2YBVs89LPNQFtXIhmz%2BqRWBlnNOWQX3H87meNvdR9e%2BAZrfnR1o31bo6wpUD%2BGKhVGe2cOLvzRmD0x7I6att8O01d88L9epo1rSaPg0bjeDJKEyYVHY6sSBoDSM4jCOaQO5m%2FBzv3%2F9DwAAAP%2F%2FAQAA%2F%2F8khZbfdAQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 governessmagnituderecoil.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytzi4Y8KTkoqjMwYASd9Ld09M9Yw7BGFcWNx8kirmI1tfMllvT1anqnp7d05IQyUUY%2F4PeN%2FtBNIiC1wSZDeSwp4ynBd0%2FQRDBkweZyeJoXX7v1XuHx%2Fv9vtoujomPgh5dvmI2ldb0fLPu1966FQQXaqsqLQa1QSv%2BPI4u1Gz%2F3XZc99%2BufSj5ujkf%2BoHvB35QW1ZWdszg%2FFSEyh62g3rbr0dhPWhGGNj%2Fc1d4cNSD6B%2BTl6HEZPGJdwaKj5H2frgs3Xpusnc%2B6BWa5saiL%2FY%2FSddTU6bozWHHeuik%2ByduGPds%2BTFMujuLC9P%2F18jUhHhPH4Ol%2Bychwfo7s5xMQ6Zg4kWU%2FTGkHkPRMbi5CyWeEYALXL2GtLd31diSbjxX6VSdkMW%2F%2FoQqJ2TxtzNIe99f0mpQu2l0kSuTOgw6FdRgDNUdIysOkG%2BegioPwPM7UIIg7VVQ4ujN0E94U7boEm3FfCkSMV1i7Way1GatyG9HrBFTOStGqTFUZwwth6BuAYXzUCgPRcdDkXnoiaMaD4Ig8QWnfqvNeUMkksXCD2jSCWjgxy0UfJp9iDwbgushuN1CZrewroawxc9waxWc8OBygr6oUEqC0hGUlKBUBGVOUParXaFd6Ko9oV3BgpMZnsxGNTJ5d5vumrwrU7KdHZOXpoV5p%2B%2BMsC6PapT5TIY0ilgieacdMMFEk4tG7ItW1G4kcKqCcqdAnYdNNSGvPTqHTE3IC5%2F9CkYP4PQBuDoLWrwOWo6S0AddG0UtH5vp3trt2%2FXcQJgKWb6IfMPb1sfkldnKGrfOQvLDi1%2BwK5M%2FHvwNbitktsKX6glBV98f3TAl2blhSkd%2BvJblqqc26XSdN3Oay4VvP5IbpbFi5bIbPniPT4UpfPixdPkqTYVKu458d0kJIe2ysVySRyvuU8muF27tUmHTIlu9%2Fv7ySi%2Bz0jll0jGomhDy9BBcTcjpn3Znl%2FrqvXtQdgxbVOgVh%2BTkQZkD8GwLLpvnd2YBVs89LPNQFtXIhmz%2BqRWBlnNOWQX3H87meNvdR9e%2BAZrfnR1o31bo6wpUD%2BGKhVGe2cOLvzRmD0x7I6att8O01d88L9epo1rSaPg0bjeDJKEyYVHY6sSBoDSM4jCOaQO5m%2FBzv3%2F9DwAAAP%2F%2FAQAA%2F%2F8khZbfdAQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytzi4Y8KTkoqjMwYASd9Ld09M9Yw7BGFcWNx8kirmI1tfMllvT1anqnp7d05IQyUUY%2F4PeN%2FtBNIiC1wSZDeSwp4ynBd0%2FQRDBkweZyeJoXX7v1XuHx%2Fv9vtoujomPgh5dvmI2ldb0fLPu1966FQQXaqsqLQa1QSv%2BPI4u1Gz%2F3XZc99%2BufSj5ujkf%2BoHvB35QW1ZWdszg%2FFSEyh62g3rbr0dhPWhGGNj%2Fc1d4cNSD6B%2BTl6HEZPGJdwaKj5H2frgs3Xpusnc%2B6BWa5saiL%2FY%2FSddTU6bozWHHeuik%2ByduGPds%2BTFMujuLC9P%2F18jUhHhPH4Ol%2Bychwfo7s5xMQ6Zg4kWU%2FTGkHkPRMbi5CyWeEYALXL2GtLd31diSbjxX6VSdkMW%2F%2FoQqJ2TxtzNIe99f0mpQu2l0kSuTOgw6FdRgDNUdIysOkG%2BegioPwPM7UIIg7VVQ4ujN0E94U7boEm3FfCkSMV1i7Way1GatyG9HrBFTOStGqTFUZwwth6BuAYXzUCgPRcdDkXnoiaMaD4Ig8QWnfqvNeUMkksXCD2jSCWjgxy0UfJp9iDwbgushuN1CZrewroawxc9waxWc8OBygr6oUEqC0hGUlKBUBGVOUParXaFd6Ko9oV3BgpMZnsxGNTJ5d5vumrwrU7KdHZOXpoV5p%2B%2BMsC6PapT5TIY0ilgieacdMMFEk4tG7ItW1G4kcKqCcqdAnYdNNSGvPTqHTE3IC5%2F9CkYP4PQBuDoLWrwOWo6S0AddG0UtH5vp3trt2%2FXcQJgKWb6IfMPb1sfkldnKGrfOQvLDi1%2BwK5M%2FHvwNbitktsKX6glBV98f3TAl2blhSkd%2BvJblqqc26XSdN3Oay4VvP5IbpbFi5bIbPniPT4UpfPixdPkqTYVKu458d0kJIe2ysVySRyvuU8muF27tUmHTIlu9%2Fv7ySi%2Bz0jll0jGomhDy9BBcTcjpn3Znl%2FrqvXtQdgxbVOgVh%2BTkQZkD8GwLLpvnd2YBVs89LPNQFtXIhmz%2BqRWBlnNOWQX3H87meNvdR9e%2BAZrfnR1o31bo6wpUD%2BGKhVGe2cOLvzRmD0x7I6att8O01d88L9epo1rSaPg0bjeDJKEyYVHY6sSBoDSM4jCOaQO5m%2FBzv3%2F9DwAAAP%2F%2FAQAA%2F%2F8khZbfdAQAAA%3D%3D HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Cookie: u_pl=17334947; uid_id2=207c5e8a-a86c-4d6a-b957-9b84094b36ae:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecab0be2a44b7ecf91bdbd5cd360d84937=[3364901]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 22 Sep 2022 05:11:41 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d1790fcdd95202c86039609ab25e62d0
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash b803a6ce3f92e2c474869f819e011de2
cb173569b4402d022e65ae4395ee94b17f3a2a74
92dff408426ce81f09abe452d8b9532064f0ec96bb42264493fd4e8f92f098c9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "92DFF408426CE81F09ABE452D8B9532064F0EC96BB42264493FD4E8F92F098C9"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7181
Expires: Thu, 22 Sep 2022 07:11:22 GMT
Date: Thu, 22 Sep 2022 05:11:41 GMT
Connection: keep-alive
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/close.png
200 OK 6.0 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/close.png
IP
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/close.png HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: image/png
content-length: 5982
last-modified: Fri, 21 May 2021 10:10:48 GMT
etag: "60a78728-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4302438
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CvMxi%2FqcJrO%2Bmedq61mzEfoqGH97ceU2pnRWA9MwvraTbQ%2Fj3apAYGLd4WYpLLH9vZ9I7kVU6rzz83qqgjFDgtytanyhNsXA3jQPCgqftfVQbZWhcA94wVxsSmNrRitSZhg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a94795e72c0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/index.html
