GET i.ibb.co/pyC2VvJ/alert-xxl.png
200 OK 5.6 kB URL GET HTTP/2 i.ibb.co/pyC2VvJ/alert-xxl.png
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d0eed07b450044fdca282d1daf8a58c
794e1284cdf81fd60154955c1805282ae21240cd
baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af
GET /pyC2VvJ/alert-xxl.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/png
content-length: 5554
last-modified: Mon, 07 Aug 2023 04:09:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/app/apx14.js
200 OK 18 kB URL GET HTTP/3 kinosimka.theproxy.to/app/apx14.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (7663), with no line terminators
Hash dfb1f327618e201778f2de85cfbcd173
fceb89a2221463e5bc5a71feff1247683ab08cc5
dc03bc8b63938916a73dd976e186d05559ddc61da2725e1063b7936fa9f0fc33
GET /app/apx14.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Sep 2020 18:26:19 GMT
etag: W/"5f61074b-1def"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GrhGdQ25UWxDFu7WxmxXSwD63p0jVq%2FTp%2Bzfe0jB2AKmAqUAVmq5iV%2FzCzhtOHYhbpJVfnbqQ5hnkamuRETeQ%2FVE30kS1sm2q77RhfY5kmnZ10IZR1NCIzgfw9eJndBJrKitarqfVoc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee99fbeb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js
200 OK 14 kB URL GET HTTP/1.1 heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjectheartilyscales.com
FingerprintF0:0C:2F:00:27:D9:41:A2:9B:5F:2C:5F:B6:BE:55:43:BB:A5:CC:81
ValidityFri, 13 Oct 2023 06:44:51 GMT - Thu, 11 Jan 2024 06:44:50 GMT
File type ASCII text, with very long lines (40553), with no line terminators
Hash 3bfc3613bedead421fd3ca0f5fd9e7eb
ce70c9d62dc1fc2dd57498bdd63713e4f96ec8a7
32ee8e635cea61b459c3626e72d10b3949911eb860a255e967ccbee260588f45
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1
Host: heartilyscales.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 05 Nov 2023 20:55:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a4c480564b6d0b18bb1fe234423858d0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET www.youtube.com/s/player/9d15588c/player_ias.vflset/en_US/embed.js
200 OK 18 kB URL GET HTTP/3 www.youtube.com/s/player/9d15588c/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (3391)
Hash 00fcd8f19f33cdd43dfbd93f93b1cacf
22652f87a2dbe4da673b3b8957c76f122e803559
84903214c4c40def6908be4fb42fd9f2b01ef82af69eee3ec6c8dbcbdaa6a7e7
GET /s/player/9d15588c/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 17508
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 18:22:17 GMT
expires: Sun, 03 Nov 2024 18:22:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 01:51:00 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 95571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/s/player/9d15588c/www-player.css
200 OK 49 kB URL GET HTTP/3 www.youtube.com/s/player/9d15588c/www-player.css
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8dc2aaffee01544d7c0dfdc2d7600ce0
1499c1b257ee75da64ef5046d3ac9002ab302cb4
59640f904cf8abdc7a1d4189f3bb6ab83bfd60a8dd251a0abb5d5d3ab8a11b24
GET /s/player/9d15588c/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48897
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Nov 2023 07:28:44 GMT
expires: Thu, 31 Oct 2024 07:28:44 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 01:51:00 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 393984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/s/player/9d15588c/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/9d15588c/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (682)
Hash a7c1c62310f68f1a1c6a0b75b5039eec
f0907153b862018c2938c3ce5c7d1faf060903ed
781ca116ffbdbcc5677786946676f2fa8bd27fbb34137972524a4a11cc885a28
GET /s/player/9d15588c/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98339
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Nov 2023 07:28:44 GMT
expires: Thu, 31 Oct 2024 07:28:44 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 01:51:00 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 393984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 23:51:35 GMT
expires: Fri, 01 Nov 2024 23:51:35 GMT
cache-control: public, max-age=31536000
age: 248613
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 22:20:01 GMT
expires: Sat, 02 Nov 2024 22:20:01 GMT
cache-control: public, max-age=31536000
age: 167707
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET metrica-yandex.com/metrika/tag.js?1001
200 OK 19 kB URL GET HTTP/2 metrica-yandex.com/metrika/tag.js?1001
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectmetrica-yandex.com
Fingerprint7F:98:BE:19:EC:57:F9:63:C5:F4:E4:E0:81:7F:C3:45:FD:D3:E1:7D
ValiditySun, 17 Sep 2023 05:23:12 GMT - Sat, 16 Dec 2023 05:23:11 GMT
File type ASCII text, with very long lines (60271), with no line terminators
Hash ea67b2343fc359662afdae5d4c8c8e03
7f07219a8cd9d6d5c17e20bd7e80fac0281c2b18
5e31460a6eacabdc5895ad2ad898a4a570ac88f2794c61ddce6b0beee304eb11
GET /metrika/tag.js?1001 HTTP/1.1
Host: metrica-yandex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 30 Sep 2021 23:00:22 GMT
etag: W/"61564186-eb6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 921015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SUnt%2B3G9bNZqHM78U21TJPDiJgZovvvpkq9iAmFbyQiqGa%2BXFNJKjc6tQgauyaWuEeUMkV4mwGh7HNXNhvFSEj%2BuYG3s4UBIA4aIYeu2OcL5%2BuDGN%2BRgaVlmwh%2FLxMTGQE5PuVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee94c3cb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/9d15588c/player_ias.vflset/en_US/base.js
200 OK 775 kB URL GET HTTP/3 www.youtube.com/s/player/9d15588c/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (555)
Size 775 kB (774756 bytes)
Hash fc1b6b72d00a8f12c728d41730980d5a
6e2c1a91c7802aed7603a0f2bac758d29a9ef30f
ff66acf8eba8a719216c7d21bed3c0e6daef74c80ade61a784a21db4913ad8f4
GET /s/player/9d15588c/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 774756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Nov 2023 18:34:41 GMT
expires: Sun, 03 Nov 2024 18:34:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 01:51:00 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 94827
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET kinosimka.theproxy.to/uploads/posts/2018-03/1520479577-659403240.jpg
200 OK 53 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/posts/2018-03/1520479577-659403240.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 360x540, components 3\012- data
Hash 0972813784fb49199db280095f23cb1c
4045585bdce8b2a207ade214074ffef186793faa
a0190a203d37c80d6c9aee124c0ea78d84134001484eef07cc48a1da87e1e591
GET /uploads/posts/2018-03/1520479577-659403240.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mOaRl3zRjHNasWem9fpZ475HgQUB9E6vzdQmdVETJm6kpR5hqqUS36re0WnBXw83CYA9yNwESmiwCFYzM0pEluoNJbqfzHv5wxQhLIaxqNJKS%2BuA7cTR6xTQM9EEf%2B8y2pkN68GYDH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f72b523-OSL
alt-svc: h3=":443"; ma=86400
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 05 Nov 2023 20:55:09 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/templates/Default/js/search_new.js
200 OK 50 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/js/search_new.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash e37b605dbfb9248ba1d2990426e7c1ab
3450c78e9e27e86c5e48dc0092662512b6cf4b75
57032edcd75ecd2f984457c206000dfcccf092737cd7249bf83c74f6f531739e
GET /templates/Default/js/search_new.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/javascript;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3pOFfeJeDslIoclRXIfduKNoO%2FGuz0Q90lRVZVAALkoYjEu7IlqIzYc0%2BQ6vI7qHQTBJSdy39tm9jIuFFiKI8iycM0s1zLLc71pY5KrXUQnnj8TVafSA5PZFs%2Fk8PitGOLK5l9%2BQGuQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee97f9fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/app/x12.js
200 OK 35 kB URL GET HTTP/3 kinosimka.theproxy.to/app/x12.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (11180), with no line terminators
Hash 94efa3c05291ac5cccd32cc3a11c9724
3a033e4d6f5e5eaf76030a81c8a05c619de436c2
58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102
GET /app/x12.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Sep 2020 18:26:18 GMT
etag: W/"5f61074a-2bac"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RYhfcWm5Mm1965l%2FsQqUnqRd9Ob%2FhlIF41YEsIgBz%2BAyxaYY7%2B62ajR42mjDGyYnv0Hu0%2Fw%2FDv4%2FWACmCCbCJPDzmuHwnBAMx%2BQukM57aQ1dlsXQ0oeNUE8oTi2Uw%2FeY8bxUkGJAkbE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee99fbfb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/2b6f8f2a41c5d8dc41-uendi-li.jpg
