surefap.org/publisher/dreamtales
301 Moved Permanently 0 B URL HTTP/1.1 surefap.org/publisher/dreamtales
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /publisher/dreamtales HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3; path=/
Location: http://surefap.org/publisher/dreamtales/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mq9BIIh0JUvEwpSgCWOmUhHbIyKwiKf0aSh9VeztQHeA85AHyp2T7w8pY9k95Lun48c2Yl7rtynvrOqR9dERRXPkO2Vt6ROx3hoaHa%2BBBgUcu2R2H6fwaxJEWyvqJw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 771fdda02acab527-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4898
Expires: Wed, 30 Nov 2022 03:00:27 GMT
Date: Wed, 30 Nov 2022 01:38:49 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2898
Cache-Control: public, max-age=1209600
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:49 GMT
Etag: "638651c5-37"
Last-Modified: Tue, 29 Nov 2022 18:39:01 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 01:17:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1252
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16643
Expires: Wed, 30 Nov 2022 06:16:12 GMT
Date: Wed, 30 Nov 2022 01:38:49 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /TSnKTWcpnfPjux06MzxpXwOvSo7gaHUP2brChq0ws70MtU691hRmKg10qO08XndePQin6n51/c=
x-amz-request-id: 1SS5J1S4MVWS8XJY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 00:45:01 GMT
age: 3228
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/publisher/dreamtales/
200 OK 20 kB URL HTTP/1.1 surefap.org/publisher/dreamtales/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1847), with CRLF, LF line terminators
Hash 1985fedc0c4de4846d0cb9b8492caaef
60adf391346bad994193c44e13f4be09b999c15a
05d9eb42bc69f57a2bda93342a240ab0dc1f38aaabc2579227d5172310fbd617
Analyzer Verdict Alert fortinet Malware
GET /publisher/dreamtales/ HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://surefap.org/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JclhvuqMQuF1Mom26bjSvzXUlJSyICzPPmOcI3dlBTbz1rzpEXHtp%2F1lmKkwsvFMzv%2BzhlTmSXLUItTP07WZkIpWoQ99ZCIbZWenrG6XA7ytuTgxGjA4wrsNWleDtA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 771fdda1eb9ab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/style.css
200 OK 6.7 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/style.css
IP
Hash 8754f3c381e72b8d256a0f26b09663e1
3c89aea4ebfadeb9791f9fe7fbe37d57952b3899
f70001c43657a392df622ad888a4cb3a62b4599fac8c6bfba3dd1a365be05646
GET /wp-content/themes/FinanceDesk/style.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 13 Feb 2021 23:55:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TpwLm1OUmckIqSIaZR5ttFctf92Ac77FOtk9OlSrV72LzjVN9GPFFg4HRDILArdg5S%2BTzsumCS%2FqLbe4wA%2F94XUe6RVZfrkbLLprkZergcAH8GXwB4s3PwT40gfgYg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda30c05b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
200 OK 626 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 10cbc450720b6e3661dc14177f6095bb
6898cb7b1725a4224a6e7fc6cfcf8dc634065608
2ee55a9a2b2f25dfbad0725e2b44a5ea758516c8589f2f0c2fe8c946287407af
GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yp7saHPgK%2FdjLJfpjawn8eoMXp9DU2Vaew3nHQS4EBqtBlXJJPr61c55PuIQeY6K%2FcMooWJJFupoVQ5yUihTdYrzraVpmOxJ1XfrC8WcOgyfPhhKp76%2FBfrDVWAlpw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda309ae1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
200 OK 1.6 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
IP
File type ASCII text, with CRLF line terminators
Hash 3fcb0d88088f0e55c490573d9283c88a
6cfae6065bab40117fd241c536630c1c934c033c
1f91f493e9731afedede6c0626959993538cf13569434c5d0639273886b04075
GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IR9hJgvksVXSIBYprJVFzDgNq%2F21hlMO7iEoM6S2Qhc2lxXExtKy%2By08cbGUxegDpUBLKF5vV%2F94ElPmfqGJE%2FXFBhHfNkK8Vv591iP%2FoU8Nr%2Bqusp%2BFlTb1ZhefcA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda30e11b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
200 OK 4.3 kB URL HTTP/1.1 surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash acceec62f949a07f1d1e07d4e88c0b76
b19d22f7b838357798be6a17ad9f30b4f114c41e
bbed1144be64bc962ce6ae0e94a8176e566ce7b3bfea999419de8da948b97219
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KvKLtXefS6qCe8%2FNIJVNrwp%2BpsBWkkBDde2UbJDVbtJzxTWlzey73hagTfdZ0GJ8vu4I1f4txmAeqF3pyvEBal3DcPc8ahlnRXg%2B2urfvM88Z56hM2hPDuBOPWWzEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda30a5ab503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
200 OK 521 B URL HTTP/1.1 surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
IP
Hash 2291cad033de47da5bf45d44d3fb1c09
ef8ed11bba4cd1b1f649bbd3d64f79f1702e0851
a67c9a95aebe4a4dd8839404fdd77a4ee64f7a65e5859a1dd2255379ddf80235
GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C5m99YwK4t%2Fh1jVfhczxYgakhmidT2jXMvklRJl%2B0pcD8WDXziEyj%2FjuX%2Bn0v3LPv%2BGsDC1dbjVhtnqVH1N4TfNNrFQ3o1LfDyQyYjiIBMb2A5fNNJnxZvdK2SrjsA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda30a35b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
200 OK 433 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
IP
Hash c459cce9b7bfe8874065f27071c0fa5d
9c48040bd8aed19832c1c6093ddb4d4adef71bda
6b41fda0c20e0aa799c788122491afb3ac541bbe574f4e492d13168a8b2d42ad
GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3DznZked61Zv8tmDmOsgtKCCw0eb3zkgBZo3mKHhrhuqSYQKCnSpL4OYeGDwyOifFhVIxxw35mYITzUigwnc04NlBgdR9CXNqbjWMCGVtt5KAuVXBJ3vcXCqKLOCsg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda31c67b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
200 OK 489 B URL HTTP/1.1 surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
IP
File type ASCII text, with CRLF line terminators
Hash c8ad5eb64f1140cbe2df28519b376aa2
2782b2ec1b9dd5f9a25eec3b2f7f53de9a3b83c0
766695e386f4d4860ded979bf96717fa000ba7a1da95d900a48f5ddbeff95344
GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lwHTJujCcVQaotgMrhrcg3qNNzYPKHxH3oE%2Fe7E92vhA7o9d1W%2FETB%2FnRXPBO9EmtjYYTjqaF22p4tUW3rnhWkMs%2B%2F3nmnqImf96kAQJpKKfzdw%2B%2BqNQTgrWsh095g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda32c0db527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
200 OK 1.5 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
IP
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HAeigfkB1Gjy6mvhyywoORfDeIPVlnBfPWagL8RPZTLv5tnLOldB%2Bzc1xnKuLJdMNUUGJiaMgXdtRKTQHIp3aGvkYgcAx%2BBJuCPsd4d8CBR8X6PlTGAPQfcKn19LTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda32c6cb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
200 OK 464 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
IP
Hash e4a982df8ef82dfca6e739af2f2c70c9
0ec97ae743cb03849eee9c6f1c0539eec7c737ac
c9f369c77f62349d1a42f1e9ed7b3bd82c29ac23a13cda519eb9cb79689271a9
GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P87Jg%2FJcJB4p%2BxHRi8tjh%2FHfBjEvcOn8zX2idYNpcfgLJPtC%2F2sfQERvR1GcdVshEIsgGsJyAg0dV%2F14HuegzMaqbN1wwWWE%2BMOWHzP2ZiazOQw7t8EP7uF0m8pYxw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda329b91c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 2f89b08855471c7476435ce0bec33ba7
970533f152623df03b5fc6fb793b21889e4e0349
d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BNHcpK%2FTDGuAldGGfORTVy74XI28FVx5cP87Ttt9TkcJfX2zlP09x7%2BfNeuN%2BhrSUK03Z6med0UE5S%2BE3%2BxM2oUsqezbQdwTle%2B9dWbiovncPF7pO8hjKh2Ir8lxOg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda32a3cb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
IP
File type ASCII text, with very long lines (10082)
Hash ec17f8a80c23d0b8fc814fcbdb52653e
512c64d495ed700b16d5ccd79a753dd8cfd118e4
883e795f544da6c4b3b39643b9c84aa49d86f0bdeb511de4a790f63152fd89e8
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AHAalWHikhs8%2FrSOqsEFtZEIvES6W3Bsc3byKcLGBmpUVwDsqvf4DljWx5kTwyGQgEsx0aLjsfzvt7UfH0tM8VWjcj30HTCB0KRyWcPoa7RYQFURnvs78rMutSeNhg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda32e1bb51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 9805483db0b3d5fd0639186799348f34
eb28f7ec752038cbd9425c66b54c339ad1236695
9dca4af372f7b1d8d1af5a3c18ed6a827e4f8f358e8404b64fa7a2ff961b5c60
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pTSfzJDIZnaqmdOQNhSyrTZ03Utkd%2BPWPHQrduemZISjOEK46ujHRr53Rzj1lWIrgcD27vKP5GSovXONGYLzourTYA3LZPOhbXr6csVICiGN9qn%2F%2F5JpZdTizrDr%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda32a72b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
200 OK 831 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
IP
Hash e9dddc3f35ae0107e1cf0cf680a251a7
26e702e6ed363dbd7508cdfaebfb3c37b51e966b
3c114642de150576617c3e8c9a5ca94d0f351e0d653a069bb269c444fdf80bfd
GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fNa%2B7ksvQ1AnxBG0f%2B9gRsNwBjyDXX6BVFcQvBwbHwigltgT%2FMKSZYEFGoN1XJFqWH2QmdbILDOjm%2F9vOr8iAiYgsJVm29EFz7iTbcMTL6%2B9Mdk%2BY6X4Jge8KXERFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda32c13b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.o333o.com/asg_embed.js
200 OK 52 kB URL HTTP/1.1 cdn.o333o.com/asg_embed.js
IP
File type Unicode text, UTF-8 text, with very long lines (65467), with no line terminators
Hash 2cc3dbc2ed4b871bafca793ef56bc336
9b2b19b96ca2b9989b4976a8934070b1ef4efe78
03015f097efb01d8572b62f6b573fb115bcad04ad52c947f59014304d96da493
GET /asg_embed.js HTTP/1.1
Host: cdn.o333o.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51578
Content-Type: application/javascript
Last-Modified: Thu, 17 Nov 2022 11:24:59 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "63761a0b-c97a"
Cache-Control: max-age=315360000, public
X-HW: 1669772329.dop224.sk1.t,1669772329.cds239.sk1.c
Access-Control-Allow-Origin: *
surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
200 OK 743 B URL HTTP/1.1 surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash b146105040f6faa62806b35ad455d121
14aa49ed4f29b666221a8de3fd17f04455f12b15
05f4d51649be6878352af6843f9a5ffc14bb96ca7a02db21a35a14f6a150b004
