surefap.org/publisher/ugaromix
301 Moved Permanently 0 B URL HTTP/1.1 surefap.org/publisher/ugaromix
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /publisher/ugaromix HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 01 Dec 2022 12:58:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4; path=/
Location: http://surefap.org/publisher/ugaromix/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O8yFGGINg0fVa2x%2BuEjsJ0QbLHcXUZgq%2F0Z%2BTRLNEYKXGkd%2F1JDmjk4zbT7zgFKzweMyS45eXIV67k6AnK9R2ur7ww05tGv1%2BrRln56jHpgoW21JrPHcMUCe3oCrew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 772bfea0992db527-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11442
Expires: Thu, 01 Dec 2022 16:09:12 GMT
Date: Thu, 01 Dec 2022 12:58:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5196
Cache-Control: max-age=169158
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:57:48 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 12:18:08 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2422
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2560
Expires: Thu, 01 Dec 2022 13:41:10 GMT
Date: Thu, 01 Dec 2022 12:58:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eTvajpA3ZWEA8tgfrj3nks2Wc8gy10MmLlnMQRHQAg96AcP77inRGyQJJ3phMUIiTd03QbDHdd0=
x-amz-request-id: Y36S7XDSBJA91GJ4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 12:45:40 GMT
age: 770
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/publisher/ugaromix/
200 OK 22 kB URL HTTP/1.1 surefap.org/publisher/ugaromix/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1847), with CRLF, LF line terminators
Hash f09c315ac16fc538cdc0bca925ea76c4
4a848824ac1cc77ccecbab10892ce19afc6154ca
556b3a05479ad1d40fc7c46d74711c73ad257f75540a5a8e6149f608d6ae772d
Analyzer Verdict Alert fortinet Malware
GET /publisher/ugaromix/ HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://surefap.org/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jl6YtqTJQHhNckMERsUXYKZf9wVLu9DU1I%2FnQ8h9VdGcW0OPNfwtRuwDambVUxydpl5DJritqcMShQm8boh%2F2CMR9cjIAQhkKAYDZRynkOiWEVcMXQjCaN8GSBuYKw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 772bfea26b75b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.o333o.com/asg_embed.js
200 OK 52 kB URL HTTP/1.1 cdn.o333o.com/asg_embed.js
IP
File type Unicode text, UTF-8 text, with very long lines (65467), with no line terminators
Hash 2cc3dbc2ed4b871bafca793ef56bc336
9b2b19b96ca2b9989b4976a8934070b1ef4efe78
03015f097efb01d8572b62f6b573fb115bcad04ad52c947f59014304d96da493
GET /asg_embed.js HTTP/1.1
Host: cdn.o333o.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51578
Content-Type: application/javascript
Last-Modified: Thu, 17 Nov 2022 11:24:59 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "63761a0b-c97a"
Cache-Control: max-age=315360000, public
X-HW: 1669899510.dop022.sk1.t,1669899510.cds239.sk1.c
Access-Control-Allow-Origin: *
surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
200 OK 521 B URL HTTP/1.1 surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
IP
Hash 2291cad033de47da5bf45d44d3fb1c09
ef8ed11bba4cd1b1f649bbd3d64f79f1702e0851
a67c9a95aebe4a4dd8839404fdd77a4ee64f7a65e5859a1dd2255379ddf80235
GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I%2BUFN4kw3i%2FQjohcfRhjapqX4ZxzgJiKiYPtABw8ozDICLk89TkrFcja1etfikMDN0uV1OZSxt5%2FI9sIAMo5eGjZfdiZxKXoyiQkxjKdZnjE20DsFSSyNdLJm8Ljzw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea3ce7dfac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
200 OK 4.3 kB URL HTTP/1.1 surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash acceec62f949a07f1d1e07d4e88c0b76
b19d22f7b838357798be6a17ad9f30b4f114c41e
bbed1144be64bc962ce6ae0e94a8176e566ce7b3bfea999419de8da948b97219
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GyhccG0ADQlax9zNt0%2BtHzBbQp8nKPTh6rCKS%2FAWD6dpQelR2s38sAuIV%2FPCw21wkX6qhSRoTde2uo%2B8PveWzcEXLuIhwasGVxaL7j%2FfXQRmOEgAg0mYX36PThGscw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea3b9201c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