471 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/2b6f8f2a41c5d8dc41-uendi-li.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash 34da6a97a10ee9009ce9bc501a4d6b80
bfb1e187ef467ec7b46a7eef98aee1cb0dc2b110
adf5c4740f37717cea4c8f627c312e2106811bd45c4db4f8b95c8ea5130a0ffb
GET /uploads/actors/2017-12/2b6f8f2a41c5d8dc41-uendi-li.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://dirp.me
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nTjFH%2FsD80q7JHLytLx60r1gECBcRjjs5jrinml27l%2FgCTDGZfAmqPAF3lcN7q5S0tCXNhfuSq41WdQSpTq3RHkCdHAOICA5iH%2F9phyCuAzwkxfuTBQKGVWnWzeEab4hC4FuWLNSl%2FE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef18d7db523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/d81ef8dc1ca0eacc62-salli-saffioti.jpg
18 kB URL GET kinosimka.theproxy.to/uploads/actors/2017-12/d81ef8dc1ca0eacc62-salli-saffioti.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash 6dc8a58d494aee563a44d50fd88d1b56
6a64eec4eedf65cfc71f3bc6306ac8d92cdd7eca
0f1096c7b63c9b0ff7aa118bc7a25ea671c716de3232e322c46c2bd494329115
GET /uploads/actors/2017-12/d81ef8dc1ca0eacc62-salli-saffioti.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://dirproxy.net
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kv0RaqVGpMXtz%2BE%2FRwBCiGDnke9cQJ2hqHNfUtm3T5l9BWmwCDAmjK4YcK7j5Vrj0s4OTW%2B07ImmibSATk4fzfz0%2BLNJPtcEjyorDzP%2B5G7AkEIKgtwQX%2Fwor33RtH33L3%2BMn4LPVHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1ad99b523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/a58443764a18b84a85-robin-saks.jpg
31 kB URL GET kinosimka.theproxy.to/uploads/actors/2017-12/a58443764a18b84a85-robin-saks.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash a9acb53eb5d2a988c07ea5906af93bf0
c4d7c0766138de2f5f98ee06b0d11c79e311a1c8
02ba19b38c85c05d4e727d62ea3a0744259db69ca6ca0938c7751870338e44c7
GET /uploads/actors/2017-12/a58443764a18b84a85-robin-saks.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://dirproxy.xyz
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UbjNZ6OBrEmgGCcggWdwsCnvg3bZ5bOPBDMkqsmZa46aNjK3gWTKEXtmGqc1UyiFK46bsLjBqeqXPQ8mW%2FXbUJ%2Byghbzy4qGe2PFlf5%2BiWEA7pxIO0kjW9XqHOoNj4x3NihS7ntps6c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1ad92b523-OSL
alt-svc: h3=":443"; ma=86400
OPTIONS jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 05 Nov 2023 20:55:09 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 929d0626ecb118eadcecfb2b96820e0d
243693dd3fd69984d148092fc5d3f1c87dd0451c
dc848383952c55904c403fa940956bc0f74b264087c49654d2f599336f7adf08
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1142
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 05 Nov 2023 20:55:09 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/posts/2018-03/1520429056-1287156464.jpg
200 OK 63 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/posts/2018-03/1520429056-1287156464.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 360x512, components 3\012- data
Hash a2d2a1af0048a557386808cc2b451254
4d403e6972b5bc3318bac8be8e882932448e886e
c0e6c2ca7193bd74f0b1530295e72998e91593fc16d9bbd633445ea32239d9d1
GET /uploads/posts/2018-03/1520429056-1287156464.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3imnK0GW7Knb6aEYOytTgJonCPlCXzYQ2jqfrFnWMh2BaCoPs%2FHDvH%2Bja5QLHfauY4o%2Bu8g5wPTtX6RBi6trqtLpEywg9QbQjVIKrp6jdPEQUEbpgwz7c5xmAKzLxDaZnv2AstbvsYw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f77b523-OSL
alt-svc: h3=":443"; ma=86400
GET www.youtube.com/generate_204?3nX1Fw
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?3nX1Fw
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?3nX1Fw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sun, 05 Nov 2023 20:55:10 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET kinosimka.theproxy.to/uploads/posts/2018-08/1535107477-1099401759.jpg
200 OK 21 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/posts/2018-08/1535107477-1099401759.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 200x290, components 3\012- data
Hash a5a3581fedad30ed622cf95f202d77ee
f3c3210f57719574deea2d49804a506b76de3f2a
c8ba5621b057a122b7974bdf2940f598fba895896fda717bdcd14815619f0427
GET /uploads/posts/2018-08/1535107477-1099401759.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zovaslwVGw6jFpq3VLemz48ra9jYzlGJmEc3scqPf329UCGm8i%2FA8a00RANX4kgFfzkFY0%2F8ySd4LmOurydTLnr7vaF%2Fp5LgYLT7tf4rMidPEob8vEcDLgq7Sd%2Br6KgvmaeAdaxdEtA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f48b523-OSL
alt-svc: h3=":443"; ma=86400
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1699217712268
Content-Type: application/json
X-Goog-Visitor-Id: CgswcERSRk80ZnVWQSirgqCqBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231031.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1699217708518&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Length: 16272
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 05 Nov 2023 20:55:12 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+781; expires=Tue, 04-Nov-2025 20:55:12 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 05 Nov 2023 20:55:12 GMT
cache-control: private
GET 123-proxy.net/
16 kB IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint39:06:EB:B7:48:A6:98:B1:CC:76:B0:F0:17:36:AE:99:58:B9:A0:A2
ValidityTue, 14 Feb 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (27091)
Hash 9e2b66cb08ec32bf4d92dcf2b60dca9e
0d3711161e890d77f791c21241a6abe93311ad6b
2a367604febbc190d38e7325183024d869925360f306c629f61dce41d46a5d44
GET / HTTP/1.1
Host: 123-proxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=lqntrbc3pna8jjuu9u06uqqkie; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gd44z4BllZl2L5%2FI26lcant7FvT0iLdO4IBmL08CLTrVY3VBhTimojKu7Jj99V3vwy3yZu4Z2SRD2c%2BE8HCWNQo1ZNVst0uQz8iVxf4b7T0MuAacXhitPj1PoazpybdC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef66a7e5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET adsvolume.com/get/c.php?d=ey9BcCVyXClk8joiMT0wM28s8nNpd6VfaWQiOi8yN3Uz8iwicDViXClk8jowfQ&r=0.5844635558030685-1699217707733
302 Found 0 B URL GET HTTP/2 adsvolume.com/get/c.php?d=ey9BcCVyXClk8joiMT0wM28s8nNpd6VfaWQiOi8yN3Uz8iwicDViXClk8jowfQ&r=0.5844635558030685-1699217707733
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjectadsvolume.com
Fingerprint30:48:46:57:E1:87:DC:C1:66:44:D3:5C:E2:6E:F3:FB:48:31:1A:38
ValidityThu, 07 Sep 2023 11:47:47 GMT - Wed, 06 Dec 2023 11:47:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/c.php?d=ey9BcCVyXClk8joiMT0wM28s8nNpd6VfaWQiOi8yN3Uz8iwicDViXClk8jowfQ&r=0.5844635558030685-1699217707733 HTTP/1.1
Host: adsvolume.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Sun, 05 Nov 2023 20:55:08 GMT
location: http://vibiu-dau.com/zclkvisitor/9a56f534-7c1d-11ee-99d7-0ab64e2c3247/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=9f91b420-e5de-11ed-a30d-0a918cbcbb97
server: Cowboy
set-cookie: sid=9a4a6637-7c1d-11ee-ab1c-12a56933c3ab; path=/; domain=.adsvolume.com; expires=Sat, 24 Nov 2091 00:09:15 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/engine/classes/min/index.php?charset=utf-8&f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/masha/ierange.js,engine/classes/masha/masha.js,engine/skins/codemirror/js/code.js,engine/editor/jscripts/froala/editor.js,engine/editor/jscripts/froala/languages/ru.js&v=24
200 OK 1.9 MB URL GET HTTP/3 kinosimka.theproxy.to/engine/classes/min/index.php?charset=utf-8&f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/masha/ierange.js,engine/classes/masha/masha.js,engine/skins/codemirror/js/code.js,engine/editor/jscripts/froala/editor.js,engine/editor/jscripts/froala/languages/ru.js&v=24
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Size 1.9 MB (1871077 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engine/classes/min/index.php?charset=utf-8&f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/masha/ierange.js,engine/classes/masha/masha.js,engine/skins/codemirror/js/code.js,engine/editor/jscripts/froala/editor.js,engine/editor/jscripts/froala/languages/ru.js&v=24 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/javascript;charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rk3rbbqnjoqvF%2FJfOhuJoVAblaF9%2BDZC7QLopOuBysUfXzGYLV%2Fx9PYbANAwADffv%2FzHlVikN1CWLSPKHYh3z8pqnEPqd3lZ7pkIKYefqXQgsQqh7D%2F2jVw6YXRumheRh0REnC8FM%2Fk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fee90edab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/posts/2018-03/1520488385-161862888.jpg