GET /wp-includes/js/wp-embed.min.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jRPRUlYfotyW8iEn1%2BD1rgc9fvkcjDbGnfeMQJUrrpvw%2FlUVSn1vn4Ogxr8Nwm2WZVbVf0eFZjDznPX1tXOvtLqECwz0SQ46KeTccK%2BB08aFfOJW4ALvLLVi4ZretQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda3ce67b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
200 OK 748 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
IP
File type ASCII text, with very long lines (516)
Hash a916ec8951d8cb10ee6fdfecaa3eae84
0f5ed720b36bf6d0474bfdea0fe97ce2f4c28296
eadd127040367bb43fe787cece1d4e624cb6933c31e20b8b73611a79bdd3b15b
GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bplucybw9RR7ODLcqtNY2bRcxMxso1irn4GiqpXr38ke1tl9H%2BaTQ0rLormyBbNRaiIRzUhPWB8hsuIvPba8eBGvyN%2Fc47410Q2BPDW%2BnpnomgaHz6Vdp3Fq4l3HVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda3cabbb503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
200 OK 457 B URL HTTP/1.1 surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (1087), with no line terminators
Hash 1fa25d83bb5be8564841713f48e94332
dc5921fc9171ae8f69a52e1f00ea1c43ae3ea8d2
da9e1e7235fb597df5fc429718a771bc8431810ea07f7d2c40dba0b56ccd8cf7
GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zTqKLhgrazzfEPvI%2Bf4FEQFgW%2F5mvJwhjAxwUpNGx%2BswSSfBwM2ePeanPoJPzAj7%2FXofGv%2FXTGfDIwLBYTUJ333wsDtRu4G5kjkc4c%2BLcrSeJcwnSctx9aOIatOHuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda3ca78b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash de28d6bd5ca8419258b30cea7ce28a54
31fb421f97fd68449e1c3e7eb71614a08546e6e7
7f4990a86ed8e6ee281cdfe874f4794d93eaa967de51cb6e2017ac1f9d79b380
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163001
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:49 GMT
Etag: "63868de2-117"
Expires: Thu, 01 Dec 2022 22:55:30 GMT
Last-Modified: Tue, 29 Nov 2022 22:55:30 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash de28d6bd5ca8419258b30cea7ce28a54
31fb421f97fd68449e1c3e7eb71614a08546e6e7
7f4990a86ed8e6ee281cdfe874f4794d93eaa967de51cb6e2017ac1f9d79b380
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163001
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:49 GMT
Etag: "63868de2-117"
Expires: Thu, 01 Dec 2022 22:55:30 GMT
Last-Modified: Tue, 29 Nov 2022 22:55:30 GMT
Server: nginx
Content-Length: 279
nefree.com/images/2020/11/24/769d199aad6c114a2d2af8ca34008b0d.md.jpg
200 OK 41 kB URL HTTP/2 nefree.com/images/2020/11/24/769d199aad6c114a2d2af8ca34008b0d.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash 673f963167d31a58e678cd56f8c50ed4
574f94a6e68b72193b65fe858318d6ab6cac019a
f342a4c12f3e17ff6e57be6602db16f767ef1df79ab6dd0e4c7ec4d28325f732
GET /images/2020/11/24/769d199aad6c114a2d2af8ca34008b0d.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:49 GMT
content-type: image/jpeg
content-length: 40870
last-modified: Tue, 24 Nov 2020 14:28:49 GMT
etag: "5fbd18a1-9fa6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9OEOKkgMb2799SQOFz4GKu08HyjxHI%2FjSe4%2BFhauYrwYu27Czos4FckPtxX16jvJbcFeQKwGVFikc%2Bz80C6FNi%2Bn5mtoZaZeXv7l107RO3QuwLidEBrd4pqP02HB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fdda50d4ffac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash de28d6bd5ca8419258b30cea7ce28a54
31fb421f97fd68449e1c3e7eb71614a08546e6e7
7f4990a86ed8e6ee281cdfe874f4794d93eaa967de51cb6e2017ac1f9d79b380
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163001
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:49 GMT
Etag: "63868de2-117"
Expires: Thu, 01 Dec 2022 22:55:30 GMT
Last-Modified: Tue, 29 Nov 2022 22:55:30 GMT
Server: nginx
Content-Length: 279
nefree.com/images/2020/11/24/80d25a8ac677151813ec598b9552177f.md.jpg
200 OK 11 kB URL HTTP/2 nefree.com/images/2020/11/24/80d25a8ac677151813ec598b9552177f.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash e958dbefb21f788094b31262c23d0a17
de60678459359b25a3d96bbe29e46d12d31c22cb
42fd2fe72f27d62f55ef6de0afdf6868b5549b614c2bc46d47674c84b9626528
GET /images/2020/11/24/80d25a8ac677151813ec598b9552177f.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:49 GMT
content-type: image/jpeg
content-length: 10960
last-modified: Tue, 24 Nov 2020 14:28:50 GMT
etag: "5fbd18a2-2ad0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QjZZkx8MCm%2BwgOHhMVw91UlAbRNRV%2B8JdywnwLEKefTjnST6EevYKNPMS3lYCnasocF8nXCQHgnGqLmNbSredkwUyP6osqvklB4MxcwpT9e0UbqGtJnzV4oDTbC0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fdda50d50fac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2020/11/24/12b21f5cc8312a82325c79c290e2d645.md.jpg
200 OK 40 kB URL HTTP/2 nefree.com/images/2020/11/24/12b21f5cc8312a82325c79c290e2d645.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash 21774861c418ff7b3ab3a0b89ea18285
6f1b39a42bf9d89aadc412f95a91454cca7a1e9b
df326ed1b7db9b49346ad0552cb09a8d12e951c643e9d6dca3b64e9e5648050d
GET /images/2020/11/24/12b21f5cc8312a82325c79c290e2d645.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:49 GMT
content-type: image/jpeg
content-length: 40448
last-modified: Tue, 24 Nov 2020 14:28:51 GMT
etag: "5fbd18a3-9e00"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WjhJxGpw4W6sFZmfXh4xy6XLPfEzdgqs1Ce0dNvGgjB1biLYdoNLw6CbtGNXRR293a2hEYfdMs1kLdwjKC4LEFiZWRWRxIJ0iXSZ%2BNYtJYUqMzsyzkzLhkRK0FeH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fdda50d4efac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surefap.org/ljekdimdzcz.php
200 OK 11 kB URL HTTP/1.1 surefap.org/ljekdimdzcz.php
IP
File type ASCII text, with very long lines (10335)
Hash 1eccbbbdf82b53d108dcdd0f4ac7fa78
a8225dcb111a925b67b7c76c475a35648808b602
2fa5812d2aebec96843d5f07486fb657832be71cb06191d1a72b0ae51a166b2d
GET /ljekdimdzcz.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=120
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S6sEN%2BskJBr1NjNls%2F4a2zAdDFHNfR%2FZFnXEAYQRD7RFL6MGqvba5KjPdrPSHpGaVw1hzZKA1XUGivyDWKYeS%2BAnAN6F5xlG72X6jgRpLGhk4XJMo01vzqRMQIwsJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 771fdda33c71b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash de28d6bd5ca8419258b30cea7ce28a54
31fb421f97fd68449e1c3e7eb71614a08546e6e7
7f4990a86ed8e6ee281cdfe874f4794d93eaa967de51cb6e2017ac1f9d79b380
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=163001
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "63868de2-117"
Expires: Thu, 01 Dec 2022 22:55:31 GMT
Last-Modified: Tue, 29 Nov 2022 22:55:30 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
surefap.org/wp-content/uploads/wordpress-popular-posts/427385-featured-269x170.jpg
200 OK 20 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/427385-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 269x170, components 3\012- data
Hash 9f9b203bbf005d524913e4ebce8f41f1
c0f0ca3c46d7124357c1ad78395ccbd25db9f457
0f5e3e98c625dce982abbe9b46197abc7d565f22023d9f05b46b78f7bc2e655c
GET /wp-content/uploads/wordpress-popular-posts/427385-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 19521
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 15:28:44 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J7ali2yE%2B60bFwpNAr0pmDYAhVC7OqdWTq4kmiMjdgmsUYE5Ka0XijgiFSVFujTq%2BpNIP%2F1DBO8B1Pm43OsusBNZIHvXaueXpJgSr8y2uYwhykHf9fTfy4jJ2M0ydQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda6ff9bb51b-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
200 OK 96 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash af0cbbc54929fe5b3717ac2ac86081b9
e4426f5722c2f1c50aef206b49809c881f933883
d725b5470eb89f76a72a0367b22eb957e862d6518cfc79bc1b03b6331c641cfd
GET /wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/png
Content-Length: 95698
Connection: keep-alive
Last-Modified: Sat, 08 Feb 2020 05:34:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tv3ilKdyhgypGsB%2B3%2BHd49yXTCexmf0CTlMz2p353P5Q3EAWnOjSTN%2BkPx9q4Q7D%2F27r%2FtxM6yPdnxOkW8%2FzaDSQEIn4yhF0pwNqlrHDBR8JwKaSzuuYbRHScMRNcg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda6fc7ab503-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
200 OK 8.6 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 269x170, components 3\012- data
Hash dc9802a6d8bb38c758f2e602de516de3
60809f2f96869416259893a43c91fe392f3a3a4d
789981c56beb944e93e129833632dd5b53e97012360fbf0f7b4e77c399996c05
GET /wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 8613
Connection: keep-alive
Last-Modified: Sun, 09 Oct 2022 20:09:59 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qzg2IWvl6VeoO%2FtOcRECIzrqUJYCzFL6XQGySKZry6otIGe3DI%2Fvc3JFTOfSx7UrZ790lvpWsLxkkWOd013xj%2B5Ivl0s4S5JlgEcxVM%2B9CVCmqmnkDEcoCIczkP0mw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda6fbbbb511-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/113202-featured-269x170.jpg
200 OK 13 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/113202-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 269x170, components 3\012- data
Hash 7cd058f4e4ace502b322cfeab2cf0f2e
d9a00bb100b47c2e901a9015221f2bf808bf8104
e92409ad2b42f626d837454abaa18eae58dab1317d1605962517eff353741c43
GET /wp-content/uploads/wordpress-popular-posts/113202-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 13067
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 04:40:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2B9rJ3tHH9LfsJZcqFQuoNc1HcDF5CTiueXIg7J4%2FrOzs2mcvndzEXjoHZrsj%2FB31mcU96xi7EK3D9%2Bxql72v%2BL66IBnQxtxW94KF6xLOqEwfymCzpuFtN0OXA2Vdg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda70facb51b-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 01:11:13 GMT
cache-control: public,max-age=3600
age: 1657
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_half.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_half.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 588b17094e80f6cd51f16d642151e9cc
e8c3c64dd496a8d487450e8b594ab4f86c394215
7599b02c78a3b4c19a0d7f6e3d7bc181d8f1abeda40de117d82ce2f4ff7f3dc5
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_half.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3128
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nIfPJyJJKFMeLOjQg2UfbDJF2aNBqbqZnKONECLuva4HsROan7PkkfMSZWtoJmQ%2Fnksodb%2Bm8IpolwiAtta4ArJvAZMxDMwvoJ85h75L9adNCSDhsH9pwY%2Bk6gMbRA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda71c8fb503-OSL