200 OK 2.6 kB URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/index.html
IP
File type HTML document, ASCII text
Hash 48fa5fb9dcc41cb3201289f426fc2f61
79de1ad1e7000dc698104248b627fc5b4ba5246f
c102958a11037fdf600cf378c90cb3674a4f2c5b299838917bc02aca2796dd61
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: text/html
last-modified: Wed, 09 Feb 2022 14:15:28 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 583677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VMIDB0PZJv4UD0cLzXZIvtYZF253poYWBr2g9FtiCSibmRGwmi0M9ARYhY9sCAxj%2FndA6tDTKHLLxvvmGMGtLKezMGsTLz1I0tjd%2FXh2LW7fH8lvdgv%2FXhcbR%2Fpc76SqLa792M0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a936e62b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/number.png
200 OK 1.1 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/number.png
IP
File type PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e4414e85c588bf7db195e49c02ab2bb
09254e79b255f1b2dfe45adbbe44583a4b433782
0b977ec6e7cf5d35df03cd3a8041f5f523f5d4059ac67c152c0a7b613e20b762
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/number.png HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: image/png
content-length: 1138
last-modified: Fri, 21 May 2021 10:10:48 GMT
etag: "60a78728-472"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4302438
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ocoruug3rfC5Z6wBl06FeB7Ba9kqtc0pqXPCAwXsKmRM0%2BzdvZx074gHfcq8K1b5BW9qPeWPKkR5tGXHIUEqRPuO%2FVS%2F6BeTq2bm1VqUGGTCXP5Alsf9ojNKzj15VNj9OY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a94796072c0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
quarrelaimless.com/pixel/purst?dl=0&th=0&sc=0&rs=1729&rd=1729&fd=747&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 quarrelaimless.com/pixel/purst?dl=0&th=0&sc=0&rs=1729&rd=1729&fd=747&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1729&rd=1729&fd=747&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: quarrelaimless.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 22 Sep 2022 05:11:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/icon.png
200 OK 107 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/icon.png
IP
File type PNG image data, 340 x 340, 8-bit/color RGB, non-interlaced\012- data
Size 107 kB (106874 bytes)
Hash c1f6eb397e4025eb9b9f152caf975d28
0fef898a70d937ab0982906947fcb2826a7fde3c
be6b906095a91adeb37fdb83b3567252be9406419a8c7a65e9d62332a3415e99
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/img/icon.png HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: image/png
content-length: 106874
last-modified: Tue, 08 Feb 2022 14:16:16 GMT
etag: "62027b30-1a17a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4302438
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nfW6QMToF%2BV5FTA4Jba3CB0LynsuA8ela4JutH8CUUHrunVCkjvOYprhYjktsYJKWnpDGFs7WzovSMOWzwFiPCxSOapbDd2eV%2F0K06kqhw7pNyufgWxEfbDzV9GxVyLq%2FNk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a94796272c0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://waaw.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 34653
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://waaw.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 34653
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
governessmagnituderecoil.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 governessmagnituderecoil.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Cookie: u_pl=17334947; uid_id2=207c5e8a-a86c-4d6a-b957-9b84094b36ae:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecab0be2a44b7ecf91bdbd5cd360d84937=[3364901]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 22 Sep 2022 05:11:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/js/script.js
200 OK 984 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/js/script.js
IP
Hash 62ba978cb4fc08beadecfc749c3c806b
a5e181ac4f5ca3f3cdd71185785908a012c4dab5
32fd488136669f52ad8e941721e7fd64801bbebcf66a1d31202674516169ea4b
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: application/javascript
last-modified: Fri, 21 May 2021 10:10:50 GMT
etag: W/"60a7872a-2c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4302079
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NvBrEib%2Fo9YwW1SiIHyXBwV%2BfOCjIQiRct2UQBRTYCv3Rm1Nqj8GlltkSwamgoWcGATd6fRRTPSD6dNzf%2BcOgWCAqcQahEB84WtXI2UwR92k9HQn8C0x%2FIHEdC29Tk5fT6Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a9509a972c0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 6b758541369196b9e7b5fdb23baa05a1