200 OK 51 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/posts/2018-03/1520488385-161862888.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 360x541, components 3\012- data
Hash 7484297d739b30780535f117c777a5c4
fbbf6eb3ed31b7d4540f34b87102263405e2b4c3
6c30bb5bc460752ce9387a9b987f014dae596e15a6f34fcd80fc544c401f91be
GET /uploads/posts/2018-03/1520488385-161862888.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pv5AmsU2ICPxqgO5uf3QXKCP8PpV0t1vp7YNizBp%2B0GfGBbIe2vQIIgm5fwrcHyOUH2bhJKqeKQ4n0Q8pLC6%2FKKrgNrF82yqXK1%2Byz4p6Ze6oOPWRO98U3BwMI5nruzJdQM%2F6TH2kG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f55b523-OSL
alt-svc: h3=":443"; ma=86400
GET dirp.app/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirp.app
FingerprintD4:05:08:2F:9D:D6:31:AA:49:7E:AD:93:43:2D:81:CB:E6:89:42:F4
ValiditySun, 08 Oct 2023 16:28:34 GMT - Sat, 06 Jan 2024 16:28:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirp.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=3394d9od3akuen8pl0sae93m2o; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p9qOIodQOlFKWc9LqJlqjrlFSTilTlzPsrSn%2FoRj8AJKuslP0IhaJs3aV%2Fq7wMIl0QmRFmJ2wJy%2FhnhRg7dRWGa0da%2FxZLjXBk4471LL7ChISTirrppmUCxFUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed68f556bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/templates/Default/style/rest-settings.css?ver=2
200 OK 4.7 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/style/rest-settings.css?ver=2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (4916), with no line terminators
Hash bdd5805c277a62906a3cae807ac6104b
de69dd25550ca1b7a645ff12ec9d8da01e2f35d7
ed5a056b85b4c2b1d47b3c4e2bd3aac15bea886fdd8f2baf9fccdbaa242fb7ff
GET /templates/Default/style/rest-settings.css?ver=2 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBhhL%2BkRsJkoDZjhqsK5miVgvr37Mdv7haIMVnobTKBLxTsnCDn7udI%2BMMmPHcU7OnykkQvQdP1%2B6KHQ4JBNNWkI8dsNWJF5y53PtZcjPEHKhSAfyzCO3AxfdDzYYszrEEmGJho%2B2Sk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee90edeb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET dirp.me/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirp.me
FingerprintDD:B2:EB:BB:A6:C9:F6:CE:E6:C2:0A:BD:24:21:1A:FD:09:31:0C:6C
ValiditySun, 08 Oct 2023 05:16:34 GMT - Sat, 06 Jan 2024 05:16:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirp.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=drtgjcb6ucd42oek5qu2tsam7h; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PnWDn9%2FiWZdKGhqpbaTQn010LouRbTFPzgCG9lsuAdPsLaQuggC%2B%2Fdpit68BDtXeiEbkmQusiNVCGN3b1Psd8EKsSIQHI8qAym%2BxZJ5Kr6L8N3MHVEyRn9Kv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed2c4cb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/9d15588c/player_ias.vflset/en_US/remote.js
200 OK 119 kB URL GET HTTP/3 www.youtube.com/s/player/9d15588c/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
File type ASCII text, with very long lines (537)
Size 119 kB (118946 bytes)
Hash f402c83698e962790e687760233c98ac
7b4ea70005245292f4e1c36e896c3320a662e6c6
6840401b7255512c5b9900409a9644d4e9b3cec94134f2154c1b93f80dc7bbc0
GET /s/player/9d15588c/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/M9Iyyz-D5t4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Nov 2023 07:28:46 GMT
expires: Thu, 31 Oct 2024 07:28:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Nov 2023 01:51:00 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 393983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET kinosimka.theproxy.to/uploads/actors/2017-12/f654a25933160b1516-maykl-makkonnohi.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/f654a25933160b1516-maykl-makkonnohi.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/f654a25933160b1516-maykl-makkonnohi.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
location: https://dirproxy.app
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YC07dAiSLgHpJZ1O29PHdsbyYVXusfqZsrpvLPaSyHDE%2FZrXDiIHYGyUQZs5gY60T2J9MtB1uJsXliaKSuA2FS9IsSKUNTp%2BrJksHHD1RMccog10BridaK4ZHZuTvws1ZiPCUwBig5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee95f2db523-OSL
alt-svc: h3=":443"; ma=86400
POST kinosimka.theproxy.to/user.php
200 OK 0 B URL POST HTTP/3 kinosimka.theproxy.to/user.php
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /user.php HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 39
Origin: https://kinosimka.theproxy.to
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t5pY3oQnnjvAm1hkDe8S2sg5oV6PJYESy6xSxNLPKyGAPHN4j2h4hYs33ipuXwKOTeRZtUxoFCc5nvimvhXqs5CyqkK%2B1OILbgOhI6qzII9yjmejPQDS0HCCBv1bwzoOl5%2FtwAA7isA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef3ffb2b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/hy.js?q22q2q2
200 OK 56 kB URL GET HTTP/3 kinosimka.theproxy.to/hy.js?q22q2q2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (56131), with no line terminators
Hash 667d77da844b6d5ad62b2f26e77b4b12
01ae61192a38af73a93c67468fb8271d7bbfa4f6
f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1
GET /hy.js?q22q2q2 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 02 Mar 2021 05:53:48 GMT
etag: W/"603dd2ec-db43"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BUVWNgzTj8OyZbtGNufLzwuV%2BGR%2BfBo25TZb4lPgIZT6F2%2B%2BrwCRMfjcIQublQug4s0uLZ%2F92wDIas03gHV1qjTkUpSbbWu%2F4GYjg6ifpA2ffgzInuCJ2GeWTgv2U%2BZTGyqj%2Bct9ra4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee99fb7b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/f654a25933160b1516-maykl-makkonnohi.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/f654a25933160b1516-maykl-makkonnohi.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/f654a25933160b1516-maykl-makkonnohi.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://123-proxy.net
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFJSpTLwjfev2FZRiGqeqDe1TQYaAO%2FkEzEVyKitgjNJf0v7Kg483e203fRuiJRBCil0TubeJUlzOFrqvGG7HMCDOwoAWpberVZAMem2EgrD9VQkmG4o3VuHNj2Wv1Z8a%2BmQgTLGFyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1ad9ab523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/dleimages/noavatar.png
200 OK 572 B URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/dleimages/noavatar.png
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type PNG image data, 200 x 200, 4-bit colormap, non-interlaced\012- data
Hash addd38af127f3840f0b1f87000e13125
fbbcd79b83ed5aa5efecff4dbff2755b055d39b5
f99a2c60ac365f5cebd3b520372c07dac909708e0fb5f8848a0a967c7fc0b98e
GET /templates/Default/dleimages/noavatar.png HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=82LbOYysfAHiqj%2FLPU6Ti%2Fo%2BPF2X4sqlkWT7Wf8wcFV5ezNt9UM016Ltw4myyBgtilFrIJ%2FFvn9dqey1thsPywG23pKsVavVzLFchiWrsOGQ6X9RM0bWCl%2F3uGSQI0skhmMAC2iq5yY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f7cb523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/14166c237d54b63d84-vel-tasso.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/14166c237d54b63d84-vel-tasso.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/14166c237d54b63d84-vel-tasso.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://dirp.me
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=14QxTAAf2URZHTg2mcD7VQymE9djRShQs0qqCa20UmznMyKWfmhCIlxABm%2FWmD6Z4QFCN4tkx9jr4qhv6kxWu2VZugmYeJsRDeYP0jYuXhUJp%2Fhf2ANtDuJRTIOrbiYyd3g6TIbuC%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1ad8fb523-OSL
alt-svc: h3=":443"; ma=86400
GET 123proxy.me/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subject123proxy.me
FingerprintAF:BB:0D:4E:AE:63:03:9A:AE:56:70:A0:5D:8D:3C:29:94:DD:97:9D
ValiditySun, 08 Oct 2023 17:45:39 GMT - Sat, 06 Jan 2024 17:45:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 123proxy.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=l91djobv7svtg9f51olu6ll7ak; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I1dyKIOEeJfUNpMa5gEDi287Jutp5GeGNa2uEUbH%2BNxrSB4Gq6ZYs7UtjpuUQ6UFDQ%2Bu6NF3OboOvIanzo4ifSHoXIIBJbv2hrN6KdirtJgyqSVTvE93fVFBLeMnHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed4cc656c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/templates/Default/images/dw.png
200 OK 340 B URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/dw.png
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f018f7d3714589a35b4672c4449ed03
7e3c9330ca4d689b372f7b7bbba8825897241ea9
44f071188566638b919da2ce7f564b6e529aa41e41440b4ce4fe225c335ac765