alt-svc: h2=":443"; ma=60
r01.imgrock.net/i/00174/bsxuzpzhakzm_t.jpg
301 Moved Permanently 162 B URL HTTP/1.1 r01.imgrock.net/i/00174/bsxuzpzhakzm_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /i/00174/bsxuzpzhakzm_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://r01.imgrock.net/i/00174/bsxuzpzhakzm_t.jpg
r01.imgrock.net/i/00174/ueqoeode3q8d_t.jpg
301 Moved Permanently 162 B URL HTTP/1.1 r01.imgrock.net/i/00174/ueqoeode3q8d_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /i/00174/ueqoeode3q8d_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://r01.imgrock.net/i/00174/ueqoeode3q8d_t.jpg
r01.imgrock.net/i/00178/xlyz1qllvkha_t.jpg
301 Moved Permanently 162 B URL HTTP/1.1 r01.imgrock.net/i/00178/xlyz1qllvkha_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /i/00178/xlyz1qllvkha_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://r01.imgrock.net/i/00178/xlyz1qllvkha_t.jpg
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 1e483d25aa3a2c769c7e680eb75b52a3
2dfe501fc81cd6939bd014cedb41af85b4e3c7af
be1b058eb9e3fef483e425718456e8bc58fda7d4a81de0d6e794b1e03dfdbd01
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3128
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E5k5jxaKNvG98CcWOibdT7PdiB03y5uaI31h8%2FFibX0xxU%2F8Wjp%2F3Ys3p%2BBqJarP4IwxVw%2FpGFYkSH2yevV3QJ%2B2%2BHoyX8cHjbC3hqxBafLifbEP%2BCjooqqgmXSvXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda76cb9b503-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
200 OK 65 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a80cc46f72d3fb004dbe75ccafd776b
e6e9764bcef6edc5242d61e7b9f740115a57b9cf
41ded72e1e0bdf063ac95b32f15599a553f244fd0e300d1997e0caf3e76142d2
GET /wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/png
Content-Length: 64971
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pj5PTCQP%2BA1mZuFffnwe0ypgP9zjD5DDSzYJuWAROH%2FvzEumgiFnVd9quZHrdTwQi1YZSfAiISpRRwNT43jLJJ0JWs3OmvRd%2FowAMIA3Rf8if7um8yHFl0XcxzvPEA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda79fd5b51b-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif
200 OK 608 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash b25a265876454612d42aaea3b7556afe
860dc1663507b68d152dc9b25fa43c05390afe77
6bf7f288ac5290f7089ea2b900a2a4d418882a3d9da24e83d26cc7081ac69d25
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/gif
Content-Length: 608
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5CoKXau7Y5dxj75ZIkJRMYbiQnZm9c8NaF6Drnwc4zT9dYM%2FQ7J4hZAruG8bpD0ljLucEnGF%2BF75V8MbP%2BF8fJfcjHcX3ejzYMN%2B%2BaJ7i6DAKoGQQmlAAUjCsH1Pvg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda7afdab51b-OSL
alt-svc: h2=":443"; ma=60
r01.imgrock.net/i/00174/in65z1noz5r6_t.jpg
301 Moved Permanently 162 B URL HTTP/1.1 r01.imgrock.net/i/00174/in65z1noz5r6_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /i/00174/in65z1noz5r6_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://r01.imgrock.net/i/00174/in65z1noz5r6_t.jpg
r01.imgrock.net/i/00178/epfx8b01lrdl_t.jpg
301 Moved Permanently 162 B URL HTTP/1.1 r01.imgrock.net/i/00178/epfx8b01lrdl_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /i/00178/epfx8b01lrdl_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://r01.imgrock.net/i/00178/epfx8b01lrdl_t.jpg
r01.imgrock.net/i/00178/5ta4zrwil7mw_t.jpg
301 Moved Permanently 162 B URL HTTP/1.1 r01.imgrock.net/i/00178/5ta4zrwil7mw_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /i/00178/5ta4zrwil7mw_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://r01.imgrock.net/i/00178/5ta4zrwil7mw_t.jpg
surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
200 OK 270 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3\012- data
Size 270 kB (269711 bytes)
Hash d30a4392660ba150ffcb590ecf3b959f
917018a795e409303eecc5e560c2cc4db2785978
5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa
GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 269711
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6677
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ju8%2FlYzaObm0nS2Tsasl82cWKqywFDd2It7F9NQ0v3rjL9vltvWn6jof8w6JyIvENOAIrVAqWUfQ1dbKioN%2B1qYdz%2F%2Fij09ZgpRUlmQWZiT8SixvLS0VPW4XlpwUKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda7fb491c12-OSL
alt-svc: h2=":443"; ma=60
a.shukriya90.com/api/settings/23307
404 Not Found 9 B URL HTTP/2 a.shukriya90.com/api/settings/23307
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 9e076f5885f5cc16a4b5aeb8de4adff5
475c848673a3f79fa778f01c2bd5a721d4c41707
e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
GET /api/settings/23307 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Origin: http://surefap.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/plain; charset=utf-8
content-length: 9
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
200 OK 3.6 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 6816645322f887d5e69fd22931a337d8
559570b1d36fbbaa2f764fca7372833d4553306f
924eb6a1da5d1e38f4688ff30fe5100b3df13d9978dca80715cfa05888a3e359
GET /api/spots/303160?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=GGU8GmueJWluuqJ2Qk86; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 465cc21376eedaa95554dac19b4eb3fc
0eb9cf6c7d152a24f2aa59aa99e2ea471187afcd
2f2a0540dfebc7ec79a9f252f2fd4977f445c170cba978a97ca701d8357e8631
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=KcIOjlNZIuCgYan1mW9Z; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
surefap.org/wp-content/uploads/2017/02/surefap.org__Super-Hero-Party-01__44706536_544363584-300x389.jpg
200 OK 35 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/02/surefap.org__Super-Hero-Party-01__44706536_544363584-300x389.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x389, components 3\012- data
Hash 6167b610bddc638c62e2d770d586836c
e9c76c3daf0dfa8de8a0c414edd4acc3b6a93c00
7e5680499c2adb096c7b41cc81b32655127b7192f1a639cb05d14d900abf7457
GET /wp-content/uploads/2017/02/surefap.org__Super-Hero-Party-01__44706536_544363584-300x389.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 35127
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:17 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Z9tOOlANMbXq6pju7tSdsoEWPcVHB%2FTo8r0ZDUF2f59yFacDBAUAgRCPoIW5KV40WPhoIHIWRospng9JvdUkgLZzIiIvdl7Y%2BpJHnfyt8veHGAK2w1Ilp6B0LjeUg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda7dc1cb511-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/11/19/4a2be9e820ac7baaf451168416815833.md.jpg
200 OK 60 kB URL HTTP/2 4tymode.win/images/2020/11/19/4a2be9e820ac7baaf451168416815833.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 2ae34c25a6b065ea5f8cfacb5a53ea14
69a844877b7e6bfe388bb5683c0607121ee9e1cc
5dc6102a3cce125e930aaf7c489fb7571c07e947f3a2ea014185df41d0c0079d
GET /images/2020/11/19/4a2be9e820ac7baaf451168416815833.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 19 Nov 2020 22:07:05 GMT
accept-ranges: bytes
content-length: 60014
content-type: image/jpeg
date: Wed, 30 Nov 2022 01:38:50 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/19/33abe30ff8992c5a5084320efda4dbd1.md.jpg
200 OK 14 kB URL HTTP/2 4tymode.win/images/2020/11/19/33abe30ff8992c5a5084320efda4dbd1.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 361afab47c8ad8c64f231b8d28c81b75
cb42e2e28d15090f044c8f581e3235251ade37cb
17c8c834ed106763b2275471bf2d87c695c85b09790cbdf19169f8749882a48a
GET /images/2020/11/19/33abe30ff8992c5a5084320efda4dbd1.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 19 Nov 2020 22:07:05 GMT
accept-ranges: bytes
content-length: 14210
content-type: image/jpeg
date: Wed, 30 Nov 2022 01:38:50 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56fc940074353d8a107e151db81000aa
592be46f1fbb675c02d53f1558fd486532eadccd
a4dc202c077cdb3676139639985419230030b32913fc6b6f5721b1adddafc13b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4DC202C077CDB3676139639985419230030B32913FC6B6F5721B1ADDDAFC13B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4199
Expires: Wed, 30 Nov 2022 02:48:49 GMT
Date: Wed, 30 Nov 2022 01:38:50 GMT
Connection: keep-alive
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash b035e838f1ed94f51643bef361f40b93
14ea8d2d1dccda6f86a74ffb2bbe8c1d068f5f46
9f31f838ac45df0d22562081a8e0a3c73c683f4810adcf47b655aa4d95a5e779
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=18iROw0TJhItfmfov8Yq; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
surefap.org/wp-content/uploads/2017/02/surefap.org__Comic-Con-Part-One-ENG_MONO-00-Cover-Gotofap.tk-91675858_2043060690-300x388.jpg
200 OK 35 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/02/surefap.org__Comic-Con-Part-One-ENG_MONO-00-Cover-Gotofap.tk-91675858_2043060690-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash a44031d1b610403a4e60e3e92b7b5c11
d4feca824c5edd4c92f8dd2c7cb812ec424557aa
7ac9e97d75c5f22a3fb9d7f6494fc9825a9569ed92653b8ad47894c4b8192fe8
GET /wp-content/uploads/2017/02/surefap.org__Comic-Con-Part-One-ENG_MONO-00-Cover-Gotofap.tk-91675858_2043060690-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 34620
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:17 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=przSanA4aQce4R6fZ3QGhHn84BGbu%2BmP2RJBGjUp0ci0DVrPhaYsKEUlZqbuLkzO6skAOW%2BSn3bd0%2FAbPjbQO43oK4uuMWPz%2B0sn8phZ0meHiz2V0zI6LmzHA9bgPw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda7bfe5b51b-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2017/01/surefap.org__Comic-Con-Part-One-ENG_COLOR-00-Cover__87551454_1862689136-300x388.jpg
200 OK 39 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/01/surefap.org__Comic-Con-Part-One-ENG_COLOR-00-Cover__87551454_1862689136-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash 7afe799d7827c3fa036898664835c5bd
fd75da46aa4780851062d1b6bc3be942f57af10b
32804cb6fdb1e6e135b0719bdfa9207330235295540c0b100d8b9c66060993f8