c19e7569ecfd263f95421750293ea01297d6489c
7ee27f33a2c6a9a669d5dcba57565601cbd8ec0f33581805b6c66f48fe43c087
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 354
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 05:11:42 GMT
Last-Modified: Thu, 22 Sep 2022 05:05:48 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
waaw.to/ad/api/popunder.js
200 OK 497 B URL HTTP/2 waaw.to/ad/api/popunder.js
IP
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with no line terminators
Hash 9e1f0ce709cbbe47df62444c4041a483
5f540ef6b562cdfa8fb98396b8643eaf123622ee
153acd9a70acc76dec3a48fcb75104dcb59bb7921b10aaebc1b9c93cf5d3ca1c
GET /ad/api/popunder.js HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=NPvRPisdP2cqOQZWsBMP; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Sun, 17 Jul 2022 16:41:23 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 15 Sep 2021 14:06:22 GMT
etag: W/"6141fdde-15"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
x-cache-status-inferno-s: HIT
x-inferno-location: static
accept-ranges: bytes
age: 5747416
ddg-cache-status: HIT,MISS
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2
q.xmlrtb.com/r?fid=k2mHN2AHw88
302 Found 0 B URL HTTP/2 q.xmlrtb.com/r?fid=k2mHN2AHw88
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r?fid=k2mHN2AHw88 HTTP/1.1
Host: q.xmlrtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Sep 2022 05:11:42 GMT
location: https://c.xmlrtb.com/cf?id=4374863798206430656&sid=k2mHN2AHw88&subid=0000&fid=19277&redir=1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QAUkk1uGwO80HitkMmAoN3uErVWMavxNXRCqu3i1Saelv9tgfWrMZMFO54%2FqYzKytnfL7tnuokMKaHPBiHo10sR0y21eMYmWP%2BbabIQgpl33fmAJQvbCiUD%2BQI9ECHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e88a8f1eac72c7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zap.buzz/lxAR5ZJ
302 Found 766 B IP
Hash 98312ee739c8550771697852fd4f3e74
28020cfd75abed6cccf090365c4757d4b1172566
35af60bc9abdcdd64554495ca4d6863a8c640e9a98584f2c9297d9579140c1d4
GET /lxAR5ZJ HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Sep 2022 05:11:40 GMT
content-type: text/html; charset=utf-8
location: https://q.cachegorilla.com/r?fid=B79SGewuO6N
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.YyvujA.9HEUpTebvftmLMJmj3zikuiPpFM; Expires=Thu, 22 Sep 2022 05:41:40 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rM2HZz4PimSrVtocV%2B2Nzhn2vjPeC4Uoqi8FoIemzMyC9lSirDGMaj1Yb8Kb4YxrBhzC77Ta6vvHIiVUNRuFnd2IhvIkhpUVd5CekrDBUc%2FYhfKycA3V4XsW7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e88a8e59d3b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9b921a1b8186e861e357f50f9d14c742
21735155a45295c2121ed4c7a9e17754134d6d55
dce2ac48bdad03cb5b4b222f5ec6125a4f12de11e9c9049beaee5622eb1bf447
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 05:11:43 GMT
Last-Modified: Thu, 22 Sep 2022 04:01:15 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ug3ljC6Ucw2Slk7JrjwDWIiOxPN3rYSnqdVdS7oyxHWm4W8NC7QzIg==
Age: 4228
xml.popmonetizer.com/redirect?feed=453690&auth=51bnE2&pubid=150133
302 Found 0 B URL HTTP/1.1 xml.popmonetizer.com/redirect?feed=453690&auth=51bnE2&pubid=150133
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=453690&auth=51bnE2&pubid=150133 HTTP/1.1
Host: xml.popmonetizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 22 Sep 2022 05:11:43 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://www.toromclick.com/feed/click/?t1=128&tid=663&uid=102&subid=453690&id=b0ae1ada33c71d5f340bb668d55ac6ec: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
Pragma: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55cf66067c732b9abc6a1f2ee4258081
f3479550903ad38e336b566912bb5c1553e1e083
dcfd862b61476fa309dde0bd2dbd7bce43dc834ba2969bb703a46c6ad36d52c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DCFD862B61476FA309DDE0BD2DBD7BCE43DC834BA2969BB703A46C6AD36D52C6"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10538
Expires: Thu, 22 Sep 2022 08:07:22 GMT
Date: Thu, 22 Sep 2022 05:11:44 GMT
Connection: keep-alive
www.toromclick.com/feed/click/?t1=128&tid=663&uid=102&subid=453690&id=b0ae1ada33c71d5f340bb668d55ac6ec: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
302 Found 138 B URL HTTP/1.1 www.toromclick.com/feed/click/?t1=128&tid=663&uid=102&subid=453690&id=b0ae1ada33c71d5f340bb668d55ac6ec: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