GET /templates/Default/images/dw.png HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/styles.css?ver=2
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: image/png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sUGuJBpuc6%2Bf2jWTMhxeINJL6V9uN%2FTQwRX5df26I1aTugwUYyvIqh%2F2WICSSP2Agg3M5oBN%2BGCg9XxPkxgCxAe%2FgLmr%2FGhYdiQMfPNiZE743jOsJRIo3aze%2FinLdrL5rYH9TMt%2FDNY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef47807b523-OSL
alt-svc: h3=":443"; ma=86400
GET dirproxy.app/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirproxy.app
Fingerprint3E:24:EB:56:BB:D9:AF:5D:49:25:A5:3A:B6:E9:E3:DD:7D:E9:DF:7C
ValiditySun, 08 Oct 2023 12:11:35 GMT - Sat, 06 Jan 2024 12:11:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=bmkhkop5vsp03meup4jblgnn5k; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HT%2FAV9RPa9VcltVk96E%2F49HM%2Btv8IwS1VEIwPSEdRQTjNvTjsh7BYYQOq3g4rxFP9oZtYJni31B2mvcpxIAA0c0PlgagDGrNwONI53MsGYNSQDtB0fgRmgVhh32LgkM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed5e695694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/templates/Default/images/bg.jpg
200 OK 16 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/bg.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, xresolution=98, yresolution=106, resolutionunit=2, software=paint.net 4.0.21], baseline, precision 8, 400x400, components 3\012- data
Hash b122286220ce5aa3b76c8e1a0f3448d6
63db8ca27ec9a323d9e2107fd16608cf8d01107c
4bca758f8fb46af29de714ae914d32a81211c5aefc2cd516819c6668aa241d60
GET /templates/Default/images/bg.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/reset-settings.css
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HH5nyrXVLJV0ok28GfvFMoADMcnBT2Z5bcpJKoXFml%2FQhmBFWL5niVNyLDlVm7cVKfZR%2BonFvHEF1OOAhR99pXRbwv26DohUeOcYzODHOrp24WgtAjnSSUWmeiBTSGCApnEYiJ8Orx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217feedfaeab523-OSL
alt-svc: h3=":443"; ma=86400
GET dirproxy.app/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirproxy.app
Fingerprint3E:24:EB:56:BB:D9:AF:5D:49:25:A5:3A:B6:E9:E3:DD:7D:E9:DF:7C
ValiditySun, 08 Oct 2023 12:11:35 GMT - Sat, 06 Jan 2024 12:11:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=arjedj5c2jrq5ehkqia0r96hc3; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nMjiWho5BVQ7S%2BIGLAi3WUx4ST3i%2FDw%2FWDr0V%2F8smwJjJNwIXbha7lyPJSnNsgTQ4N6S06zFtaay6DsnWdl8VcYQjgNVdobYHtyuukbvfBbRPt1hQq7LLpkMpyasUs0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed5e685694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET matomo.hellohi.me/matomo.js
200 OK 66 kB URL GET HTTP/2 matomo.hellohi.me/matomo.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint3B:19:FF:F4:F0:F2:6F:BE:66:7F:4C:A0:E8:02:E6:F4:94:A8:6C:68
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (1601)
Hash a3a7245d6daf7d31d2069c0ba05879dd
ec1bf464889e71aec1ced6d8361a26c76e4a1460
d7fc375178c93a2fc15fd888e30170eedf4ef3d04497e7f951ab7bfe0c921693
GET /matomo.js HTTP/1.1
Host: matomo.hellohi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 19 Oct 2023 04:58:52 GMT
etag: W/"6530b78c-10132"
expires: Sun, 05 Nov 2023 21:05:34 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 2974
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ULThqNSN5fYYDGJ8bk8CHuV9L3BAbsCg%2BlDHpcFg6jpXs9bBDeeg3b9l4KrCsohJ65zoDZ6ev9Ls%2F5DZH7Te4w2U343yTjvokqLZPGfeevZmXaCRsW%2BBXqPMDN%2FhFME2%2BN%2FbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef448805685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
200 OK 143 kB URL User Request GET HTTP/2 kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
IP
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Size 143 kB (143026 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /20180-obitel-zla-proklyatie-2012.html HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/html;charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:05 GMT; Max-Age=86400
PHPSESSID=fekbbgc2fih1ntpsrid5orvc31; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2pCW3st8H4hpaqZ1AYYbBEGUSCa13grrPDuHqtXijfJgSSy79nmvXc4WMhwSZiK8rJEYXwDrUHSBuouuGzBIimNCrMpUyGWeiLTaCr9TXSjxb%2B5LuYiOxKOEdruUYqy0IK0%2BI%2BbmkwI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fee4e8d5b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/templates/Default/style/styles.css?ver=2
200 OK 39 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/style/styles.css?ver=2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type Unicode text, UTF-8 text, with CRLF, NEL line terminators
Hash d410e9b28c6a3a25ed9138ad59072190
c1d51f50ccd9331c8b78b8185ef1289d673aa975
0e54ab8512eba931a3cefb172a6305d9a25250d3e1b9bb3a27fa8114aae66ef5
GET /templates/Default/style/styles.css?ver=2 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2FUDSp0ogLVc89MVJR08iCD7prduI9F2EhDJ40dWKW4qjW77oY4fW0%2FgR0nsAm9fwjSWl8Qu21b0Og3zGAhLTYYF21A71Ts7x9%2F0tpkEOyP6IktuQi7uJBANFiIiCFuCS1z%2B4xYVPD0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee90ee6b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/style/nrating.css?ver=2
200 OK 8.5 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/style/nrating.css?ver=2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type Unicode text, UTF-8 text, with very long lines (9178), with no line terminators
Hash 9fd3b9a9688217a6984ee702213686ae
9197fbdd050837ca08a5131d22b17cab7db2ad7a
f3d8cfd878645ef2b1f63d68549e58b163c9a46f2daba4f128e9b82b4cbdc64e
GET /templates/Default/style/nrating.css?ver=2 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ExYHXV8cTpi%2BlhYOs4SDy0DiG6Lr4Fb0pp0MUuujLxqDU%2B%2B%2BBEvjbeIhD%2F%2B1PIZWbPXNfsWVPpjFpldQgSedfRCRGAuS%2FY4r3xHREHHhbz2R0a3%2FJOUwwyXA5qLXEGqX0aDAjjet2uo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee91ef8b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET dir-proxy.org/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdir-proxy.org
FingerprintBD:62:38:77:00:16:7A:6B:0C:98:26:11:ED:82:AC:22:68:D6:19:4A
ValiditySun, 08 Oct 2023 09:55:38 GMT - Sat, 06 Jan 2024 09:55:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dir-proxy.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=3vff0n4pg6o24tk50q4o0voe03; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0QUlEJbM%2F8al2Hfej5Py3fPMdCXFF0gF34kLVVjVHCJPVViuXtKaJit5ppaNS17%2FfjoUoHZ7nBfdrhO88zeWuqETfzAQ6JZxTcUUzcdihodnYhG%2FZys8h%2BcKBUeQIL%2Fs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed6bd7b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET piraproxy.org/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectpiraproxy.org
Fingerprint4C:72:87:1A:FC:BB:46:F5:D7:62:7B:D4:D9:8D:C4:11:1A:9E:C9:BC
ValiditySun, 08 Oct 2023 10:10:20 GMT - Sat, 06 Jan 2024 10:10:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: piraproxy.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=s977pha1666sqolk0rgn0ip8na; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NKcBhpYptKKdRWb0%2Fy22ycC7l6ObL%2FS6PThLnCCqoqotSSVQrafw2NrHlQj5StvR1%2BGaV85at3%2BFQB2NwxSCe0QOCmg9ZE%2BEaMS7SIrwhwUJsoDUwjZoqpFUCEFvf0To"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef68b041bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/actors/2017-12/3cc024cfab0b7f1ce9-kortni-teylor.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/3cc024cfab0b7f1ce9-kortni-teylor.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/3cc024cfab0b7f1ce9-kortni-teylor.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
location: https://123proxy.me
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ONZrsgw5KCoQQ%2FDAlAVyem4OGxsBV9eth%2FPy2nz1E7E%2BXQlUZsoFavbhEuqKGHaZ0rsUKRq27yKRQjtdxQediJ5gTxnWZNLognGwQ%2FYgYz4masvzZlpG1nNOeeY36TxHL4q4%2FgAG4vk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee94f27b523-OSL
alt-svc: h3=":443"; ma=86400
GET yt3.ggpht.com/ytc/APkrFKbxbdcKaHMnAYY1X1jaN0j4MnPwBP1SPCW-MVKn=s68-c-k-c0x00ffffff-no-rj
200 OK 2.8 kB URL GET HTTP/2 yt3.ggpht.com/ytc/APkrFKbxbdcKaHMnAYY1X1jaN0j4MnPwBP1SPCW-MVKn=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintCB:BB:D8:FC:60:AA:94:8F:47:5C:88:BB:C3:30:22:92:26:D3:85:2F
ValidityMon, 16 Oct 2023 08:09:46 GMT - Mon, 08 Jan 2024 08:09:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 0b104b6bb41288c5fae195beedf9b926
5a3cf6a3031d4315d333a537ac6c266d4eee95ae
480c534a0c5bbc8f6ed7dd30f18157ad76b91bcdd6c242fa476685341eddc86a
GET /ytc/APkrFKbxbdcKaHMnAYY1X1jaN0j4MnPwBP1SPCW-MVKn=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v14"