GET /wp-content/uploads/2017/01/surefap.org__Comic-Con-Part-One-ENG_COLOR-00-Cover__87551454_1862689136-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 38966
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HpEPnF20lQf3EViDA5nGbwDzVUTvNIQNVA9rmkzwGYxsJK7nX%2FWXJFhUFTsS%2B1JgoJnwIvYjeuna1v4TiSAKEfFCrA2o%2BAfQK6ZUlaBBRroEZiILl7%2BHSa70HlNYdg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda7ce40b50c-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/11/19/a23c4f85bf66ce807105f3917a045c69.md.jpg
200 OK 52 kB URL HTTP/2 4tymode.win/images/2020/11/19/a23c4f85bf66ce807105f3917a045c69.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 7253a08a2836bc22ad29e2b8486918e0
9469f3faf015e5924ee2d853b6f5d698bc637a4e
aec09ae31a6dd6fda6662b2e686665305d0d0fae5b00abad4369df0bdce395b9
GET /images/2020/11/19/a23c4f85bf66ce807105f3917a045c69.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 19 Nov 2020 22:07:06 GMT
accept-ranges: bytes
content-length: 52470
content-type: image/jpeg
date: Wed, 30 Nov 2022 01:38:50 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5261
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Last-Modified: Wed, 30 Nov 2022 00:11:09 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
surefap.org/wp-content/uploads/2017/04/surefap.org--Comic-Con-Part-Two-0173689401_1942661740.jpg
200 OK 1.1 MB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/04/surefap.org--Comic-Con-Part-Two-0173689401_1942661740.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 2040x2640, components 3\012- data
Size 1.1 MB (1121915 bytes)
Hash ebc0ff92919a5b1a37c835ada520ff5b
bce42044171a0f121e2c92b4e0660a422ae2b080
d646676f219437c4c8157f93c30e03d674f2bafa38d2d8e8f37ad14d424abc6f
GET /wp-content/uploads/2017/04/surefap.org--Comic-Con-Part-Two-0173689401_1942661740.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/jpeg
Content-Length: 1121915
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ki%2BzIj88ZSWj0jdsjklZ%2BEgF8mDKiEVldY8ahpuXyhma426u5igbUjAiMVDGPbenncZIIsIefA7za6OVUgihCIDCQomoub%2BKXYPJDOVQfkcIafhVClRDimkR4sQG5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fdda77cc8b503-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://surefap.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 21:18:06 GMT
expires: Tue, 28 Nov 2023 21:18:06 GMT
cache-control: public, max-age=31536000
age: 102044
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56fc940074353d8a107e151db81000aa
592be46f1fbb675c02d53f1558fd486532eadccd
a4dc202c077cdb3676139639985419230030b32913fc6b6f5721b1adddafc13b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4DC202C077CDB3676139639985419230030B32913FC6B6F5721B1ADDDAFC13B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4199
Expires: Wed, 30 Nov 2022 02:48:49 GMT
Date: Wed, 30 Nov 2022 01:38:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5261
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Last-Modified: Wed, 30 Nov 2022 00:11:09 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
r01.imgrock.net/i/00178/5ta4zrwil7mw_t.jpg
302 Found 138 B URL HTTP/2 r01.imgrock.net/i/00178/5ta4zrwil7mw_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i/00178/5ta4zrwil7mw_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html
content-length: 138
location: https://pi3.piczhq.com/i/00178/5ta4zrwil7mw_t.jpg
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
a.shukriya90.com/api/click/2434086921164280095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/2434086921164280095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/2434086921164280095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
r01.imgrock.net/i/00174/ueqoeode3q8d_t.jpg
302 Found 138 B URL HTTP/2 r01.imgrock.net/i/00174/ueqoeode3q8d_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i/00174/ueqoeode3q8d_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html
content-length: 138
location: https://pi3.piczhq.com/i/00174/ueqoeode3q8d_t.jpg
X-Firefox-Spdy: h2
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
r01.imgrock.net/i/00178/xlyz1qllvkha_t.jpg
302 Found 138 B URL HTTP/2 r01.imgrock.net/i/00178/xlyz1qllvkha_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i/00178/xlyz1qllvkha_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html
content-length: 138
location: https://pi3.piczhq.com/i/00178/xlyz1qllvkha_t.jpg
X-Firefox-Spdy: h2
r01.imgrock.net/i/00174/in65z1noz5r6_t.jpg
302 Found 138 B URL HTTP/2 r01.imgrock.net/i/00174/in65z1noz5r6_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i/00174/in65z1noz5r6_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html
content-length: 138
location: https://pi3.piczhq.com/i/00174/in65z1noz5r6_t.jpg
X-Firefox-Spdy: h2
r01.imgrock.net/i/00174/bsxuzpzhakzm_t.jpg
302 Found 138 B URL HTTP/2 r01.imgrock.net/i/00174/bsxuzpzhakzm_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i/00174/bsxuzpzhakzm_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html
content-length: 138
location: https://pi3.piczhq.com/i/00174/bsxuzpzhakzm_t.jpg
X-Firefox-Spdy: h2
r01.imgrock.net/i/00178/epfx8b01lrdl_t.jpg
302 Found 138 B URL HTTP/2 r01.imgrock.net/i/00178/epfx8b01lrdl_t.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i/00178/epfx8b01lrdl_t.jpg HTTP/1.1
Host: r01.imgrock.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html
content-length: 138
location: https://pi3.piczhq.com/i/00178/epfx8b01lrdl_t.jpg
X-Firefox-Spdy: h2
a.shukriya90.com/api/click/17216417071848213095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/17216417071848213095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/17216417071848213095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.shukriya90.com/api/click/11239106095975077095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/11239106095975077095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11239106095975077095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
ocsp.digicert.com/
200 OK 278 B IP
Hash d4f78398f778a3bf479cf70ebbee0b30
adb67965be6876fd53287701cfbd7261cb6fb714
2d42a9be5e25597ef542805a28e19c05a071f6e0e9033029e74edb75ca16fa74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6595
Cache-Control: max-age=119899
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "6385cbc3-116"
Expires: Thu, 01 Dec 2022 10:57:09 GMT
Last-Modified: Tue, 29 Nov 2022 09:07:15 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash d4f78398f778a3bf479cf70ebbee0b30
adb67965be6876fd53287701cfbd7261cb6fb714
2d42a9be5e25597ef542805a28e19c05a071f6e0e9033029e74edb75ca16fa74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6050
Cache-Control: public, max-age=1209600
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "63866b87-37"
Last-Modified: Tue, 29 Nov 2022 20:28:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 55 B IP
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3644
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "63866b9a-37"
Last-Modified: Tue, 29 Nov 2022 20:29:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 55
ocsp.digicert.com/
200 OK 278 B IP
Hash d4f78398f778a3bf479cf70ebbee0b30
adb67965be6876fd53287701cfbd7261cb6fb714
2d42a9be5e25597ef542805a28e19c05a071f6e0e9033029e74edb75ca16fa74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6595
Cache-Control: max-age=119899
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "6385cbc3-116"
Expires: Thu, 01 Dec 2022 10:57:09 GMT
Last-Modified: Tue, 29 Nov 2022 09:07:15 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash d4f78398f778a3bf479cf70ebbee0b30
adb67965be6876fd53287701cfbd7261cb6fb714
2d42a9be5e25597ef542805a28e19c05a071f6e0e9033029e74edb75ca16fa74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6595
Cache-Control: max-age=119899
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "6385cbc3-116"
Expires: Thu, 01 Dec 2022 10:57:09 GMT
Last-Modified: Tue, 29 Nov 2022 09:07:15 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: O4J49J37bSTGP5z6xeJlYA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: N59Fr4par/HQ2WIVneRHel6QHNE=
pi3.piczhq.com/i/00174/in65z1noz5r6_t.jpg
200 OK 11 kB URL HTTP/2 pi3.piczhq.com/i/00174/in65z1noz5r6_t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 155x200, components 3\012- data
Hash 83b2d7578b1bb453f57cb9c7a5fe55d9
4cae1a88cfa5408f67a10b2c6463ca5e688d622d
80a60fabc06542060f7d1093a4ef90ff5289da2b1a37e5fba0854da6550274aa
GET /i/00174/in65z1noz5r6_t.jpg HTTP/1.1
Host: pi3.piczhq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: image/jpeg
content-length: 10571
cache-control: public, max-age=31536000, s-maxage=21600
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u6c6qSBHUd7unVGNzB3TCDazfR4y5gdI9wmEsnbOfDhZtpM2OpHvHo7xmnzMrU6t5qFOvLvhr6WPCUvEyxAzYNP0kN0pawM5j6aqI1lRglCUkV4iyyIKbUoejmOPN7oW6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fddaa0af0b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pi3.piczhq.com/i/00174/bsxuzpzhakzm_t.jpg
200 OK 10 kB URL HTTP/2 pi3.piczhq.com/i/00174/bsxuzpzhakzm_t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 155x200, components 3\012- data
Hash 172d8b2d455d56bde73cd8e744b69bd9
33baac73022ddf80019e0f149bcc73f00e6fb36a
71bd2fcabae071f0d678ccd7a6bbe17a739c3c99fb2bc61268ec1110caac18fc
GET /i/00174/bsxuzpzhakzm_t.jpg HTTP/1.1
Host: pi3.piczhq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: image/jpeg
content-length: 10358
cache-control: public, max-age=31536000, s-maxage=21600
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ahie%2BHQ0RZj3J3pPn1XxUlkTK1WkhAfCz4nMITnDN2SB3abNgdNYGM3fdGh%2Fvioyn%2BBDkGoNeHOflgGDAjhGq%2FZtm5d0lrOhGvwiohmEWNB6EM1W5h9qwyrGbh%2FXMNHxDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fddaa0af5b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pi3.piczhq.com/i/00178/xlyz1qllvkha_t.jpg
200 OK 9.8 kB URL HTTP/2 pi3.piczhq.com/i/00178/xlyz1qllvkha_t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 155x200, components 3\012- data
Hash 8972d17773264638072e2461eabc9d50