200 OK 1.6 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
IP
File type ASCII text, with CRLF line terminators
Hash 3fcb0d88088f0e55c490573d9283c88a
6cfae6065bab40117fd241c536630c1c934c033c
1f91f493e9731afedede6c0626959993538cf13569434c5d0639273886b04075
GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t6WmTxRDT56biITBxeMMpJHoghrwfow0m%2BW9gPYrMwDwacnHTwuid2pEQBam5YJlqluwUmiLBhqwdjZNPc48r940shw8XyhNvFzd1up76rFUGfptaJKlG3zZ6F5mHw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea3bb1db4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
200 OK 626 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 10cbc450720b6e3661dc14177f6095bb
6898cb7b1725a4224a6e7fc6cfcf8dc634065608
2ee55a9a2b2f25dfbad0725e2b44a5ea758516c8589f2f0c2fe8c946287407af
GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UimVZcEzhO03jzXDostSt6FYv0r82lgsql%2FnoYmZXawxVLRaHNDrv2Shz3RirxYlIJX41ZoUsM%2FLfJmhqiGTgcev4XfCxgZKcfBpMcZFvxa9etEsiS2rV%2FZa2pZo5g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea3be2e0af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
200 OK 433 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
IP
Hash c459cce9b7bfe8874065f27071c0fa5d
9c48040bd8aed19832c1c6093ddb4d4adef71bda
6b41fda0c20e0aa799c788122491afb3ac541bbe574f4e492d13168a8b2d42ad
GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XZivN7r0BhgASYn%2FUnKONmYnDjuBeFozlF4twIPItM%2BrJ29tg1FjBV9NhuQIwm6Njpi9guK5tKc71KQv9cIbBvGf96ubhm5yDuVNFrG%2FWhuLWGVtXytpZJyqpWiwgA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea3edaab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
200 OK 464 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
IP
Hash e4a982df8ef82dfca6e739af2f2c70c9
0ec97ae743cb03849eee9c6f1c0539eec7c737ac
c9f369c77f62349d1a42f1e9ed7b3bd82c29ac23a13cda519eb9cb79689271a9
GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2BeS6iZVRUUB4kjeMcId2BEeuCGi8Ogkm69gOkeAuGg3k0n4ChX0iMfts8tQgB28ZmhzagVH8MYBPVXaHbeq1t1oqyLcSRW6ZEEoMTieZoTeBsyp7461U20uxufdLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea44ebdfac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
IP
File type ASCII text, with very long lines (10082)
Hash ec17f8a80c23d0b8fc814fcbdb52653e
512c64d495ed700b16d5ccd79a753dd8cfd118e4
883e795f544da6c4b3b39643b9c84aa49d86f0bdeb511de4a790f63152fd89e8
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zu1HHpxi7rg9iG%2BXvyuL5ttH2Qw43TUikv6xtOztW0uR%2BlOGQsjj53DvumDuhZR%2B%2BgxU0oVaO4MHA8wGAz%2Bd0sGRES2gybd4CgPD9sf7tyJavCx7OJtSRmcLMSgpZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea459a41c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
200 OK 1.5 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
IP
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KBcb8NkSY8tddvfiU95LOiF3YBBfVsD233r5I7kJUI%2Fx8lRV9nxLXpltU8MGJJOEWFeTOV6EEDnBXyGbAC9eYn3OXTFTa6o7R0sB1xHFN66TvYRh6DOf5Bwbbv%2B7Pg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea49e5db527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
200 OK 489 B URL HTTP/1.1 surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
IP
File type ASCII text, with CRLF line terminators
Hash c8ad5eb64f1140cbe2df28519b376aa2
2782b2ec1b9dd5f9a25eec3b2f7f53de9a3b83c0
766695e386f4d4860ded979bf96717fa000ba7a1da95d900a48f5ddbeff95344
GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vngfqLeBvJzBJdfTqKEg2LGV2eaB5gKqnYOBwp6unmnuFAth3ZKnUYWZR%2BXHVx4cDuZvk6Mq4Yak35lAjp2xEABrpbujeVnSM62q3DqR2V3Q5OPY1UgGVE%2BvdWpiMg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea448adb517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 9805483db0b3d5fd0639186799348f34
eb28f7ec752038cbd9425c66b54c339ad1236695
9dca4af372f7b1d8d1af5a3c18ed6a827e4f8f358e8404b64fa7a2ff961b5c60
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jRvMoVUMkro478Y8T4eh2X5dDWSx%2Byo1tbtOr8aeNMUMDVeVt1xNWjyhNdVWoHBNXM7uq1txEBzmp8qVJOVzQcNO3wCY2hyKJUPKBI2ql8CdKyIbvykO9EKcWe4Xpg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea45c03b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5cb98cfc071d6feaac912b4f13e93956