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with no line terminators
Hash ef35e6a22da7afd3b97c9afeca117355
c15fc04e79724de4f2fd20d5e6163a52e8bb5bdf
979618a6f690d16647868fad7d8754f865b0c96504bc93d81c68994cb4962051
GET /feed/click/?t1=128&tid=663&uid=102&subid=453690&id=b0ae1ada33c71d5f340bb668d55ac6ec:3454063a1041ad13a7aac944ee5d2cab113e8eebd8b8cbb9cec33503d735f9b1a621838eb1b9a8403036df6245edf16138f47e0070e89683f07d1a694c335b43f7456189dd10c23bc204b19168cf3c6bfa837ce5e6fdd4c17721a870d4096ec618529fe70ba44fa1722184cd9500ef654ab525033bad4cb920b0261217cfe4d7ad330e52d06bca6f1b18547a7906636feca6d4656e78f4343a4dc258e464dd5ece48c56af57f7fa7b765884f6d50e2219edd5ee80d4b389dfbde78c52eb6ce5b4988ba3b918c69e303bab8c31e560256ca92fe5c844e5c3b3b2df5d922f3d573ffe1c09b4d519416be31351f0ffed4c7bebb8d8c35b753fd75a69e704edbba1c489ca32acd9812f094a77a5e51174805 HTTP/1.1
Host: www.toromclick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Location: https://xml.serve-rtb.com/click?i=zFkhJvg1n7U_0
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 138
Date: Thu, 22 Sep 2022 05:11:44 GMT
Connection: keep-alive
Keep-Alive: timeout=5
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 83b8396ac37912b18dea4652846d5eea
d67efbd4308d137719a5c05d21df4aeca896c9fb
f99c48fbfdd56de0b192074ca19d137e76bb8e6add9e188b70564045312333eb
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F99C48FBFDD56DE0B192074CA19D137E76BB8E6ADD9E188B70564045312333EB"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10071
Expires: Thu, 22 Sep 2022 07:59:35 GMT
Date: Thu, 22 Sep 2022 05:11:44 GMT
Connection: keep-alive
zap.buzz/Jr1zAzZ
302 Found 358 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9c18fbb45e7da4c8641e8d2c66cb5368
c5c07db05f641074937c0c28493358eb5c76b417
09a4e8d437cac168ea59752927a87a85a906f03035fe8ab1de859a417fc46b3c
GET /Jr1zAzZ HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Sep 2022 05:11:40 GMT
content-type: text/html; charset=utf-8
location: https://xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.YyvujA.9HEUpTebvftmLMJmj3zikuiPpFM; Expires=Thu, 22 Sep 2022 05:41:40 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LatinlzFDid0dAHYTsX8ibEC3agYQcR4wjsUeKjY%2FWjPANIc%2FLeASeincwHuyzRyk%2FTb1Aq6jjQ%2FjF%2BQopVOkRK4dWZBYDm%2B6HHvJ9dSQb3HwT6LQ6T4kCdYjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e88a8e59d6b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xml.serve-rtb.com/click?i=zFkhJvg1n7U_0
302 Found 0 B URL HTTP/2 xml.serve-rtb.com/click?i=zFkhJvg1n7U_0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=zFkhJvg1n7U_0 HTTP/1.1
Host: xml.serve-rtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Sep 2022 05:11:44 GMT
content-length: 0
location: https://swbvideo.com/download-song
cache-control: no-store
age: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ll4zOQi5RNqvszRxenNmrtvlTVcLBJ1RSbat8xCK5p8y8nFEU2lcWihaLoUITcoaDscBkabE%2BCSaokpdXDjZblCh%2BRcI8%2BTDDMACV6AIfSd9rJsz0aDV7%2BCKSPSotEPmcqcdNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e88aa5e86a75a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 83b8396ac37912b18dea4652846d5eea
d67efbd4308d137719a5c05d21df4aeca896c9fb
f99c48fbfdd56de0b192074ca19d137e76bb8e6add9e188b70564045312333eb
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F99C48FBFDD56DE0B192074CA19D137E76BB8E6ADD9E188B70564045312333EB"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10071
Expires: Thu, 22 Sep 2022 07:59:35 GMT
Date: Thu, 22 Sep 2022 05:11:44 GMT
Connection: keep-alive
swbvideo.com/download-song
301 Moved Permanently 503 B URL HTTP/2 swbvideo.com/download-song
IP
Hash 05f7289bda7a9158e58f3e674ff5f4f7
e9271af1aef8800cd59b4eef3e80131b59953291
8303f2f015d226280d2f52d5edc617c2672360d935613240063c8716e4f84f09
GET /download-song HTTP/1.1
Host: swbvideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 22 Sep 2022 05:11:44 GMT
location: https://www.profitablegatetocontent.com/nssf9mtj?key=777956981b4131daa8fef7db044ba06c
cache-control: max-age=3600
expires: Thu, 22 Sep 2022 06:11:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A5R%2BnNpZQQ2fHPTFUiX9cEHWfOw%2FZm8pF9n2lMGhM3R2JIPkJKDCBAg4iNYe3JYNsGSAc1AztfvIiuWjNRMmLJ0SyLT17kNd%2BX9K%2BL73pGcXR8C8ZrkNbXt8TQkc5gM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88aa6bf91b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-s7.cfeucdn.com/flv/api/files/thumbs_new/2021/02/01/1612170098lh7r3/1612170098lh7r3-640x480-3.jpg