expires: Mon, 06 Nov 2023 20:55:10 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sun, 05 Nov 2023 20:55:10 GMT
server: fife
content-length: 2756
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/3 kinosimka.theproxy.to/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 11:46:03 GMT
etag: W/"65423a7b-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jhtqToqDkFL8U9yV6r3MN7KnD2vkwvkBu1l%2BFyIYk7YHzDxHoGtc5JLwc2DuqmXnTVwhixxpRZeI%2FujL0Z0erkfau%2BL826etG7I6Kxdu1yhLZc65tjiC5UGL2kAPs%2FZUGVJQc2Fr2RI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee97f9ab523-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 07 Nov 2023 20:55:06 GMT
cache-control: max-age=172800, public
content-encoding: gzip
GET kinosimka.theproxy.to/templates/Default/images/icon-dislike.png
200 OK 349 B URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/icon-dislike.png
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash a5f5e8c18ba8de65acb70db50923e2ee
080b7587d0e7bbb5f12f2b91389692daf46ab7b6
960ddbfd24dcbfaf51e80b199a682fde3e23e69534ebb4ba304de9e34ed1a520
GET /templates/Default/images/icon-dislike.png HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/nrating.css?ver=2
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SMQ77LNZkv7Fo2QkdwAnUgQPCYe4%2FCA05YKzYX2Eq4Bh9zip5f2XdjCiCDmWDFtWWyRMLDo0yjUD08sn%2FgI%2BAHISE8vm2uRRl2RvPmujD3FHJjcO0oJwnxs5lhSWIIsXLTYjESLlEio%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1cdc1b523-OSL
alt-svc: h3=":443"; ma=86400
GET dirproxy.xyz/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirproxy.xyz
FingerprintA1:C5:B5:A7:19:27:12:E8:81:D1:EC:13:8E:DB:BF:00:A4:06:39:54
ValiditySun, 08 Oct 2023 08:31:23 GMT - Sat, 06 Jan 2024 08:31:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirproxy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=1d285rg08npmdrubsf0uv54ll1; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FPp7yWSAvIkj8HT394Bmt9yUNWXjtKmrVZ9NH0%2BrT8m0oX1y%2BwqSZirf3in68BmkDFdqDWRvX6xudGkiXGORi4jA1MwVux13t1MJP41Lx2S5Edn5Vsqo96R7PO84e6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef69d27b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET piracyproxy.page/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectpiracyproxy.page
Fingerprint5D:C5:2F:88:BD:AE:D9:FB:8C:8F:CC:B7:C5:52:84:D8:53:92:6E:F2
ValiditySat, 07 Oct 2023 05:55:08 GMT - Fri, 05 Jan 2024 05:55:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: piracyproxy.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=56pjo71565i96qcm37qhlpp925; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pRMqmMJhNb1eVb%2B%2FX7%2FzmtPp1XB%2FrX3VMM0onK6kuMJ7DGXy%2BQ5NbWgHGriq6yybijpKfWTzAPZjbqrRYdihmITi7FNYSVhP5g9B75Gw2CUUXyCMaNUS4ArWHtlrMkySrNhi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef69b4656a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.google.com/js/th/zEfCWrJsF8GWq2CtYueXG8skkVl11z8HN4Cg9ySc7ro.js
200 OK 39 kB URL GET HTTP/2 www.google.com/js/th/zEfCWrJsF8GWq2CtYueXG8skkVl11z8HN4Cg9ySc7ro.js
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintF5:CC:DA:B5:BA:1E:14:14:44:CC:27:90:92:CC:60:1F:5F:08:AF:77
ValidityMon, 16 Oct 2023 08:10:46 GMT - Mon, 08 Jan 2024 08:10:45 GMT
File type ASCII text, with very long lines (37592)
Hash 5e7613d69d4b8c6d573fa134f44668a4
6aceba40cc9783b4a07514ac728c9a4dbbb1a043
cc47c25ab26c17c196ab60ad62e7971bcb24915975d73f073780a0f7249ceeba
GET /js/th/zEfCWrJsF8GWq2CtYueXG8skkVl11z8HN4Cg9ySc7ro.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14861
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Oct 2023 10:27:44 GMT
expires: Tue, 29 Oct 2024 10:27:44 GMT
cache-control: public, max-age=31536000
age: 556045
last-modified: Tue, 10 Oct 2023 07:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/engine/classes/min/index.php?charset=utf-8&g=general&v=24
200 OK 71 kB URL GET HTTP/3 kinosimka.theproxy.to/engine/classes/min/index.php?charset=utf-8&g=general&v=24
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (32065)
Hash 1f01eb5f217db1386d1f5ec726242268
ae343ca8459d29d76ce9ec7ec27c36ec15d5e353
a1e81b0170568d53ec82be123f59e36c53662c18c8c3db32341bd38edb85a5b0
GET /engine/classes/min/index.php?charset=utf-8&g=general&v=24 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/x-javascript
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bqhqvPaJCHOVqilKt%2Fu4vS1a9%2BcihqKsIPEwLHpz%2Bh59l6YM7rpC230ALEjkczjqledc0Ne%2F6bvL4Ysrshg2a3nSme9a5ZArk8LboKnWKyA%2FsyQBKCQ0ap5Ul5kdK9IpNrAMsZZ3RjE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fee90ed6b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/style/engine.css?ver=2
200 OK 69 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/style/engine.css?ver=2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type assembler source, Unicode text, UTF-8 text, with very long lines (13482), with CRLF line terminators
Hash ebf260a88941c0acf34c4b9099a7b27f
13456a9275c5bccf4e97ac467fa4716354e7998a
ea0e643020cb7212cdb910a69bb06c3bcfe8a25bdb3fbf48a8c97b66111963d9
GET /templates/Default/style/engine.css?ver=2 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A0beJpoSuuiXkVGBrWXcBhcy1RUk2nwZbF8IJ6an4dzeRT9mBZImQUhTBVwy9oYXDmu8semR7fNLGZVGIIJr7lscyh2wb7vyTxKJ%2BHPanXG1xy8Td%2FP8nTj5lN6isHFO3EHpm%2Bq8peI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee91ee9b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap
200 OK 2.3 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9
ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
File type ASCII text, with very long lines (2319), with no line terminators
Hash a923b98baca4b55a4d2a4f806222686b
767d3e48a33b662bdb12e0f498fd2510a59a7db4
e927b86850ae1f8b6c9ab3722b76d1f1f72f224d0a3523b04ca29df0e7aee222
GET /css2?family=Roboto:wght@400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Nov 2023 20:55:06 GMT
date: Sun, 05 Nov 2023 20:55:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET theusualsuspectz.biz/j/m/qqqq.js
200 OK 48 kB URL GET HTTP/2 theusualsuspectz.biz/j/m/qqqq.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjecttheusualsuspectz.biz
Fingerprint24:F3:7E:77:4B:2B:67:1B:B9:2E:2F:DF:7F:15:E9:9A:23:12:2F:89
ValidityWed, 20 Sep 2023 02:26:53 GMT - Tue, 19 Dec 2023 02:26:52 GMT
File type ASCII text, with very long lines (48351), with no line terminators
Hash febd5bfc829d7c8aa363e93e2e61f414
10d66213a9249bea47b15acf295323f01d217ef0
ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /j/m/qqqq.js HTTP/1.1
Host: theusualsuspectz.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 02 Mar 2021 03:16:06 GMT
etag: W/"603dadf6-bcdf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 831325
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DgPEDLU4NzwpdOBGPUxgBJ5TNIasGPRatfbffQs6btJd5487EHW5b7jbICglX1MYmwdUtM9L42cJqXU1JlLdXKJXMaO7vdgpZdiEsFRwCe1HlbcAy48nL8Vyi4bNC93KNKXVEuom7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee9e850b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET adsvolum.com/code/c.php?c=ey9BcCVyXClk8joiMT0EO28s8nNpd6VfaWQiOi8yNT4F8iwicDViXClk8jowL29rZXkiOi8DNWYDYj1lYj1mO6YFZTgzMzVjYjNmMzlhZT1jMzdmMi9J&r=0.6386106656566383-1699217708071
200 OK 638 B URL GET HTTP/2 adsvolum.com/code/c.php?c=ey9BcCVyXClk8joiMT0EO28s8nNpd6VfaWQiOi8yNT4F8iwicDViXClk8jowL29rZXkiOi8DNWYDYj1lYj1mO6YFZTgzMzVjYjNmMzlhZT1jMzdmMi9J&r=0.6386106656566383-1699217708071
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjectadsvolum.com
FingerprintF4:67:F5:06:4D:97:01:0E:2B:91:7B:56:70:1B:A4:17:A5:84:06:3C
ValidityThu, 07 Sep 2023 09:53:14 GMT - Wed, 06 Dec 2023 09:53:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (638), with no line terminators
Hash ed8508e8d9acf1bd2e72e7d536ef6110
2d79352661a2d5cf3a7d712a5094e9f189bdc112
a15fc1a33d8ca9906603faf16c3a91c43b6378fe757c2dd01c1c1dbd5d070475
GET /code/c.php?c=ey9BcCVyXClk8joiMT0EO28s8nNpd6VfaWQiOi8yNT4F8iwicDViXClk8jowL29rZXkiOi8DNWYDYj1lYj1mO6YFZTgzMzVjYjNmMzlhZT1jMzdmMi9J&r=0.6386106656566383-1699217708071 HTTP/1.1
Host: adsvolum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
content-length: 638
content-type: text/html; charset=utf-8
date: Sun, 05 Nov 2023 20:55:07 GMT
server: Cowboy
set-cookie: sid=9a8c9991-7c1d-11ee-8d3f-68d056e11f77; path=/; domain=.adsvolum.com; expires=Sat, 24 Nov 2091 00:09:15 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kinosimka.theproxy.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Nov 2023 02:00:44 GMT