a4ecf824e7042dbc25ccc679e572dbaa6f0f71b1
1877e95f59608123dd58ccf84c8222f85650ee4930c8ea653ce502a3dc6fe33f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1877E95F59608123DD58CCF84C8222F85650EE4930C8EA653CE502A3DC6FE33F"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15765
Expires: Thu, 01 Dec 2022 17:21:15 GMT
Date: Thu, 01 Dec 2022 12:58:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5cb98cfc071d6feaac912b4f13e93956
a4ecf824e7042dbc25ccc679e572dbaa6f0f71b1
1877e95f59608123dd58ccf84c8222f85650ee4930c8ea653ce502a3dc6fe33f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1877E95F59608123DD58CCF84C8222F85650EE4930C8EA653CE502A3DC6FE33F"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15765
Expires: Thu, 01 Dec 2022 17:21:15 GMT
Date: Thu, 01 Dec 2022 12:58:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5cb98cfc071d6feaac912b4f13e93956
a4ecf824e7042dbc25ccc679e572dbaa6f0f71b1
1877e95f59608123dd58ccf84c8222f85650ee4930c8ea653ce502a3dc6fe33f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1877E95F59608123DD58CCF84C8222F85650EE4930C8EA653CE502A3DC6FE33F"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15737
Expires: Thu, 01 Dec 2022 17:20:47 GMT
Date: Thu, 01 Dec 2022 12:58:30 GMT
Connection: keep-alive
surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
200 OK 831 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
IP
Hash e9dddc3f35ae0107e1cf0cf680a251a7
26e702e6ed363dbd7508cdfaebfb3c37b51e966b
3c114642de150576617c3e8c9a5ca94d0f351e0d653a069bb269c444fdf80bfd
GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jq5t93QWWGuzHdZLD%2BkPfWUhOPFKNNq7K2hjfyAkCHWRmQMdEy%2FJqcbzCuhEIizZPQrulPXsGksBxqpmFL72r3UuPSy7%2B9HKOTS0YlSbuvBuk4UsAZUt8%2BsFFWyt5w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea4bf1bfac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/ljekdimdzcz.php
200 OK 11 kB URL HTTP/1.1 surefap.org/ljekdimdzcz.php
IP
File type ASCII text, with very long lines (10335)
Hash 141791cbe794a1fd0a4aea3bf725be64
53a5d3c10ecbe810eff41874a635f259b6127ad1
439909647ce9812167f9d6d564dd5b638a61ac9e7ed6a74a8bacb1f71fc4d37a
GET /ljekdimdzcz.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=120
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xvejvr6HjGKZRHXaZSliLOsShDSD205n46UdEdGorG8Xnl7gewlOKEgOh4dXg837%2Bby3ANzKf076lMaUHG3qJxUMGxyX0c7nsg8rZyzv5X3ogvyE5kMcsptK4BaUCg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 772bfea4da221c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 2f89b08855471c7476435ce0bec33ba7
970533f152623df03b5fc6fb793b21889e4e0349
d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0ozuay7FJt%2B94oiBf1NqReYXJ3CxXODJpNBiXHzI19BNbT1HhEsc4Vs4ljajmeEeV7A9qmNl32xw0UuPAuLFWrNGM%2Ffm9mQbqZDWj3h%2BYfF8GOMy3%2Fi2%2F00%2FSG9vlA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea46ef10af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
200 OK 748 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
IP
File type ASCII text, with very long lines (516)
Hash a916ec8951d8cb10ee6fdfecaa3eae84
0f5ed720b36bf6d0474bfdea0fe97ce2f4c28296
eadd127040367bb43fe787cece1d4e624cb6933c31e20b8b73611a79bdd3b15b
GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BVAHd05MLNF7UhAeeEKtUY%2BB0W67PzVIR8PuAngNSs7NNbZiP184mgp52WcqTgcHgoMDCHxmtj6z9VBx45zfnqJH6brV6B4UZqHXqm5X5WQlc6GVAEO9nMsiMEEkhA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea4eebab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
200 OK 743 B URL HTTP/1.1 surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash b146105040f6faa62806b35ad455d121
14aa49ed4f29b666221a8de3fd17f04455f12b15
05f4d51649be6878352af6843f9a5ffc14bb96ca7a02db21a35a14f6a150b004
GET /wp-includes/js/wp-embed.min.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJ7KgmxOeFaWNlGFoht9P5k1snZK1aQh%2B%2BB0bMNEQSf3677Qansp5BuzyCVIfsIvgvjPtpNJsErYMxRssjEunOcXv0khzsajIGeiExOqabIrCtpJwo9qKL26I3CftA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea50d3eb4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