200 OK 30 kB URL HTTP/2 cdn-s7.cfeucdn.com/flv/api/files/thumbs_new/2021/02/01/1612170098lh7r3/1612170098lh7r3-640x480-3.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1720x720, components 3\012- data
Hash 7cfddbfc55efe898c69fbff069d76c53
f9b6a537686e43aa8a71567e7a07b100464fd907
727f36fb430fba3db62d147b850d8465ed1100e10634ac6cf72c35f86cadd78f
GET /flv/api/files/thumbs_new/2021/02/01/1612170098lh7r3/1612170098lh7r3-640x480-3.jpg HTTP/1.1
Host: cdn-s7.cfeucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:44 GMT
content-type: image/jpeg
content-length: 30014
last-modified: Mon, 01 Feb 2021 09:38:47 GMT
etag: "6017cc27-753e"
server: cloudflare
expires: Fri, 29 Aug 2121 05:11:44 GMT
cache-control: max-age=3122064000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32a56657ee87189d84e36aa919cd2469
c93ce15e966956dbaa7ed6dae6b56c2745114833
2134db13c1af8c05396990aa5c37b0f5d8e9e3561f70cea5540cd6900f2c468f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2134DB13C1AF8C05396990AA5C37B0F5D8E9E3561F70CEA5540CD6900F2C468F"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2185
Expires: Thu, 22 Sep 2022 05:48:09 GMT
Date: Thu, 22 Sep 2022 05:11:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32a56657ee87189d84e36aa919cd2469
c93ce15e966956dbaa7ed6dae6b56c2745114833
2134db13c1af8c05396990aa5c37b0f5d8e9e3561f70cea5540cd6900f2c468f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2134DB13C1AF8C05396990AA5C37B0F5D8E9E3561F70CEA5540CD6900F2C468F"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2185
Expires: Thu, 22 Sep 2022 05:48:09 GMT
Date: Thu, 22 Sep 2022 05:11:44 GMT
Connection: keep-alive
www.profitablegatetocontent.com/nssf9mtj?key=777956981b4131daa8fef7db044ba06c
200 OK 1.2 kB URL HTTP/1.1 www.profitablegatetocontent.com/nssf9mtj?key=777956981b4131daa8fef7db044ba06c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 89d2cdf0843fd90cc61b77bebbe77937
22c7280fe909913452c26380cfac125a4d79cbec
e4a4059fbf017d42eb3ba95da0b28eb967fb00fd3947d96310adb318ab6ff493
Analyzer Verdict Alert quad9 Sinkholed
GET /nssf9mtj?key=777956981b4131daa8fef7db044ba06c HTTP/1.1
Host: www.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 22 Sep 2022 05:11:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17248558; expires=Fri, 23 Sep 2022 05:11:44 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.Cs2iRR8B_Pmdt6sgdI56uvuTfW2fKBvRfjIgbl7I9gc; expires=Thu, 22 Sep 2022 05:12:44 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cfb53c64017747b2121d6ab304456d47
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash f256516b6e8431deb88496a17023ca1c
5b5947885465ab75598f9b605655f87c1410c6be
5e6d11f96fe0acc1e6cc0c082fb6c75354326fa9c77adce38c17f24067aef2fc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.profitablegatetocontent.com
Connection: keep-alive
Referer: https://www.profitablegatetocontent.com/
Cookie: uid_id2=207c5e8a-a86c-4d6a-b957-9b84094b36ae:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:44 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.profitablegatetocontent.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=ab0be2a44b7ecf91bdbd5cd360d84937&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=ab0be2a44b7ecf91bdbd5cd360d84937&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=ab0be2a44b7ecf91bdbd5cd360d84937&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 22 Sep 2022 05:11:45 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b840f65aa80073fc5a193a354ea36e10
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=f9f04e429487bb9ba54c1aa49ea7bed4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=f9f04e429487bb9ba54c1aa49ea7bed4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=f9f04e429487bb9ba54c1aa49ea7bed4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 22 Sep 2022 05:11:45 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cc9d2070a328ab144250fa834f72b7df
Strict-Transport-Security: max-age=0; includeSubdomains
counter.yadro.ru/hit?rhttps%3A//waaw.to/f/JjiChhaIM4Km;s1280*1024*24;uhttps%3A//waaw.to/e/JjiChhaIM4Km%3Fhttp_referer%3Dhttps%253A%252F%252Fplayfilm.to%252F;0.2548931367236287
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?rhttps%3A//waaw.to/f/JjiChhaIM4Km;s1280*1024*24;uhttps%3A//waaw.to/e/JjiChhaIM4Km%3Fhttp_referer%3Dhttps%253A%252F%252Fplayfilm.to%252F;0.2548931367236287