410498c7b898e874e79c7be6687952a36eae5c69
4983a338a3bdd68479709610ad4751efb75612bbf7eb9d74954aebd297259f2e
GET /i/00178/xlyz1qllvkha_t.jpg HTTP/1.1
Host: pi3.piczhq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: image/jpeg
content-length: 9813
cache-control: public, max-age=31536000, s-maxage=21600
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rTJU8CrttmgMARuA6vRUztpUlVNj638iEruMKYODfHABpQSjJ0U2PKwKa59Vqhi8R0fv7POKET3xzkev2SjnIWgU4R88CUH%2Fg3JJabjkwlP9IXf0bJxtK8wSk431hxeMxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fddaa1affb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stenadewy.pro/abWcZ.ydP-3fBg1hci2_hkalbm2n5-lpSqWrQs9_NuDvEw1xO-TzUAyBMCi_ZE6FbG2H5-lJSKWLQM9_NODPEQ1RO-TTUUyVMWg_?iframeId=bqrbaz
200 OK 0 B URL HTTP/2 stenadewy.pro/abWcZ.ydP-3fBg1hci2_hkalbm2n5-lpSqWrQs9_NuDvEw1xO-TzUAyBMCi_ZE6FbG2H5-lJSKWLQM9_NODPEQ1RO-TTUUyVMWg_?iframeId=bqrbaz
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /abWcZ.ydP-3fBg1hci2_hkalbm2n5-lpSqWrQs9_NuDvEw1xO-TzUAyBMCi_ZE6FbG2H5-lJSKWLQM9_NODPEQ1RO-TTUUyVMWg_?iframeId=bqrbaz HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash d4f78398f778a3bf479cf70ebbee0b30
adb67965be6876fd53287701cfbd7261cb6fb714
2d42a9be5e25597ef542805a28e19c05a071f6e0e9033029e74edb75ca16fa74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6595
Cache-Control: max-age=119899
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "6385cbc3-116"
Expires: Thu, 01 Dec 2022 10:57:09 GMT
Last-Modified: Tue, 29 Nov 2022 09:07:15 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
pi3.piczhq.com/i/00178/5ta4zrwil7mw_t.jpg
200 OK 3.2 kB URL HTTP/2 pi3.piczhq.com/i/00178/5ta4zrwil7mw_t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 155x200, components 3\012- data
Hash a3ae25c29234b55974ec33dfbec22958
7e9116cbcfe1986ff6a4870c45a2608eaed98873
f10c2e65c85377725b363b670cde48fd261917c7e1b4a8c97f674c6de07064f9
GET /i/00178/5ta4zrwil7mw_t.jpg HTTP/1.1
Host: pi3.piczhq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: image/jpeg
content-length: 3202
cache-control: public, max-age=31536000, s-maxage=21600
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WaCWiJ9IhYwaqXuFPk9RzWRMN%2B6gxQErqKZ43rsWVnpD%2FfG%2Fgka%2Bq4DijwxrdhngoKASZG4M7hWz2ielBKJFm9yrFndzbVUmOZKuV0atSgjTZH5AOjSV86Gl3DldcAc67A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fddaa1af8b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pi3.piczhq.com/i/00178/epfx8b01lrdl_t.jpg
200 OK 9.6 kB URL HTTP/2 pi3.piczhq.com/i/00178/epfx8b01lrdl_t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 155x200, components 3\012- data
Hash 1669059e626b5bfdc551febcbff101af
4707874476be3e4a4defc755c6e46090127ac901
2941ba9777aee921956b1152e596c7e52816ec12ceb48b3b9fa2885caeffc2a5
GET /i/00178/epfx8b01lrdl_t.jpg HTTP/1.1
Host: pi3.piczhq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: image/jpeg
content-length: 9600
cache-control: public, max-age=31536000, s-maxage=21600
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FkGBiZ1bLfS28ZMLuxg7W%2BAVM7zWcsntQgFtiUO7aEIKdVAWUtD2yVZdc7UFqV7UXP27aR594GYbuqquPyxKFXiVxvQNfjAypt9dfL5vu%2F4gY2lrTiCEAcLHQkCKIQTCPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fddaa0aeeb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pi3.piczhq.com/i/00174/ueqoeode3q8d_t.jpg
200 OK 11 kB URL HTTP/2 pi3.piczhq.com/i/00174/ueqoeode3q8d_t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 155x200, components 3\012- data
Hash 376818dedc965050f010f0b138eb9bdb
2c997da3afe571bf3679bc2c2507196e92bd2a39
1c49763b52f5c4ac8a7738ab6ae7e5f7b3f08da79dfb03258fa992f6270b26d9
GET /i/00174/ueqoeode3q8d_t.jpg HTTP/1.1
Host: pi3.piczhq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: image/jpeg
content-length: 11332
cache-control: public, max-age=31536000, s-maxage=21600
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CfGaXgsqpPGc1zMRHU7amWMlHadlQWtRBrYJErQnSn2X1ZvvUrJ5%2Fyt5Di6MH3ieWSsALOegUQFfs58zjkF1oizN%2FLv27xODtjB%2FSFFcZyhkLAoVaQLhBV6YW7LNKQmckA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fddaa0af2b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
200 OK 5.3 kB URL HTTP/2 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP
File type ASCII text, with very long lines (2401)
Hash e8817343fb49c3e55746e1f503baa347
a329528312fe978357a1c658064387267800313a
415afe937e6c718332828f0fbfa6718185305261be5eb2fd8f18918de52fc8f9
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald
200 OK 10 kB URL HTTP/2 fonts.googleapis.com/css?family=Oswald
IP
File type exported SGML document, ASCII text, with very long lines (26965)
Hash da92001b2ab7b8268b4cb7cce0c605e4
26efc74821e17b46c73e84577301f31969635041
5dfd19fb789a7444550c57895be49da1a6712c8867bdf9cf5e8d13d0a805a7cb
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 01:38:49 GMT
date: Wed, 30 Nov 2022 01:38:49 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/352013?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=5z7gvqinVEuuF75UgpWa; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
200 OK 121 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
IP
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash f395c59b99ad9effdd18186e3416b83f
31fa705e99763fd0d6183cf20c99e99605a8987f
9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632
GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/png
Content-Length: 121
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6676
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6H%2B3a6nUnU2W7HQDsgV5Tv0jYGbpMrTGlMEs%2FR3GXOb0n6ylDdTT4O0S4rdLvUt4gQmYgWhsugMy46ABDVkxcSSe9CiV%2F%2FKA0ZZARji4VeCvM6Sg%2FhihGiZT3%2FLHKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fddab5eb9b503-OSL
alt-svc: h2=":443"; ma=60
stenadewy.pro/auWvZ-y.Px3yBz1Ac_2ChDaEbF2-5HlISJWKQ_9MNNDOEP2-NRjSUT3UN_SWZX6YbZ2-5blcSdWeQ_9gNhDiEj2-NljmUn3oN_Qq?iframeId=epbmdp
200 OK 1.8 kB URL HTTP/2 stenadewy.pro/auWvZ-y.Px3yBz1Ac_2ChDaEbF2-5HlISJWKQ_9MNNDOEP2-NRjSUT3UN_SWZX6YbZ2-5blcSdWeQ_9gNhDiEj2-NljmUn3oN_Qq?iframeId=epbmdp
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (629)
Hash cae0b51265e7fed1903bb7eb60a3455d
29d4ecb13502fd26c5b6e701064baaf3b5a1db14
b29ce545d72dbbca91d60edb6c0c59314cc3c9a8cbcaefb7b8197dbfca3ea84a
GET /auWvZ-y.Px3yBz1Ac_2ChDaEbF2-5HlISJWKQ_9MNNDOEP2-NRjSUT3UN_SWZX6YbZ2-5blcSdWeQ_9gNhDiEj2-NljmUn3oN_Qq?iframeId=epbmdp HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Wed, 30 Nov 2022 01:38:50 GMT
set-cookie: kadCCap=79610:1:1669272875;219484:1:1667715065;220335:1:1669620452;194136:1:1669413157;218693:1:1669515516;220790:1:1668460505;219047:1:1667194435;199455:1:1668245056;132751:1:1669691381;221398:1:1669672704;212269:1:1667199062;219652:1:1669330335; max-age=1701308330; path=/
kadACap=451139:1:1669769056;453831:1:1669633147;446531:1:1669270846;445506:1:1669286676;401659:1:1669719825;419295:1:1669362714;419293:1:1669526430;445735:1:1669286676;442019:1:1669723006;419299:1:1669735589;450649:1:1669712254;190964:1:1669272875;449523:1:1669701631;419291:1:1669705862;410252:1:1669683544;419303:1:1669446827;424441:1:1669620569;451724:1:1669565807;419321:1:1669463839;383700:1:1669640980;346327:1:1669707592;419301:1:1669646033;446013:1:1668228435;407100:1:1668246232;419297:1:1669465197;419323:1:1669718082; max-age=1701308330; path=/
kadCSCap=132751:1:1669691381; path=/
kadASCap=451139:1:1669769056;346327:1:1669707592;449523:1:1669701631;419323:1:1669718082;419291:1:1669705862;442019:1:1669723006;401659:1:1669719825;419299:1:1669735589;450649:1:1669712254; path=/
kadRPixJ=bnVsbA==; max-age=1701308330; path=/
kadUnP3=CAwQ2LKVnAYaDQjzwZkBEAEYyO6WnAYaDQiEyJMCEAEYpcmYnAYaDQjowJcCEAUY44GWnAYqDAiMvRIQARjI7pacBioMCISnJRABGKXJmJwGKgwI85ooEAUY44GWnAY=; max-age=1701308330; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6d4aa81497d78e8890f1833dfd810f3b
1a661b0ea7a2272d32a364d110f8b2525a13a72a
c3127cd2765f7a80a75f4000fbbd0680b93a944448f0260b6c4a1dd6b041bbfa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133314
Date: Wed, 30 Nov 2022 01:38:50 GMT
Etag: "63860997-1d7"
Expires: Thu, 01 Dec 2022 14:40:44 GMT
Last-Modified: Tue, 29 Nov 2022 13:31:03 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LqYqmee8K1YthO6QLDaGlqObnjMPvBySytWBSyFlkhVuwOfvPpKsVw==
Age: 4181
surefap.org/favicon.ico
200 OK 2.4 kB IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash e4cb9c2ef4866c61686ea529cca5864c
51b1a32b077611d3f312c177cca13717e1d4c7aa
fed799214bbf9fecbb850e4a9013982864d232b335954ae57ef807b559821225
GET /favicon.ico HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/dreamtales/
Cookie: PHPSESSID=a33fkoh0i0g282mg1tk8ac6am3
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:37:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6674
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BLuiItEE8rwKzoLPhm%2FZ2M9AkVJ2jFIHW3a7%2BfLONAstbXn5Hicq3WmM7GwKiUCaJj%2BQyZ3ojnqTjovTE57kBLda4rEacIaO1ReBkJAUndsDyXs1BjZ8ctWGT4iewA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771fddac7f46b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ffde4bc6f586895f3a2a87f863658d07
153dba4f71de4b0fdcdf235b2ab7695c73831771
6319cbbcd9c0d485f054411e9d2e0e71af323aac495e3b9376afcfee6b9637bc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
set-cookie: uid_id2=e351dfe8-55fb-4078-81e2-21b37ec3895c:1:1; expires=Sat, 27 Nov 2032 01:38:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
adserver.juicyads.com/js/jads.js
200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP
File type ASCII text, with very long lines (3769), with no line terminators
Hash 65b1efdf55163b144c5018b8772765ad
509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:50 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eb9"
Content-Encoding: gzip
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 302 Moved Temporarily
Date: Wed, 30 Nov 2022 01:38:51 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316
Content-Length: 32
Expires: Mon, 29 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
200 OK 5.7 kB URL HTTP/2 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP
File type ASCII text, with very long lines (2401)
Hash 5056e5ccd3e10a07209935cca7cf762d
02aba3b18f0b48ba3cfa21e6f1b5da1a38c43786
6c047e899ac9533b8221fcb92a7b1472e45262946e54f1a414441f860ac65c73
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 30 Nov 2022 00:41:08 GMT
expires: Wed, 30 Nov 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 3463
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f94af8a107d3a202ee882887ad41e5cb
10d698e67e485f60cd9a218dbf28ab30f62adad5
e0b06476908d40c2adf8876617d8719c427ae10fe4ca5199a8a1e0d790dd1f64
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 03 Dec 2022 22:43:13 GMT
ETag: "10d698e67e485f60cd9a218dbf28ab30f62adad5"
Last-Modified: Tue, 29 Nov 2022 22:43:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Wed, 30 Nov 2022 01:38:51 GMT
Age: 2938
X-Served-By: cache-qpg1244-QPG, cache-bma1683-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 6, 155
X-Timer: S1669772331.063397,VS0,VE0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:38:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=1094517872&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&ul=en-us&de=UTF-8&dt=Publisher%20DreamTales%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=640807658&gjid=484024392&cid=991497683.1669772330&tid=UA-68853511-3&_gid=370193640.1669772330&_r=1&_slc=1&z=245709228
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1094517872&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&ul=en-us&de=UTF-8&dt=Publisher%20DreamTales%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=640807658&gjid=484024392&cid=991497683.1669772330&tid=UA-68853511-3&_gid=370193640.1669772330&_r=1&_slc=1&z=245709228
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=1094517872&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&ul=en-us&de=UTF-8&dt=Publisher%20DreamTales%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=640807658&gjid=484024392&cid=991497683.1669772330&tid=UA-68853511-3&_gid=370193640.1669772330&_r=1&_slc=1&z=245709228 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://surefap.org
date: Wed, 30 Nov 2022 01:38:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 14 kB URL HTTP/1.1 top-fwz1.mail.ru/js/code.js
IP
File type ASCII text, with very long lines (729)
Hash e2e25d9473a05570c20838aca1c2c3ea
a8ac67a13111a4e61cf7eb9bb8850ef5ab1246d4
b75b8d2fe8eb0c9e8191c51f99eb62b37c944f36118aacb5237e4bde65c60e11
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:51 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Nov 2022 16:42:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIE:1669772331:0:::; path=/; expires=Fri, 01-Dec-23 01:38:51 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"637e4d62-85c6"
Expires: Wed, 30 Nov 2022 02:38:51 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 0335f04b39f8bb5506f7c7ac273edc34
96abd1d844d3b38e080f452389dc931cbe021c96
301e79c8118e8555efe47720ed835eb248cc8b542200df0ac94db8e34bfb9426
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 03 Dec 2022 22:42:56 GMT
ETag: "96abd1d844d3b38e080f452389dc931cbe021c96"
Last-Modified: Tue, 29 Nov 2022 22:42:57 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Wed, 30 Nov 2022 01:38:51 GMT
Age: 3340
X-Served-By: cache-qpg1269-QPG, cache-bma1637-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 11, 55
X-Timer: S1669772331.132610,VS0,VE0
informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
200 OK 1.5 kB URL HTTP/2 informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
IP
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash d7fc05df9e3f02c2ae7d64e006c1c648
adf8e4ca03e22455b54c51234216a68848b34983
79b976f94ab17c6a6725637dbc5eaefdc5beb89068383ae24956ccaee24f6a83
GET /informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews HTTP/1.1
Host: informer.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 1527
last-modified: Wed, 30-Nov-2022 01:38:51 GMT
content-type: image/png
pragma: no-cache
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
expires: Wed, 30-Nov-2022 01:38:51 GMT
X-Firefox-Spdy: h2
10945-2.s.cdn15.com/creatives/152327/199283/425871_ee9a7.gif
200 OK 378 kB URL HTTP/2 10945-2.s.cdn15.com/creatives/152327/199283/425871_ee9a7.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Size 378 kB (378033 bytes)
Hash 23256a77f1398a3bce4652655188358b
5f3a817f31f04c665ce41140b76da85558e3a3d1
b953fdc460f1f5f72863ac9083e2bed01e02b9ffba2d42edaf1dbb776f780afe
GET /creatives/152327/199283/425871_ee9a7.gif HTTP/1.1
Host: 10945-2.s.cdn15.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://stenadewy.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Wed, 30 Nov 2022 01:38:51 GMT
content-type: image/gif
content-length: 378033
last-modified: Fri, 01 Apr 2022 16:46:46 GMT
etag: "23256a77f1398a3bce4652655188358b"
x-timestamp: 1648831605.67539
x-trans-id: txe9184ccb6e24484085e83-00631e8637
x-openstack-request-id: txe9184ccb6e24484085e83-00631e8637
expires: Wed, 22 Feb 2023 08:52:14 GMT
cache-control: max-age=7283603
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnfDP99yEHNfh/s/vR6hhueV5poQosFRHg7MChOCzn8QdY=
x-served-from: l1
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
x-vhostid: 106, 21587
accept-ranges: bytes
X-Firefox-Spdy: h2
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316
200 OK 1.5 kB URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash f77a8d8fad07de568894da5fb4810a61
9f15c66194abc546344dd79bba9f905320f1050d
02b70bd394ad86e6ff5b4f88575f6c9a0235d701b55cc2910a1bc942fcb3f8c8
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/dreamtales/;0.8543855192107316 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 30 Nov 2022 01:38:51 GMT
Content-Type: image/gif
Content-Length: 1533
Connection: keep-alive
Expires: Mon, 29 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 1d79426653c3b55939eaec59a2ce8ef5
c6db0314df7a4e5c08047f6306e0b79a1ad3bab2
2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73267
date: Wed, 30 Nov 2022 01:38:51 GMT
access-control-allow-origin: *
etag: "6384bff1-11e33"
expires: Wed, 30 Nov 2022 02:38:51 GMT
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0df62da0635b3bbf37d1bb403bd40aa1
6619dce9c1f63452e3c65a31227fae96c31307ca
aa618cb5afc4e91e0996049924526271431d4ed0505ad65553ba994676618ed3
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 937
Server: nginx
Content-Type: application/ocsp-response
Expires: Sun, 04 Dec 2022 00:51:45 GMT
ETag: "6619dce9c1f63452e3c65a31227fae96c31307ca"
Last-Modified: Wed, 30 Nov 2022 00:51:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Wed, 30 Nov 2022 01:38:51 GMT
Age: 2825
X-Served-By: cache-qpg1272-QPG, cache-bma1683-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 4, 82
X-Timer: S1669772331.262656,VS0,VE0
stenadewy.pro/aCW_1EwFc.mGVHz-cJ2KlLvMb_jO9PhQZRE-lTkUPVTWQ_yYNZTagb3-MdSeZfpgZ_niJjhkblW-VnJoZpDq1_lsctGuJvt-ZxHyAzmAc_HCVDzEaFF-pHvIbJmKV_JMZNDO0P0-MRTSYT2UN_TWcX1YJZn-pbvcbdmeV_JgZhDi0j0-MlTmYn2oN_Tqcr1s
200 OK 0 B URL HTTP/2 stenadewy.pro/aCW_1EwFc.mGVHz-cJ2KlLvMb_jO9PhQZRE-lTkUPVTWQ_yYNZTagb3-MdSeZfpgZ_niJjhkblW-VnJoZpDq1_lsctGuJvt-ZxHyAzmAc_HCVDzEaFF-pHvIbJmKV_JMZNDO0P0-MRTSYT2UN_TWcX1YJZn-pbvcbdmeV_JgZhDi0j0-MlTmYn2oN_Tqcr1s
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aCW_1EwFc.mGVHz-cJ2KlLvMb_jO9PhQZRE-lTkUPVTWQ_yYNZTagb3-MdSeZfpgZ_niJjhkblW-VnJoZpDq1_lsctGuJvt-ZxHyAzmAc_HCVDzEaFF-pHvIbJmKV_JMZNDO0P0-MRTSYT2UN_TWcX1YJZn-pbvcbdmeV_JgZhDi0j0-MlTmYn2oN_Tqcr1s HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:51 GMT
content-type: application/javascript
content-length: 0
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Wed, 30 Nov 2022 01:38:51 GMT
set-cookie: kadCCap=220335:1:1669620452;194136:1:1669413157;132751:1:1669691381;219652:1:1669330335;79610:1:1669272875;219484:1:1667715065;218693:1:1669515516;220790:1:1668460505;219047:1:1667194435;199455:1:1668245056;221398:1:1669672704;212269:1:1667199062; max-age=1701308331; path=/
kadACap=446531:1:1669270846;401659:1:1669719825;419293:1:1669526430;445735:1:1669286676;449523:1:1669701631;419321:1:1669463839;346327:1:1669707592;451139:1:1669769056;419297:1:1669465197;419299:1:1669735589;450649:1:1669712254;419291:1:1669705862;410252:1:1669683544;419303:1:1669446827;451724:1:1669565807;407100:1:1668246232;445506:1:1669286676;190964:1:1669272875;424441:1:1669620569;383700:1:1669640980;419323:1:1669718082;453831:1:1669633147;442019:1:1669723006;419301:1:1669646033;446013:1:1668228435;419295:1:1669362714; max-age=1701308331; path=/
kadCSCap=132751:1:1669691381; path=/
kadASCap=451139:1:1669769056;346327:1:1669707592;419291:1:1669705862;450649:1:1669712254;449523:1:1669701631;419323:1:1669718082;442019:1:1669723006;401659:1:1669719825;419299:1:1669735589; path=/
kadRPixJ=bnVsbA==; max-age=1701308331; path=/
kadUnP3=CAEQq+ianAYaDQivp/4BEAEYq+ianAYaDQjzwZkBEAEYyO6WnAYaDQiEyJMCEAEYpcmYnAYaDQjowJcCEAUY44GWnAYiCggBEAEYq+ianAYqDAiMvRIQARjI7pacBioMCISnJRABGKXJmJwGKgwI85ooEAUY44GWnAYqDAjD6QwQARir6JqcBg==; max-age=1701308331; path=/
x-content-type-options: nosniff
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 01:38:51 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047
set-cookie: FTID=1RMYgQ0tkIIE:1669772331:2787143:::; path=/; expires=Fri, 01-Dec-23 01:38:51 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669772330092%3A1669772330113%3A1%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga;visible=true;_=0.9665768793365047 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:51 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669772331:2787143:::; path=/; expires=Fri, 01-Dec-23 01:38:51 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 30 Nov 2022 01:38:51 GMT
access-control-allow-origin: *
etag: "6384bff1-2b"
expires: Wed, 30 Nov 2022 02:38:51 GMT
accept-ranges: bytes