200 OK 457 B URL HTTP/1.1 surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (1087), with no line terminators
Hash 1fa25d83bb5be8564841713f48e94332
dc5921fc9171ae8f69a52e1f00ea1c43ae3ea8d2
da9e1e7235fb597df5fc429718a771bc8431810ea07f7d2c40dba0b56ccd8cf7
GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HgLEQiUJv3nsYHC65f8lRGrVRFh0iLsgZfg9ONfr14qs7WCgHASQCl1wPpguNlUmduEa5SqWC1io5Y5zBvaexCsXqFCXRbKvpfgza%2BqVbsKlPYX2Q0SXObL4fkryIg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea4f989b517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/12/09/8b1067fd843fa841c25e3cbb94ef77a9.md.jpg
200 OK 38 kB URL HTTP/2 4tymode.win/images/2020/12/09/8b1067fd843fa841c25e3cbb94ef77a9.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x450, components 3\012- data
Hash 8ce17f8d73965d9fa32e5791772af4b3
098d1cedd9e9aa1c2173377f401852de55f2db9d
22d9d41221fb6b3d2cc2f4f69a629c78de4b11518372b927da351da50972849c
GET /images/2020/12/09/8b1067fd843fa841c25e3cbb94ef77a9.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Dec 2020 12:00:36 GMT
accept-ranges: bytes
content-length: 38303
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ea66db389b332b88e591df95041f31b7
e5c9e891de90ffd3d71340bf9b6f83e7b7947af2
1e1412119dfdf66f665357699baa9a8ed2d0300357f57ecf33c927107a4caeaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3171
Cache-Control: max-age=125378
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "6387df55-116"
Expires: Fri, 02 Dec 2022 23:48:08 GMT
Last-Modified: Wed, 30 Nov 2022 22:55:17 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
4tymode.win/images/2020/12/11/15ef1d81b0d925880e53b379da5ad72d.md.jpg
200 OK 48 kB URL HTTP/2 4tymode.win/images/2020/12/11/15ef1d81b0d925880e53b379da5ad72d.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x440, components 3\012- data
Hash 3090a8711050213a4528b04ac9d81b17
6894db2691c0ae06f9f14120f4c0aca728cdbc86
dc071be042c5978367fd532ae1bd765a11011eed5817fbe5e4d21200f380550f
GET /images/2020/12/11/15ef1d81b0d925880e53b379da5ad72d.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 22:05:21 GMT
accept-ranges: bytes
content-length: 48181
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep8.-BIG-Ralph-page00-Cover-34679518-lq-267x400.jpg
200 OK 24 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep8.-BIG-Ralph-page00-Cover-34679518-lq-267x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 267x400, components 3\012- data
Hash 6cdacb0d31248507a3c582d1f47f9fad
fcab3365d6e4f5654e571144a626da3bad2f00b7
07c8c3a874bba5d3a48c5c1e45ea56aa04a92830cebb03dac5b31f9875af76d5
GET /wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep8.-BIG-Ralph-page00-Cover-34679518-lq-267x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 24426
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 13:59:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HajpfXbDJuZn9%2FBSWYIdqg6C3uJp3iGhmiypRF6B4mJ6WhfWDVu1ZrfUeH6kXo7hLg4djkuY1KIbvjD5xSrJ%2F9X3Yj34CQrGTLm26SXcL3NrJDmOm7JtcbJQTSRN4A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea5cfdeb527-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2021/09/19/5d93211aed73243fb5494f5b0feb6ad1.md.jpg
200 OK 48 kB URL HTTP/2 4tymode.win/images/2021/09/19/5d93211aed73243fb5494f5b0feb6ad1.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x440, components 3\012- data
Hash 65874393929ebfaefd7a087eb03f106a
b2685bfff8726231506d6e118735414502d6fd68
fa7fe62076ddf04a8f095c8dfb6cd3c928d74ae3bafe7c8055168bd9ddf7a07f
GET /images/2021/09/19/5d93211aed73243fb5494f5b0feb6ad1.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 15:27:12 GMT
accept-ranges: bytes
content-length: 47921
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2021/09/medium/Kq2HeMZjHg228178-med.jpg
200 OK 15 kB URL HTTP/2 ayazik.win/wp-content/uploads/2021/09/medium/Kq2HeMZjHg228178-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 70", baseline, precision 8, 205x300, components 3\012- data