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?rhttps%3A//waaw.to/f/JjiChhaIM4Km;s1280*1024*24;uhttps%3A//waaw.to/e/JjiChhaIM4Km%3Fhttp_referer%3Dhttps%253A%252F%252Fplayfilm.to%252F;0.2548931367236287 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 22 Sep 2022 05:11:45 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Tue, 21 Sep 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0c71affb471cd9fd3e6d10b7be089d9b
ce7b677e947048a1d9f65f7c772e007e0f99e631
7b1a2b6b7bf3a81f3c3df9fed6cfd96078bd48e5f91cc5531ded6d16b9a9e120
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 05:11:45 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Mon, 26 Sep 2022 03:33:43 GMT
ETag: "ce7b677e947048a1d9f65f7c772e007e0f99e631"
Last-Modified: Thu, 22 Sep 2022 03:33:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1267
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74e88aabcec8fac4-OSL
www.profitablegatetocontent.com/nssf9mtj?shu=36815a626e64a090ca055c8a91b7b152258e5c505769c321c1d636cb191c974c61aaf5f3f582e30ccf846119dd718064de8a44a1ee6302ace88e22dbeaa68324fa3d6d0b69abc52a91dba9045671ee43569d7b01&pst=1663823564&rmtc=t&uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1&pii=true&in=false&key=777956981b4131daa8fef7db044ba06c&refer=https%3A%2F%2Fpopxperts.com%2F
302 Found 0 B URL HTTP/1.1 www.profitablegatetocontent.com/nssf9mtj?shu=36815a626e64a090ca055c8a91b7b152258e5c505769c321c1d636cb191c974c61aaf5f3f582e30ccf846119dd718064de8a44a1ee6302ace88e22dbeaa68324fa3d6d0b69abc52a91dba9045671ee43569d7b01&pst=1663823564&rmtc=t&uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1&pii=true&in=false&key=777956981b4131daa8fef7db044ba06c&refer=https%3A%2F%2Fpopxperts.com%2F
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /nssf9mtj?shu=36815a626e64a090ca055c8a91b7b152258e5c505769c321c1d636cb191c974c61aaf5f3f582e30ccf846119dd718064de8a44a1ee6302ace88e22dbeaa68324fa3d6d0b69abc52a91dba9045671ee43569d7b01&pst=1663823564&rmtc=t&uuid=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1&pii=true&in=false&key=777956981b4131daa8fef7db044ba06c&refer=https%3A%2F%2Fpopxperts.com%2F HTTP/1.1
Host: www.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitablegatetocontent.com/nssf9mtj?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=17248558
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.17.6
Date: Thu, 22 Sep 2022 05:11:45 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=17248558
Set-Cookie: u_pl=17248558; expires=Fri, 23 Sep 2022 05:11:45 GMT
uid_id2=207c5e8a-a86c-4d6a-b957-9b84094b36ae:3:1; expires=Thu, 29 Sep 2022 05:11:45 GMT
pdhtkv=true; expires=Fri, 23 Sep 2022 05:11:45 GMT
uncs=1; expires=Fri, 23 Sep 2022 05:11:45 GMT
pdhtkv28=true; expires=Fri, 23 Sep 2022 05:11:45 GMT
uncs28=1; expires=Fri, 23 Sep 2022 05:11:45 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eb28d8ddc5f4c971bbfd4de6d8c8930a
Strict-Transport-Security: max-age=0; includeSubdomains
mc.yandex.ru/metrika/tag.js
200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (593)
Hash 3f01a6fe4be69809cd0b0d740ab50c40
8366aca59939c8a0cfe3bc4c7732e9f8cf031375
025a3b03a1e5af9f06a8fb2d3e113c5b73410e0e440cf34869c97b20ccb77829
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72206
date: Thu, 22 Sep 2022 05:11:45 GMT
access-control-allow-origin: *
etag: "63295b76-11a0e"
expires: Thu, 22 Sep 2022 06:11:45 GMT
last-modified: Tue, 20 Sep 2022 09:19:34 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=17248558
301 Moved Permanently 0 B URL HTTP/2 adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=17248558
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=17248558 HTTP/1.1
Host: adserving.unibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatetocontent.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 0
location: https://no.unibet.com/stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_BD9A30A65B2041DEA12B5F8C0CFCEE19&sref=ADST&ADST=17248558&affiliateId=1&pid=86148623&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Thu, 22 Sep 2022 05:11:45 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 22 Sep 2022 05:11:45 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86148623%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1663823505440)%5c%2f%22%2c%22CookieTag%22%3a%223795086148623451240919C2022922511%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228132759798%7c1%22%7d%5d; domain=.unibet.com; expires=Sat, 22-Sep-3021 05:11:45 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=19, origin; dur=44
X-Firefox-Spdy: h2
waaw.to/js/d_check.js?34
200 OK 0 B IP
ASN #262254 DDOS-GUARD CORP.