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1233%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1435118978712%3Ahid%3A887811451%3Az%3A0%3Ai%3A20221130013850%3Aet%3A1669772330%3Ac%3A1%3Arn%3A81259424%3Arqn%3A1%3Au%3A1669772330175379051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C83%2C0%2C361%2C368%2C1%2C1497%2C43%2C%2C%2C%2C1951%3Ans%3A1669772327870%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669772330%3At%3APublisher%20DreamTales%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1233%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1435118978712%3Ahid%3A887811451%3Az%3A0%3Ai%3A20221130013850%3Aet%3A1669772330%3Ac%3A1%3Arn%3A81259424%3Arqn%3A1%3Au%3A1669772330175379051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C83%2C0%2C361%2C368%2C1%2C1497%2C43%2C%2C%2C%2C1951%3Ans%3A1669772327870%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669772330%3At%3APublisher%20DreamTales%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash a0c0bed130619a9d026c297bc3bef5ca
4d247ec03ef93af01022764984dfedae77ee339b
7563a8566bede10d2f935a80120189ea9459a17162d392526fdf5d773b80e134
GET /watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1233%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1435118978712%3Ahid%3A887811451%3Az%3A0%3Ai%3A20221130013850%3Aet%3A1669772330%3Ac%3A1%3Arn%3A81259424%3Arqn%3A1%3Au%3A1669772330175379051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C83%2C0%2C361%2C368%2C1%2C1497%2C43%2C%2C%2C%2C1951%3Ans%3A1669772327870%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669772330%3At%3APublisher%20DreamTales%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1233%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1435118978712%3Ahid%3A887811451%3Az%3A0%3Ai%3A20221130013850%3Aet%3A1669772330%3Ac%3A1%3Arn%3A81259424%3Arqn%3A1%3Au%3A1669772330175379051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C83%2C0%2C361%2C368%2C1%2C1497%2C43%2C%2C%2C%2C1951%3Ans%3A1669772327870%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669772330%3At%3APublisher%20DreamTales%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 30 Nov 2022 01:38:51 GMT
access-control-allow-origin: http://surefap.org
set-cookie: yandexuid=1027509871669772331; Expires=Thu, 30-Nov-2023 01:38:51 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1027509871669772331; Expires=Thu, 30-Nov-2023 01:38:51 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2432503111669772331; Path=/; SameSite=None; Secure
i=spDZu/Jf6n5reHfb3QwesXZ8EcAXFBtsjko9IgEWDZLOgn2gu/zOVBQkhOTjVPxuDMEsQD+TAsFQtdIokCWweed4Egk=; Expires=Sat, 27-Nov-2032 01:38:47 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701308331.yc.1669772331#1701308331.yrts.1669772331#1701308331.yrtsi.1669772331; Expires=Thu, 30-Nov-2023 01:38:51 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 30-Nov-2022 01:38:51 GMT
last-modified: Wed, 30-Nov-2022 01:38:51 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12175
Expires: Wed, 30 Nov 2022 05:01:46 GMT
Date: Wed, 30 Nov 2022 01:38:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12175
Expires: Wed, 30 Nov 2022 05:01:46 GMT
Date: Wed, 30 Nov 2022 01:38:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:00:54 GMT
age: 13077
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c5277610f3a542571abb53ffb3d4df1
ce411cc5b0a37bbd89551d06d7d0349f45734e97
3bf1105631ef7fda0249a46390ca90f904ea73b0a4f017c2db85326550a80a3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9812
x-amzn-requestid: 70bfeb68-0703-44bf-8550-50c759d52d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDbFolIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-73fb65ee2b9161372819207f;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QQCoNlJBSE2V-IQlZr37dhINTABRu3ms9Y1p4FweO36HD-U6m9vvwg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 13566
etag: "ce411cc5b0a37bbd89551d06d7d0349f45734e97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e135c29a8769eb12ef8c26f99097400
87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d
ce41ff79c382efc54aa2fd3ab64293d2d2b706a7f21585f4bd8bbcd9a3566126
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7971
x-amzn-requestid: e47d10e4-2b60-4998-b5fa-5b145e60aac2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgWHgGoAMFcLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-5b9710a07b0a59730e73dce4;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OURSF_raDXrHV3-3ScaEdorNpW9ZKSIQjv6WUCQYHhruGz372BU_QA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:58:15 GMT
age: 13236
etag: "87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b96b63164d7dc37268951510afb359f
5991d60e238558f9fe4e1759fe18dde628cb7be4
cd7a88b3173bae9ad466d41b9ae9a2ed9e18157660697f1f1b070043194c3db4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4706
x-amzn-requestid: ce0b287a-7242-402b-8261-c519a1310309
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhHxETjoAMFcTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcb-7a69d6d14ad0fd707ede2882;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odDoJgXLfaw-QRX8PfW3PW2yav7R41pQoyVbEVaDARSYLJPToLsTTA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 13566
etag: "5991d60e238558f9fe4e1759fe18dde628cb7be4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ceb8e975fb408de32c43f55febaa6414
453067f6ab356aa87a3ad3b56e33545376597852
e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3719
x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaGQ4IAMFUkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: phw8DXQgjOyH5g4gvbqgZk-2sHr2n9cHVr4lqqPXfXtyhG32gs2pIg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 13566
etag: "453067f6ab356aa87a3ad3b56e33545376597852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gCt9oHpZ68tLCYHIYpI1XLtADkScxwf12kDFnU0o5WoQIVSzWlqozw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:16:52 GMT
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
age: 12119
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=499390
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=499390
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (366), with CRLF, LF line terminators
Hash 6e5d4cbaad5252d39d11f9fe90fe7381
d36fc53512d134ed234318ad8a3ea02a94c86b41
760288c86262a9a99834f3ead76a25e826cfbfa72249beee58668b773ad30eda
GET /adshow.php?adzone=499390 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=16d1e1730c6d435c3f60cb4b629c35d9; expires=Thu, 30-Nov-2023 01:38:51 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YTowOnt9; expires=Sat, 03-Dec-2022 01:38:51 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 03-Dec-2022 01:38:51 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
adserver.juicyads.com/adshow.php?adzone=498259
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=498259
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (401), with CRLF, LF line terminators
Hash 719712a5fdbb7e868565b47e1dce1b0e
9f382254a097bb306c5728a7adbeb1664b2fc214
1d16c9218bd1f3607d94e618b305cc98981630619754b5d4d7333e91e415c3b5
GET /adshow.php?adzone=498259 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=16d1e1730c6d435c3f60cb4b629c35d9; expires=Thu, 30-Nov-2023 01:38:51 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps161=1; expires=Thu, 01-Dec-2022 01:38:51 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjExOTY3MTM7aToxNjcwMDMxNTMxO30%3D; expires=Sat, 03-Dec-2022 01:38:51 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 03-Dec-2022 01:38:51 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/network/user1037/1-1619547642-0028094001619547642.jpg
200 OK 55 kB URL HTTP/1.1 ads.juicyads.me/network/user1037/1-1619547642-0028094001619547642.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 160x600, components 3\012- data
Hash dc758a7ea885c9e45ccbf2bb315cf2fa
e00e03b7f8648b660ca4d485ec65b6439d4b0762
86bb80e5cee68b62da1c0f9d3a9c80940f39812d43dd00b671f6a2acce62e8ff
GET /network/user1037/1-1619547642-0028094001619547642.jpg HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:38:51 GMT
Connection: Keep-Alive
ETag: "1619547642"
Cache-Control: max-age=12869676
Content-Length: 55292
Content-Type: image/jpeg
Last-Modified: Tue, 27 Apr 2021 18:20:42 GMT
Accept-Ranges: bytes
X-HW: 1669772331.dop220.sk1.t,1669772331.cds250.sk1.c
ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
200 OK 284 kB URL HTTP/2 ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 284 kB (284264 bytes)
Hash 94eeda124cd4fd45a6ca4a7f0d672cc0
2c614d114dd89373a06a8823c4973f97b6120736
4a28e5c786dab8824c53af0d6543b86f58527139584fd50e41b97a5e917dfcc7
GET /ads/user161341/ad1266795-1658474854.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:52 GMT
etag: "1658474854"
cache-control: max-age=20238751
content-length: 284264
content-type: image/gif
last-modified: Fri, 22 Jul 2022 07:27:34 GMT
accept-ranges: bytes
x-hw: 1669772332.dop225.sk1.t,1669772332.cds020.sk1.hn,1669772332.cds261.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 615f4e349624a6eb497b540aa4047451
e3bd3ebe01b3b8b6f0a96a86c261e500a8961356
e4f957271db176467a461db0bd87ac1b8adeac7f1948ef5ff3479c29df085b5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E4F957271DB176467A461DB0BD87AC1B8ADEAC7F1948EF5FF3479C29DF085B5D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9404
Expires: Wed, 30 Nov 2022 04:15:36 GMT
Date: Wed, 30 Nov 2022 01:38:52 GMT
Connection: keep-alive
tractorfoolproofstandard.com/watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid=
307 Temporary Redirect 0 B URL HTTP/1.1 tractorfoolproofstandard.com/watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid= HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:38:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Location: https://tractorfoolproofstandard.com/watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid=&shu=1c1ce962a5939fe43688c3f813695ab1ee54bc98ab7293afc1fb131b6046e500dd2d2af9e0a7bf4083fdac5cebd0903e8cfad335fcea025e655c9dfab3038c456f462183b5f26e9a5eaa7c3d60ce92e82afe2bf707676171cea74fb5f0e6&pst=1669772392&rmtc=t