Hash a2ab256fe576e55c435243a7fcc03100
37993a5d3bb417a111f6db354609ffd62b8002dd
04425ad42aaef393a5a21001e6aa5123651e9d122af81cfbcb8bb79fb12a1c8c
GET /wp-content/uploads/2021/09/medium/Kq2HeMZjHg228178-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 19:04:35 GMT
accept-ranges: bytes
content-length: 15134
cache-control: public
expires: Thu, 01 Dec 2022 13:58:30 GMT
vary: User-Agent
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/a02e071867a09ab27b26f1b9d6b15578.md.jpg
200 OK 20 kB URL HTTP/2 4tymode.win/images/2020/12/11/a02e071867a09ab27b26f1b9d6b15578.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x169, components 3\012- data
Hash e37859f8b0ba1b787a64bd0b81ca83d3
deaae5c2401920dc45d58d9b6870ad8632992284
99815b8ddebaf44d3bef2017a8259429c5833d816c6436e9ce0ea07e433072ac
GET /images/2020/12/11/a02e071867a09ab27b26f1b9d6b15578.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 22:05:21 GMT
accept-ranges: bytes
content-length: 19524
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ea66db389b332b88e591df95041f31b7
e5c9e891de90ffd3d71340bf9b6f83e7b7947af2
1e1412119dfdf66f665357699baa9a8ed2d0300357f57ecf33c927107a4caeaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3171
Cache-Control: max-age=125378
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "6387df55-116"
Expires: Fri, 02 Dec 2022 23:48:08 GMT
Last-Modified: Wed, 30 Nov 2022 22:55:17 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
4tymode.win/images/2021/09/19/5841a1afa596ee3fd9be13ac2bed5e6e.md.jpg
200 OK 20 kB URL HTTP/2 4tymode.win/images/2021/09/19/5841a1afa596ee3fd9be13ac2bed5e6e.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x169, components 3\012- data
Hash e37859f8b0ba1b787a64bd0b81ca83d3
deaae5c2401920dc45d58d9b6870ad8632992284
99815b8ddebaf44d3bef2017a8259429c5833d816c6436e9ce0ea07e433072ac
GET /images/2021/09/19/5841a1afa596ee3fd9be13ac2bed5e6e.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 15:27:11 GMT
accept-ranges: bytes
content-length: 19524
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/09/e33070494a66ba986b0af93da3697473.md.jpg
200 OK 20 kB URL HTTP/2 4tymode.win/images/2020/12/09/e33070494a66ba986b0af93da3697473.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x169, components 3\012- data
Hash e37859f8b0ba1b787a64bd0b81ca83d3
deaae5c2401920dc45d58d9b6870ad8632992284
99815b8ddebaf44d3bef2017a8259429c5833d816c6436e9ce0ea07e433072ac
GET /images/2020/12/09/e33070494a66ba986b0af93da3697473.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Dec 2020 12:00:36 GMT
accept-ranges: bytes
content-length: 19524
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/09/a7b2b9f1674ad13fc5622ed58a35d006.md.jpg
200 OK 52 kB URL HTTP/2 4tymode.win/images/2020/12/09/a7b2b9f1674ad13fc5622ed58a35d006.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x450, components 3\012- data
Hash 11c29cce04ff992e4b6ee4bebcb3c844
b41c279b6caa0b88ae9ffd1076b058fe20ced34d
ca3acbe652de0b3cebac87fedccbb2520f312ab326722a224ddab7b6d0d5a80c
GET /images/2020/12/09/a7b2b9f1674ad13fc5622ed58a35d006.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Dec 2020 12:00:37 GMT
accept-ranges: bytes
content-length: 51509
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif
200 OK 608 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash b25a265876454612d42aaea3b7556afe
860dc1663507b68d152dc9b25fa43c05390afe77
6bf7f288ac5290f7089ea2b900a2a4d418882a3d9da24e83d26cc7081ac69d25
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/gif
Content-Length: 608
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aIsaX1x5SjCE5NIdE7olIS0%2FpTPUn7c4yDkw3y%2F5VGco9Rftq7bIajD1vYL%2FSPz0P%2FnCgmeRxF9zSEiLmVs53qbM8AIk6qvqcN40eDAuqwWzi7GyHwmz578B5QGHTw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea5cfe20af6-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2021/09/SureFap.org-Inside-Riley-Ep6.-In-The-Park-With-Rapunzel-Russian-page00-Cover-01298745-273x400.jpg