expires: Sat, 02 Nov 2024 02:00:44 GMT
cache-control: public, max-age=31536000
age: 240863
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/templates/Default/images/bgprm.jpg
200 OK 93 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/bgprm.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x420, components 3\012- data
Hash 5049e52eca51a4d4406dfdcc52fa16ff
c58d3905dd0d18a5a5e880c0f343a178d7fa84db
509998deb66af05c6e8e351da5395a90c532f72ba8d41c277c95d2e581590ac4
GET /templates/Default/images/bgprm.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EMhu4%2F5OaPkvuo3z73gteF0On%2BeGPunqA19%2F7vyrOBMn62mVgJfqH3u5MpD5soDoEF7qrdxrev9Ij9Tgl0m9idwr03Y0EqKxnHAEjm45wOExct3V8d7RYwb4W3MDstX3HHHkGdn8x28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef3cf7db523-OSL
alt-svc: h3=":443"; ma=86400
GET cdnjs.ru/code.js?id=554&site_id=2459&subid1=0
0 B URL GET cdnjs.ru/code.js?id=554&site_id=2459&subid1=0
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /code.js?id=554&site_id=2459&subid1=0 HTTP/1.1
Host: cdnjs.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET kinosimka.theproxy.to/templates/Default/images/icon-like.png
200 OK 402 B URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/icon-like.png
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e82fd6759f038d52241d099ceaacdacc
6c06696a6551fc2d96df76fc415264e3f4e564f3
3366544c73887c314d09ba4c2f8ddeb52ca752d38daec552365cb1b53907cfc8
GET /templates/Default/images/icon-like.png HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/nrating.css?ver=2
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xo0rAFyDET0inFwVb%2F0EILVZ8xdZFz%2FlQFWROfy3CmThbicb23akuI9c7eSHw2AcLr3IuVJE6QL7nZDeSjnbtRrVhX3bSd7S8Egu%2BXqL1og%2FIIYkj57h7DhJU%2BLmt8LZAOznD49yrGA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1cdbdb523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/images/fav.png
200 OK 1.2 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/fav.png
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash b06359eeb0cc2f1bf2e89eef8c7a120d
9a46d37ee44c7767da229501bc3f8be5871f1fc8
90cb0c137bfd0ad18afc06163420fbaa64fbc0ae52214df5261d6726bb249af0
GET /templates/Default/images/fav.png HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:09 GMT
content-type: image/png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:09 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AZOZ85dl5Azp7zizJBFEtKPH%2FRuwYw7eC7%2BlrK1ZKXTcOKciYHGJuLyC%2BrHCv7KlEz%2BnMJO2B1oupMJQTRVoStIfVssBM6XPw3HwWCyrmPsxItseK6k0%2BmjUwZE7AZv5zT295Yxe9Sg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fefc9e45b523-OSL
alt-svc: h3=":443"; ma=86400
GET dirproxy.biz/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirproxy.biz
FingerprintC7:94:A2:80:3F:AB:B1:72:13:BE:9C:42:22:6A:8E:ED:04:97:70:53
ValiditySun, 08 Oct 2023 17:11:42 GMT - Sat, 06 Jan 2024 17:11:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirproxy.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=iecusqts6rha40tmkoj199vic6; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yTAsSBFpM8n1%2B5HQOjdBNYYgA%2FNYe%2Fv9q1B3MAlD1KmS%2B13ScqR2xZlX3N3t9JqWH960PT3RPtSCyWs1cQ7rbUX8Mf9Fx%2BByxFFJr91T8Lyt%2BzDvYEr3KsDlWRIpA3c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed6bd8b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/actors/2017-12/803b4d49da7badf4fa-mettyu-merser.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/803b4d49da7badf4fa-mettyu-merser.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/803b4d49da7badf4fa-mettyu-merser.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://piraproxy.org
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QUq3AC%2FoofF8y6XvS5FScLrY4fjw4WLYMTOLhu6fxch%2FwfA3aCE8K8HbegtfbSYMu9AACUpCOny6oTHrz9Br2aPfjCL6vC5rHNRve7hpg8jAHbVKHmAHcCyXwBJJhdT31kDotEjNUD4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef18d7ab523-OSL
alt-svc: h3=":443"; ma=86400
GET dirp.me/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirp.me
FingerprintDD:B2:EB:BB:A6:C9:F6:CE:E6:C2:0A:BD:24:21:1A:FD:09:31:0C:6C
ValiditySun, 08 Oct 2023 05:16:34 GMT - Sat, 06 Jan 2024 05:16:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirp.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=fsp3vfhlgh2le9h6ldiu5urnb4; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2hVKhoKoyy4pslAU5EtHJNUI%2FF3baRr3Wp9k%2BGbNLKpIWYtlQf9rrcC7dtG%2BIDDHFDDd%2B3LXC7BLl1lYeikwdolzcbjeP%2B0LPjGEPwr9CTxwKu22dBLRHHQU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef54c815691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET dirp.me/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirp.me
FingerprintDD:B2:EB:BB:A6:C9:F6:CE:E6:C2:0A:BD:24:21:1A:FD:09:31:0C:6C
ValiditySun, 08 Oct 2023 05:16:34 GMT - Sat, 06 Jan 2024 05:16:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirp.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=i91r17bso2m7shrarpbe064o3v; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lnY9OZNOByltSglLGWj5GSVtWDG7WVGKqkO%2Fd6a4%2FpXPZeNhKuHUxXxAARq9A7nFWO1%2BTEp9DKKoBV6Q5LeX3p%2FvryS74yjCcxls3lxP8JfN48%2B4%2BbFJBzR3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef51c595691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET piraproxy.com/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectpiraproxy.com
FingerprintBA:91:6D:2D:A2:E2:9B:93:6D:7C:9E:39:5A:67:13:75:56:05:67:C4
ValidityTue, 24 Oct 2023 00:49:23 GMT - Mon, 22 Jan 2024 00:49:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: piraproxy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=2maf62rbk8mpbdlf6j7cgustfr; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s%2FORH46H9Jq0Xo95DisWgdaurT7t0GDq4OHPEwucdmi4b1Fxo%2BqxBjiVVDFCVEm0BAvwyDUt%2FjMAd9Y4NAb9di1CZAg9s%2FNZ3AZqx%2Bn5K5yzd1HmNF9KPjB3FIEP1%2BdP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef5d93fb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/posts/2018-03/1520276654-735836929.jpg
200 OK 50 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/posts/2018-03/1520276654-735836929.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 360x518, components 3\012- data
Hash f9dccd687070a4d9b35167fef9527dc1
337794c0276de98fbbdd2791af6125a618c70ee2
a54b252b322747b1a8117ab18b4855b46f0b8e1b024efe1e80035a1bcaf7e509
GET /uploads/posts/2018-03/1520276654-735836929.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LiCvtxlEp2A6dkeYLyvIHF0jUIej3dOkLBJfsCqb%2BavCO4SeGCYlrOyB115KGoGkwl2AevVUB9DC285%2B7jKaSTtlnv9Ojzuo9fWI66vz3nrWbaItQ7d3az7%2B3GzSZHkFeZUzZConVa8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee93f0fb523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/engine/classes/min/index.php?charset=utf-8&f=engine/editor/jscripts/froala/fonts/font-awesome.css,engine/editor/jscripts/froala/css/editor.css,engine/editor/css/default.css&v=24
200 OK 143 kB URL GET HTTP/3 kinosimka.theproxy.to/engine/classes/min/index.php?charset=utf-8&f=engine/editor/jscripts/froala/fonts/font-awesome.css,engine/editor/jscripts/froala/css/editor.css,engine/editor/css/default.css&v=24
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (27824)
Size 143 kB (142665 bytes)
Hash 1bcfa8bf5645ae5c71c5a3c4ee47e4f6
9e7d6a92c4cd13a2cb30b3155543dc21fc0c81c2
57d5ad8d9b096ca3ee70da5af054efece7980604c517754fbe940c792ad7a890
GET /engine/classes/min/index.php?charset=utf-8&f=engine/editor/jscripts/froala/fonts/font-awesome.css,engine/editor/jscripts/froala/css/editor.css,engine/editor/css/default.css&v=24 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/css;charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t9kY4rWv7%2BGzXX80yFDVxcIUeoteUt4C%2B046wwDtRzgTKUjF1q6Id7N1WW77eZMENSTJlVm%2BIWenYIeVwlE%2F%2BxOpdouU02qPrY%2FwDn41aNwwwKDYvZ%2FFquzl0zQBjhfkKPVt%2B4SvaPY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fee90ed1b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/803b4d49da7badf4fa-mettyu-merser.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/803b4d49da7badf4fa-mettyu-merser.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/803b4d49da7badf4fa-mettyu-merser.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
location: https://dirp.me
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TR2ZdfZJ3iloYnYZqLfhw5PGpZe0ZroIt5TrMYuDCJ%2B7gI7cZZVG%2FG0uqUnO0PvjgXxR7w3FL4mN1iiFd2MNE1GPFEk9LzB%2BYZ4Dum8FqIDLbkYPk46hkZJgxi2JlhmMgs027sLiuiM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee93f11b523-OSL