GET /js/d_check.js?34 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=kgHMZJ6SuyMNFARB5xci; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Thu, 27 Feb 2020 14:57:53 GMT
etag: W/"5e57d8f1-d8a"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
zap.buzz/vqlWwD8
302 Found 0 B IP
GET /vqlWwD8 HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Sep 2022 05:11:40 GMT
content-type: text/html; charset=utf-8
location: https://q.xmlrtb.com/r?fid=k2mHN2AHw88
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.YyvujA.9HEUpTebvftmLMJmj3zikuiPpFM; Expires=Thu, 22 Sep 2022 05:41:40 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QXkbruUubPzaCLau6A%2BdtUoUJWTa8u3JQ2%2Bb1BM76CO84s%2FL3F5XErrMQ8hz3OQSYrGCAmX7SQyoZwPv0jzDuuQ7lvmvl2LGNxBI6JXcYwpeJaJk9i%2F%2FoyHuPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e88a8e59d5b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
waaw.to/js/video.counters.2.js?117
200 OK 0 B URL HTTP/2 waaw.to/js/video.counters.2.js?117
IP
ASN #262254 DDOS-GUARD CORP.
GET /js/video.counters.2.js?117 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Cookie: uid=xvBb0bMpeHxpR3P*IfLp0CurZGU9anAB; dom3ic8zudi28v8lr6fgphwffqoz0j6c=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1; sb_main_ab0be2a44b7ecf91bdbd5cd360d84937=1; sb_count_ab0be2a44b7ecf91bdbd5cd360d84937=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=governessmagnituderecoil.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=x5Yp16NsMYnmB73ToEgb; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:44 GMT
date: Thu, 22 Sep 2022 05:11:43 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 06 Feb 2022 19:35:56 GMT
etag: W/"6200231c-2b8"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/css/animate.css
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/css/animate.css
IP
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: text/css
last-modified: Fri, 21 May 2021 10:10:46 GMT
etag: W/"60a78726-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4301856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b734na1fr6igtfOst%2FLq9zd%2FxHY0nd7Ta4oqZmUJhePL4WDwNWe8TyXPIgQ6z5dSfUDC%2Bg2zgfAUNRGsf%2BnBwzMz9NjidyQpS4bBoVq%2BhXdbtdx0jodQ4zF5EOQdqBXORSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a93f92072c0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.popxperts.com/w3ar3g0d
301 Moved Permanently 0 B URL HTTP/2 www.popxperts.com/w3ar3g0d
IP
GET /w3ar3g0d HTTP/1.1
Host: www.popxperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 22 Sep 2022 05:11:42 GMT
location: https://popxperts.com/w3ar3g0d
cache-control: max-age=3600
expires: Thu, 22 Sep 2022 06:11:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WRxMmyyqB5KB5q8KPw0EM7Te9%2F4%2FFX0W%2BJ33V9QutXF%2BY2F%2F19cdwn%2BVDsezNtvX8xmSxPGlHi8uc%2BHdsWDX0Ku1h1qQks6oJOizzBuZ8o162lNL1lBWL9olVFgUGM3trb%2FoTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a9a9ff1889d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
waaw.to/js/adv/fuckadblock.js?2
200 OK 0 B URL HTTP/2 waaw.to/js/adv/fuckadblock.js?2
IP
ASN #262254 DDOS-GUARD CORP.
GET /js/adv/fuckadblock.js?2 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=HiR6xBBvyW9BGPQm6s3u; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 27 Aug 2019 17:39:04 GMT
etag: W/"5d656ab8-369e"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
waaw.to/js/script-2.12.5.js
200 OK 0 B URL HTTP/2 waaw.to/js/script-2.12.5.js
IP
ASN #262254 DDOS-GUARD CORP.
GET /js/script-2.12.5.js HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Cookie: uid=xvBb0bMpeHxpR3P*IfLp0CurZGU9anAB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=oPUmNR90VHbOLLEO7BkN; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 01 Dec 2020 19:28:37 GMT
etag: W/"5fc69965-4cb8"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
waaw.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=64751936
200 OK 0 B URL HTTP/2 waaw.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=64751936
IP
ASN #262254 DDOS-GUARD CORP.
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=64751936 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Cookie: uid=xvBb0bMpeHxpR3P*IfLp0CurZGU9anAB; dom3ic8zudi28v8lr6fgphwffqoz0j6c=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1; sb_main_ab0be2a44b7ecf91bdbd5cd360d84937=1; sb_count_ab0be2a44b7ecf91bdbd5cd360d84937=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=governessmagnituderecoil.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=bh0heYI9ylMrGKqDtIQh; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:44 GMT
date: Thu, 22 Sep 2022 05:11:43 GMT
content-type: application/json
access-control-allow-origin: *
x-inferno-location: banner
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
popmyads.com/serve/22236/66660/szqpmqqoapdpgpq/aHR0cDovL3lvZmF1cmxzLmNvbQ==
200 OK 0 B URL HTTP/2 popmyads.com/serve/22236/66660/szqpmqqoapdpgpq/aHR0cDovL3lvZmF1cmxzLmNvbQ==
IP
GET /serve/22236/66660/szqpmqqoapdpgpq/aHR0cDovL3lvZmF1cmxzLmNvbQ== HTTP/1.1
Host: popmyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:44 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rzcbxUirkKb0rIKzayjAPpD5f45Bq7KvYfuTTpf1I%2FXPrvmxvY6VqOQZEhCAWXCnALU7yJL2WTMaF3%2BzmdP82pHTxDZNlUbywNiGsfB%2BjBRvgaJklnpotSEMYnRMB3Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e88aa65b29b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
200 OK 0 B URL HTTP/2 unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
IP
GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:39 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ"
via: 1.1 fly.io
fly-request-id: 01F3YGTHVETVB9B7TG2TW5GR8F
cf-cache-status: HIT
age: 13134263
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e88a869c51b521-OSL
content-encoding: br
X-Firefox-Spdy: h2
waaw.to/js/embed.205.js?736
200 OK 0 B URL HTTP/2 waaw.to/js/embed.205.js?736
IP
ASN #262254 DDOS-GUARD CORP.