Set-Cookie: u_pl=15842260; expires=Thu, 01 Dec 2022 01:38:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.m8U8p52xYyuqM809POzWFQF_vb_WoJWoAAG8520KZQ0; expires=Wed, 30 Nov 2022 01:39:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 02af5291e01edeede167b4c502f4f1d8
Strict-Transport-Security: max-age=0; includeSubdomains
tractorfoolproofstandard.com/watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid=&shu=1c1ce962a5939fe43688c3f813695ab1ee54bc98ab7293afc1fb131b6046e500dd2d2af9e0a7bf4083fdac5cebd0903e8cfad335fcea025e655c9dfab3038c456f462183b5f26e9a5eaa7c3d60ce92e82afe2bf707676171cea74fb5f0e6&pst=1669772392&rmtc=t
200 OK 2.4 kB URL HTTP/1.1 tractorfoolproofstandard.com/watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid=&shu=1c1ce962a5939fe43688c3f813695ab1ee54bc98ab7293afc1fb131b6046e500dd2d2af9e0a7bf4083fdac5cebd0903e8cfad335fcea025e655c9dfab3038c456f462183b5f26e9a5eaa7c3d60ce92e82afe2bf707676171cea74fb5f0e6&pst=1669772392&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (3090)
Hash 13aa40beab5606c189a413ef69691717
24c24c2d639498c77e711e9f0d85bad03f9c98c3
40bf975dbe6ca43fab73b050774f372fc790cbde2486791269e2b5bf2b9039d6
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.868621208924.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22dreamtales%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&tz=0&dev=e&res=12.1053&uuid=&shu=1c1ce962a5939fe43688c3f813695ab1ee54bc98ab7293afc1fb131b6046e500dd2d2af9e0a7bf4083fdac5cebd0903e8cfad335fcea025e655c9dfab3038c456f462183b5f26e9a5eaa7c3d60ce92e82afe2bf707676171cea74fb5f0e6&pst=1669772392&rmtc=t HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Cookie: u_pl=15842260; ain=eyJhbGciOiJIUzI1NiJ9.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.m8U8p52xYyuqM809POzWFQF_vb_WoJWoAAG8520KZQ0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:38:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Set-Cookie: iprce96da8f8815e3900bdefa07485f32520=3569676; expires=Wed, 30 Nov 2022 05:38:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 01 Dec 2022 01:38:52 GMT; secure; SameSite=None
uncs=1; expires=Thu, 01 Dec 2022 01:38:52 GMT; secure; SameSite=None
pdhtkv25=true; expires=Thu, 01 Dec 2022 01:38:52 GMT; secure; SameSite=None
uncs25=1; expires=Thu, 01 Dec 2022 01:38:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2c984a946841247b308c15dbc4f882ee
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669772327870///-8/361/361/361/361/361/361//368/450/542/465/1947/1951/1993/3153/3153/;ni=;lvid=1669772330092%3A1669772331025%3A2%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga-ym;visible=true;_=0.891969534200446;e=RT/load;et=1669772331024
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669772327870///-8/361/361/361/361/361/361//368/450/542/465/1947/1951/1993/3153/3153/;ni=;lvid=1669772330092%3A1669772331025%3A2%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga-ym;visible=true;_=0.891969534200446;e=RT/load;et=1669772331024
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669772327870///-8/361/361/361/361/361/361//368/450/542/465/1947/1951/1993/3153/3153/;ni=;lvid=1669772330092%3A1669772331025%3A2%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga-ym;visible=true;_=0.891969534200446;e=RT/load;et=1669772331024 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:52 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669772332:2787143:::; path=/; expires=Fri, 01-Dec-23 01:38:52 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 878b09fbfc6e211b9563cb6e2159ace0
b90946d8d69b02f60b75b42f1ef048311b374855
633a08f91314ecd2fd983dc5415400b0d768befb25f65fcd531df4e95cdaafcb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "633A08F91314ECD2FD983DC5415400B0D768BEFB25F65FCD531DF4E95CDAAFCB"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3355
Expires: Wed, 30 Nov 2022 02:34:47 GMT
Date: Wed, 30 Nov 2022 01:38:52 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
200 OK 185 kB URL HTTP/2 cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 185 kB (185150 bytes)
Hash 69cbf6dd022575e7dcaa17248e7e4643
daf78102256bb6d153facc728e9fe73be02138e6
41110fdcc38e4d9358f19dd9440d766d798d159e2bc6dd69197321df9d1b9582
GET /cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:38:52 GMT
content-type: image/png
content-length: 185150
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 09:50:43 GMT
etag: "62e10a73-2d33e"
expires: Fri, 02 Dec 2022 01:38:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 23e4c6443fc3c982ad16ccaa614deb59
98dae5e8d1a444aa8aff8854723adfbd8954f97a
c98136a11ad54a4474b758f1f375d340f66a7d4ef2279d2d030f88717bd88654
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C98136A11AD54A4474B758F1F375D340F66A7D4EF2279D2D030F88717BD88654"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2770
Expires: Wed, 30 Nov 2022 02:25:03 GMT
Date: Wed, 30 Nov 2022 01:38:53 GMT
Connection: keep-alive
d.pssy.xyz/t.php
200 OK 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 01:38:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=d811d6ff-7caf-437a-8f3f-87541ca6dc23; expires=Thu, 30-Nov-2023 01:38:53 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=616598052&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669772334%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013854%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772334&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=616598052&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669772334%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013854%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772334&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=616598052&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669772334%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013854%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772334&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 140439
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 30 Nov 2022 01:38:55 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 30-Nov-2022 01:38:55 GMT
last-modified: Wed, 30-Nov-2022 01:38:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=637549494&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669772334%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013854%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772334&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=637549494&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669772334%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013854%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772334&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=637549494&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669772334%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013854%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772334&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 30 Nov 2022 01:38:55 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 30-Nov-2022 01:38:55 GMT
last-modified: Wed, 30-Nov-2022 01:38:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=839734709&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669772335%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013855%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772335&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=839734709&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669772335%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013855%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772335&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=887811451&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fdreamtales%2F&rn=839734709&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669772335%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221130013855%3Au%3A1669772330175379051%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669772335&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 7100
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 30 Nov 2022 01:38:56 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 30-Nov-2022 01:38:56 GMT
last-modified: Wed, 30-Nov-2022 01:38:56 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669772330092%3A1669772336954%3A3%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga-ym;visible=true;_=0.4962454163214477;e=RT/unload;et=1669772336953;pvt=7136;vtauto=6870
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669772330092%3A1669772336954%3A3%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga-ym;visible=true;_=0.4962454163214477;e=RT/unload;et=1669772336953;pvt=7136;vtauto=6870
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/dreamtales/;st=1669772329817;title=Publisher%20DreamTales%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=e6207d5044ec6fd9;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669772330092%3A1669772336954%3A3%3Afb371cc403b29ad1246aa69b39f47a40;opts=jst-ga-ym;visible=true;_=0.4962454163214477;e=RT/unload;et=1669772336953;pvt=7136;vtauto=6870 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:58 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669772338:2787143:::; path=/; expires=Fri, 01-Dec-23 01:38:58 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
200 OK 0 B URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:50 GMT
content-type: application/javascript
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cnude&s1=%25subid1%25
200 OK 0 B URL HTTP/2 a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cnude&s1=%25subid1%25
IP
ASN #24940 Hetzner Online GmbH
GET /api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cnude&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:38:52 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=ObfMhobwKTjpHOb6LH11; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.92.107
205.185.216.10
188.114.97.1
52.28.211.11
185.94.237.102
95.163.52.67
93.184.220.29
135.181.208.216
95.101.11.115
176.123.6.189
0.0.0.0