alt-svc: h3=":443"; ma=86400
GET dirproxy.net/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectdirproxy.net
FingerprintAC:75:7F:8E:05:32:91:BD:D7:AA:1E:19:1B:3C:0B:32:F3:D0:7C:9E
ValiditySun, 08 Oct 2023 11:43:08 GMT - Sat, 06 Jan 2024 11:43:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: dirproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
PHPSESSID=unaov314gb9c67j6i2hu8qir1u; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1phNUu8MR2BAo941ASkyv0zY7FOl3lcDWwi2lejNmvY1%2BI8H7UzkWntVJJ8qZvckSPGiZl8lckZdk14LlRjrK1rmci7A6C7iNttar2TTJTUfQ68INRWUj%2BK40PJvlII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217fef68e131c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/zpp/zpp4.js?q22q2q2
200 OK 39 kB URL GET HTTP/3 kinosimka.theproxy.to/zpp/zpp4.js?q22q2q2
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (38995), with no line terminators
Hash 7dc63553536847077855df4f82f1ec18
146c3aac34cb4e7e1e9c692ccd0161b2e4f018de
3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960
GET /zpp/zpp4.js?q22q2q2 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 02 Mar 2021 05:53:53 GMT
etag: W/"603dd2f1-9853"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uyd6ZqbdNKz0q%2BOUC4j10dq0HiQFjbshTK1vPofqwdmVzyyWkJ51l382NFPTQlU8GlTIY9EUwisW8Q2OOlSL91BFSPvJnTh2GYv579p7Kg734sO4omgV87BSYJG8i5HkwxYLBAkWcNM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee99fb8b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.youtube.com/embed/M9Iyyz-D5t4
200 OK 93 kB URL GET HTTP/2 www.youtube.com/embed/M9Iyyz-D5t4
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintFD:EE:45:21:A2:3C:95:82:9B:BA:3F:7A:59:3C:F6:C2:7B:C7:84:8F
ValidityMon, 16 Oct 2023 08:02:35 GMT - Mon, 08 Jan 2024 08:02:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/M9Iyyz-D5t4 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 Nov 2023 20:55:07 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Z6DQvs-4gYc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=0pDRFO4fuVA; Domain=.youtube.com; Expires=Fri, 03-May-2024 20:55:07 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Fri, 03-May-2024 20:55:07 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+974; expires=Tue, 04-Nov-2025 20:55:07 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/posts/2018-06/1530366019-1440412679.jpg
200 OK 15 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/posts/2018-06/1530366019-1440412679.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 200x290, components 3\012- data
Hash 2c84c5857bf29eca8008dda914c8cfd9
cee4477338112843a9ee031b7eaa3dd7ce595d02
599ddc3718592646ca25a3ad5912634017b1a616ecd4c1a12b8995a02be54187
GET /uploads/posts/2018-06/1530366019-1440412679.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g1Gdlt4dDwxlyL5wSF7ri5XQGF%2Br7XiXQ2mgG4M7UKU6yl9BT%2B9aIrTARQWXTwfaIVD5JI1C2Yf6cPmxh90a2AepweXLnWGz0A0JPpuIR2qLheGjvptoIEaeBvYwI9vd6rp8f1s2EWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f4cb523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/fotos/foto_44504.jpg
200 OK 3.2 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/fotos/foto_44504.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 101x67, components 3\012- data
Hash 8429d5116f8431186aaa9619cfb6a3d8
986c901a437d1eb41831c51d6a0b9b9ee355cf63
16f63e8e396a04d16d835b41cc3703f92da0be5af72fa77e9c7a9ea69314db91
GET /uploads/fotos/foto_44504.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nGGrz8I1akvI3eSDvrzFEshqOn9kMXQ16sF4TVayAKF3CFo3ONT4H7rqoJUfR%2F89gK1eSLlG%2BgrdT%2FZldnCj4FE2JWPecMfrZCl9dsCTFP1eZc0ij58htCFcBfMUPN4VGv5HaCoVDHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee96f7fb523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/app/apx19.js
200 OK 9.2 kB URL GET HTTP/3 kinosimka.theproxy.to/app/apx19.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (10516), with no line terminators
Hash d26dea46bd49f9297502159ed377f84c
2da344f74215617efd03c4805e5e15d7d8039515
77d7964a36f5c3105bc99271b3ffe2d4ebc5541e4acd38def734b3eaea38fd38
GET /app/apx19.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Sep 2020 18:46:59 GMT
etag: W/"5f610c23-23df"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ScZC5sG9DxPhbWlgIX0hqepCaHvXbPyW3tiDzWGJHyZ5Fm6GRxFkpUCtXlculo69f7I2Yz%2BBciSyP8GVTFo0I%2FXsRTXRCd6Ex6c%2BGR9z3GUPIuTnWHIPQKhG7H5n%2BZgH5vYvqGrVBNs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee98fafb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/style/reset-settings.css
200 OK 4.3 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/style/reset-settings.css
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (4362), with no line terminators
Hash 65c44164bbbdb0b56cfcfcddfac5fb7b
aa13a28933c99430e772fcc8b35861789ca3ac98
f3a4b17f0adc697ae63ad7ac44a6899116a9bea34aa2e288d2d6bc7dbf60a98f
GET /templates/Default/style/reset-settings.css HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/styles.css?ver=2
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wYDWCY3nzyYcds2lmpzQe4HhqM81DKzWTj6hsMdOtB29i4C3NO53zuz2zJN5wTxYUcRSghGKiWYh3JKrjnfDxAIEUv10a5%2F2KKa3Hz9qmXfI0EfrV7SEljK3EGgsRmwkSuoTZGVbr0s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217feec89e2b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET piracyproxy.app/
0 B IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerGoogle Trust Services LLC
Subjectpiracyproxy.app
FingerprintEB:E7:5E:5F:45:58:70:A9:AC:49:F8:99:27:D1:98:0A:DF:36:74:A2
ValiditySat, 07 Oct 2023 04:30:18 GMT - Fri, 05 Jan 2024 04:30:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: piracyproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kinosimka.theproxy.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
PHPSESSID=4f8l6ksifcsvu19mamvt55vtkm; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uZVj%2BI2l90Zsx8d61X7N0C8JsJ9UYUU4nYYwbhD%2Bx1MCz8mwJNXXaFy46UZKW0Bvqy25TgbKtFlEzWcSkO2jCimPmTTaXejwRZU1Ik9FA7yK4AqCobvp5PxPDthVQODO4Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8217feed3cd156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/actors/2017-12/2834be9de10f5acf16-deyv-uittenberg.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/2834be9de10f5acf16-deyv-uittenberg.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/2834be9de10f5acf16-deyv-uittenberg.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://piraproxy.com
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RfepmZwIyqAYjhC8mIUAS102C8sx%2BlZ2E3A5K5FdDsKoJTBtb3%2FeEbsBL2yOQm5eR2mfDjBFCPw1CzwKcY4d3ZDk0WbrhCeTv%2B5pV766OmgvwDHrWDA0PToYVSjV%2F%2FH97zEdBF%2BlbCc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef18d7cb523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 67 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /templates/Default/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/frameworks.css
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:07 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wu5g3KGSHb7RETFjkEc3dBOSpU3kE%2BORbhsUze4nWlNqZsMX4QfBVc0%2Flg10XkM9TsCpMcaSuMOWDudQ9QtbE0P7xTFti4tzqIh8vOg3Hvya212Gv8nEJJFeMs%2FIXwsSPHiUVA42cts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1ddc4b523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/images/th_blo.jpg
200 OK 360 B URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/th_blo.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 10x42, components 3\012- data
Hash eb68ae99ce25372f6ff2cd1e07c5e213
c9b03dd421e1ad2a47e63ae57de39b26553c6e50
b5eb41d748139eb3d248ed6618697985b11368dddd3cedf5a6518b4b56a13e69
GET /templates/Default/images/th_blo.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/styles.css?ver=2
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iB4CU5M2gPXK33EeNs07m4CgAPXsttQbwfjPCxTq5NMyDhpPMBuISWl1jIpHfy1L0q5NpOlTRLt7W9HiOfDbaLNu%2FHW%2BkFu1gTx4McI7MxAfW86%2BjRfapulvuBZENLS86ReuXtzV8H8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef47808b523-OSL
alt-svc: h3=":443"; ma=86400
GET i.ytimg.com/vi/M9Iyyz-D5t4/default.jpg
200 OK 2.1 kB URL GET HTTP/2 i.ytimg.com/vi/M9Iyyz-D5t4/default.jpg
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
Fingerprint30:FC:ED:56:9F:85:39:F1:1B:87:3B:5E:09:20:49:BB:39:CC:EA:8D
ValidityMon, 16 Oct 2023 08:02:25 GMT - Mon, 08 Jan 2024 08:02:24 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 5307a0c0e5955fc4547007a277778ca7
2eeddeacba406c27d345afe8ca901e5f22d158c3
7ac4ee97faa8aa0787c27dcdd28973dde3b84c31b105722ac9817b822c9802dd