GET /js/embed.205.js?736 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=bXxsJeo3jt6Vi1RwF0xV; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Thu, 04 Aug 2022 18:07:34 GMT
etag: W/"62ec0ae6-298ce"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/js/jquery.min.js
IP
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/js/jquery.min.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: application/javascript
last-modified: Fri, 21 May 2021 10:10:50 GMT
etag: W/"60a7872a-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4302438
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w9xPwb%2BNEDB2HntgK5MuR0UJ%2B9vwmM%2BGlFS4w5mvmp6x27fjHR7xkQfltD4OqHNiFZn7k%2BrbAu1IJ%2BMlFbezWnxZkpmB7vczoII60At7KSRCKBHYiZ7u2JzjX0CIi%2FxBy5A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a94796472c0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/css/style.css
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/css/style.css
IP
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/16/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://waaw.to
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:41 GMT
content-type: text/css
last-modified: Mon, 31 Jan 2022 14:46:40 GMT
etag: W/"61f7f650-2516"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4301856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BwbJcTnrhNGJQFKfSwtboKRWELcD50oqdyadAUzeqPmxEKNUH3pmd7PjucDyBX3wxDaWsaXxptf6f2uP8CmXG2S4NAOcCIb%2F1K7IlXFC8NS%2F5kkJUWKLvHYeU4RIY57u0GY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e88a93f91f72c0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2019/05/Come-Undone-Poster.jpg
200 OK 0 B URL HTTP/2 playfilm.to/wp-content/uploads/2019/05/Come-Undone-Poster.jpg
IP
ASN #208414 WEDOS Internet, a.s.
GET /wp-content/uploads/2019/05/Come-Undone-Poster.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 105860
last-modified: Wed, 24 Jun 2020 07:53:35 GMT
etag: "19d84-5a8cfc5df5dc0"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
playfilm.to/wp-content/uploads/2020/05/Knives-Out-2019-Poster-90x135.jpg
200 OK 0 B URL HTTP/2 playfilm.to/wp-content/uploads/2020/05/Knives-Out-2019-Poster-90x135.jpg
IP
ASN #208414 WEDOS Internet, a.s.
GET /wp-content/uploads/2020/05/Knives-Out-2019-Poster-90x135.jpg HTTP/1.1
Host: playfilm.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/movies/fidelity/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 05:11:37 GMT
content-type: image/jpeg
content-length: 4794
last-modified: Wed, 01 Jul 2020 14:55:00 GMT
etag: "12ba-5a96279dd7900"
cache-control: max-age=604800
expires: Thu, 29 Sep 2022 05:11:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Questrial%3A300%2C400%2C500%2C700&ver=2.4.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Questrial%3A300%2C400%2C500%2C700&ver=2.4.1
IP
GET /css?family=Questrial%3A300%2C400%2C500%2C700&ver=2.4.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playfilm.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 05:11:37 GMT
date: Thu, 22 Sep 2022 05:11:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
200 OK 0 B URL HTTP/2 unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
IP
GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 05:11:39 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sun, 27 Apr 2014 20:04:54 GMT
etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg"
via: 1.1 fly.io
fly-request-id: 01G75513388K1MR4R8RW1AYXTV-fra
cf-cache-status: HIT
age: 6867000
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e88a86ac54b521-OSL
content-encoding: br
X-Firefox-Spdy: h2
waaw.to/styles/global/embed_player.3.css?130
200 OK 0 B URL HTTP/2 waaw.to/styles/global/embed_player.3.css?130
IP
ASN #262254 DDOS-GUARD CORP.
GET /styles/global/embed_player.3.css?130 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=sM7G2HpBehqBIpPpTktY; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:39 GMT
date: Thu, 22 Sep 2022 05:11:38 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 09 Dec 2020 22:16:37 GMT
etag: W/"5fd14cc5-1701"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
waaw.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=37589856
200 OK 0 B URL HTTP/2 waaw.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=37589856
IP
ASN #262254 DDOS-GUARD CORP.
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=37589856 HTTP/1.1
Host: waaw.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://waaw.to/e/JjiChhaIM4Km?http_referer=https%3A%2F%2Fplayfilm.to%2F
Cookie: uid=xvBb0bMpeHxpR3P*IfLp0CurZGU9anAB; dom3ic8zudi28v8lr6fgphwffqoz0j6c=207c5e8a-a86c-4d6a-b957-9b84094b36ae%3A3%3A1; sb_main_ab0be2a44b7ecf91bdbd5cd360d84937=1; sb_count_ab0be2a44b7ecf91bdbd5cd360d84937=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=governessmagnituderecoil.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=hqIDdOLwd5cEkwfXJawg; Domain=.waaw.to; HttpOnly; Path=/; Expires=Fri, 22-Sep-2023 05:11:44 GMT
date: Thu, 22 Sep 2022 05:11:43 GMT
content-type: application/json
access-control-allow-origin: *
x-inferno-location: banner
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
45.138.107.17
192.243.61.225
23.36.79.11
104.21.53.136
77.88.21.119
213.186.120.177
93.184.220.29
3.64.106.196
190.115.19.71