GET /vi/M9Iyyz-D5t4/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 2059
date: Sun, 05 Nov 2023 20:55:09 GMT
expires: Sun, 05 Nov 2023 22:55:09 GMT
cache-control: public, max-age=7200
etag: "1348782234"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kinosimka.theproxy.to/uploads/actors/2017-12/3cc024cfab0b7f1ce9-kortni-teylor.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/3cc024cfab0b7f1ce9-kortni-teylor.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/3cc024cfab0b7f1ce9-kortni-teylor.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:07 GMT
content-type: image/jpeg
location: https://piracyproxy.page
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:07 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=svIxkn2qDfmdccZWdXZvtO9M1YZyZxe4nmyiyuWptQOf1sb9SVS%2FKCBxqef8pcGRvLm1jVq9hwDMgHIXfgEFR07zqWZyfK%2Br8Hba3h841WOITzsqu3%2BmDZ5UPH1id4PdZT9dQTRgUfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef1ad95b523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/images/avatar.jpg
200 OK 1.1 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/images/avatar.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 35x35, components 3\012- data
Hash d73611554b034c611cd63a9d36abf083
ded0913a7090e76c38b3d7eaf45dfc877a61e4b8
a3020e2c1d4970d12ab3ca5ba2a80ef603eb383d04a6e0d9e24e6a760cdfeb35
GET /templates/Default/images/avatar.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/templates/Default/style/styles.css?ver=2
Cookie: view=1; view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:08 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:08 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yqr1nPruN3%2FmIokI36IymR5va4VCOIZP6wexiVcQEZ7yqiJHcjoFKw34ZmWAHvWtQHiggVxN1R5F7vFoaaAI8jaVouvpUJ2Ka6qWe2MMIBwfHmSmLHsa81YKv2G6Fea%2BcfSTCiolsnw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fef47809b523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/style/frameworks.css
200 OK 39 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/style/frameworks.css
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/Default/style/frameworks.css HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qr9Q2kNItzHxL33h4o3IIhUIpoBv%2B6TLTUv6HMphuMBYyveCnPWLat%2FecI493e9D2UFmjU3a%2FcUO0BuMJBEicJMz5hx7oNLxpH054%2BkR2MUDWbqujRRPMNJD9VMFRTuk8PB91qYMfqo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee91eeab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/14166c237d54b63d84-vel-tasso.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/14166c237d54b63d84-vel-tasso.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/14166c237d54b63d84-vel-tasso.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
location: https://dir-proxy.org
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QEFYtoY%2Bl5Gvvp9i6xt9eRrvRbybR%2F6MP0D9YjlqTVv7htzFm%2FGJZANHJxMgchbZf5ICTKPq%2FZGRJhIFCzdHNHTZ30GN%2BpkxoOvo3rVrc3B5JhYoBBgzjYPOKA1tJyTZhiSKDJrcygQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee93f1db523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/js/libs.js
200 OK 5.3 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/js/libs.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type ASCII text, with very long lines (5729), with no line terminators
Hash 50e3c217b7f9e67e4cf9ad0f3d4b8026
a4ae2f1f40b5624511aa66e4f619f7b190a2bb99
6d85242f555029761eaa0ded8410fceb74bf84340496d3d37cf50c601b0c4721
GET /templates/Default/js/libs.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/javascript;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R2KqWxlv%2F4InbEBeNZxbdiY5ZYSjEPm7YeA52sPPqvFn1UDfiVy%2BR8NsFQLkiJciU4geGAYAwrxyS1RSiq0lUzacjpjbYpF7BJVBuSHdW%2BwK7t3xabg8YX%2BytzYeIesq3qt%2BGj1cxbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee98fa8b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/M9Iyyz-D5t4
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28
ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Nov 2023 04:45:56 GMT
expires: Fri, 01 Nov 2024 04:45:56 GMT
cache-control: public, max-age=31536000
age: 317354
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET kinosimka.theproxy.to/templates/Default/js/nrating.js
200 OK 1.6 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/js/nrating.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type Unicode text, UTF-8 text, with very long lines (1713), with no line terminators
Hash d5ea5b6c95d71edd4987f7e2b6a55bbc
5948faa9c7a1cca4d8124399ef692d02bd40b7b0
b091d567528ce932a4a64e2904a8e6d6010de5f508c0cc0973af221bacbb5515
GET /templates/Default/js/nrating.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/javascript;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FrZYM6Gk8dzlTJuZnorwrGnjiH9nMoVMEhnm3rLbwL5vmd2OjrOJ58MBWI6%2BAVwE76yxmfx21naFrK01Ffns%2FvH0znafDEGxYDU2mAU7%2BOEHvlkVXsl6VdMTyYCRgLEDRz4ZscjhWac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee91efab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/templates/Default/js/playerjsx.js
200 OK 442 kB URL GET HTTP/3 kinosimka.theproxy.to/templates/Default/js/playerjsx.js
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Size 442 kB (442388 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/Default/js/playerjsx.js HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: text/javascript;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3IKWOPdiLtLJV0DwbfbjnobcISambVF65QvvQizaKvaQ2EhhAKuvCBnma6ktV1Xr%2FPTlirF4lAsnYPWhYrOfbJblqjIjaLjBDlEFWVQuYf4jkM%2Fsqb6j3L8mVW%2BR7%2FTbWbi5D1JVIpc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee92efcb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/actors/2017-12/2834be9de10f5acf16-deyv-uittenberg.jpg
0 B URL GET kinosimka.theproxy.to/uploads/actors/2017-12/2834be9de10f5acf16-deyv-uittenberg.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/actors/2017-12/2834be9de10f5acf16-deyv-uittenberg.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
location: https://piracyproxy.app
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ikea%2FF5VAmq8my0xjOi%2F0xNrBwVtffQNGeEQbW0KJrxzRQu1smzxZhomwBqRhnXWrnXG2MEivhrp%2FX%2FVTGzieSY17D246LLy3oJLo5cKgVj%2BZSwDVvtTCQh8FQ6PLqgI1szgnp2TCQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee93f1ab523-OSL
alt-svc: h3=":443"; ma=86400
GET kinosimka.theproxy.to/uploads/no_actors.jpg
200 OK 9.6 kB URL GET HTTP/3 kinosimka.theproxy.to/uploads/no_actors.jpg
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjecttheproxy.to
Fingerprint0D:AB:DC:0B:DC:DB:AA:25:06:21:55:77:76:84:CA:F4:0D:01:06:0B
ValidityFri, 06 Oct 2023 03:59:19 GMT - Thu, 04 Jan 2024 03:59:18 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 225x333, components 3\012- data
Hash cc97ade59104921b4a1a5e9c3493fd75
ae26df8642b8963a585cd04d0d127cff62fc4b4f
9116d1b1f49122967846644157cee83f185907dbd2f160fdc851f323443e03f6
GET /uploads/no_actors.jpg HTTP/1.1
Host: kinosimka.theproxy.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Cookie: view=1; PHPSESSID=fekbbgc2fih1ntpsrid5orvc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 Nov 2023 20:55:06 GMT
content-type: image/jpeg
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 06-Nov-2023 20:55:06 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QY2w44yUrg%2Fu2QroJFaPXyJ5nuolyALwlrbP4QlGwhP4eMTyLy51XLrfl%2F8i7DX3DYGXAjy7rD2h%2BBW7RYxg0RkuSxMpXs8dkebn9R5GYRNVNZqGh61mlcz0ykQXIrHY%2BdPR5T%2FXzy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8217fee95f2cb523-OSL
alt-svc: h3=":443"; ma=86400
GET reclame.io/code/c.php?c=ey9BcCVyXClk8joiMS8s8mtleS8GMT0yMzcBNjkDM7A&h=kinosimka.theproxy.to&r=0.44468326355583465-1699217708072
0 B URL GET reclame.io/code/c.php?c=ey9BcCVyXClk8joiMS8s8mtleS8GMT0yMzcBNjkDM7A&h=kinosimka.theproxy.to&r=0.44468326355583465-1699217708072
IP
Requested by https://kinosimka.theproxy.to/20180-obitel-zla-proklyatie-2012.html
Certificate IssuerLet's Encrypt
Subjectreclame.io
FingerprintD3:34:B3:96:9C:CF:72:03:F2:9A:DC:32:F4:5E:E7:C7:12:30:56:72
ValidityMon, 02 Oct 2023 12:14:18 GMT - Sun, 31 Dec 2023 12:14:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /code/c.php?c=ey9BcCVyXClk8joiMS8s8mtleS8GMT0yMzcBNjkDM7A&h=kinosimka.theproxy.to&r=0.44468326355583465-1699217708072 HTTP/1.1
Host: reclame.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kinosimka.theproxy.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
104.21.87.176
192.243.61.225
188.114.96.1
162.19.58.161
37.48.65.151