200 OK 26 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Inside-Riley-Ep6.-In-The-Park-With-Rapunzel-Russian-page00-Cover-01298745-273x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 273x400, components 3\012- data
Hash a2d5cac742f7b0b15a055b2ed212efb3
9f7ef9c46f878f72e6e7a913efae49857c221ecb
83dadc8680543ab2a52dc3d155cc8f694d14ac935162431e7cf2d39be2b599f4
GET /wp-content/uploads/2021/09/SureFap.org-Inside-Riley-Ep6.-In-The-Park-With-Rapunzel-Russian-page00-Cover-01298745-273x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 25558
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 19:52:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7bLaxgbcG2qwBNSKivU8jeTLeAtSumnLnI%2BmqIhNRcvW0h8SxOIMW%2FVXeHaik0rVmgkfGk0ZVpaIzvxlDVc3eMwCZtaDJK16IMtTk4%2B%2FGwb5C%2FA7FGVE3B4JK2onmw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea5ce46b4f4-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep6-In-The-Park-With-Rapunzel-English-page00-Cover-86729314-lq-273x400.jpg
200 OK 26 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep6-In-The-Park-With-Rapunzel-English-page00-Cover-86729314-lq-273x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 273x400, components 3\012- data
Hash d76b967523e0a55a68186a1f9229e7b5
40fef5c32468b6a8f098d98ca307e81a171f82de
ee2b021802fbdf8cba8c3ccdf184cbab06a00b2607daf4857038fc2310775ef6
GET /wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep6-In-The-Park-With-Rapunzel-English-page00-Cover-86729314-lq-273x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 25590
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0ThYdCYFyjZ4lpOhUer6C2FvSHm8Na8COcJ%2FxO0NunkCSffZs5ibx1LN%2F5ZDNhMXrGWmeOpIBHgDd%2BkadM1In1LmTlk%2FZM8JP3yHvuyTpWBQ%2BH2MqwUVYJR07yU0ZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea5caf0b517-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep5.-Family-Christmas-page-00-Cover-40293516-lq-272x400.jpg
200 OK 25 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep5.-Family-Christmas-page-00-Cover-40293516-lq-272x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 272x400, components 3\012- data
Hash adfa3ba0759bd7ee2f7201f0d44492e8
cb671e8733bb504e7fa21d2e487ffb3b52c7bec8
889ce4c94706ae6041c4fe44831a7784eb0619b0b5c9ea9b0c43fb72aad22039
GET /wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep5.-Family-Christmas-page-00-Cover-40293516-lq-272x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 24619
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:44:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=15bwGkxX1OxVvowkuqLiKl%2Bbbz2XOENsHY2vYgZDvW3OeasSJJlhfY0PYCO1A1tL9qqndPNuSUDx%2BbtpANEfQmYfL4hjb%2Bpjbe6avldhSrt2p%2FJNuv8iawwqKwL4FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea5cb031c0e-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2021/09/SureFap.org-Inside-Riley-Ep3.-Morning-Stretch-Russian-page00-Cover-60813429-273x400.jpg
200 OK 22 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Inside-Riley-Ep3.-Morning-Stretch-Russian-page00-Cover-60813429-273x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 273x400, components 3\012- data
Hash 3be74293e88c75d467be5ce9acc83a1d
f6f393f53763c1134c7be955408d84dfd99f9324
74c026044a48845c4dfa08bf77732049c643e283f6f16dbedfc9610c98d1471a
GET /wp-content/uploads/2021/09/SureFap.org-Inside-Riley-Ep3.-Morning-Stretch-Russian-page00-Cover-60813429-273x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 21742
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 20:04:03 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5DLIveYjxdtTzyIRgT7X8FX7CvoSIo4Mfnu%2F73MnKRhPa%2FfXBlqEe9HZgfPG75pA4BVlGZq2Lar2xBcGp0clYrW14uRp6gEiA8I%2FTmtnfUZ%2BZA3AqKLUPwcs9jiPmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea5cfebfac4-OSL
alt-svc: h2=":443"; ma=60
ayazik.win/wp-content/uploads/2020/12/medium/UcyXYeO7Rc400410-med.jpg
200 OK 18 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/UcyXYeO7Rc400410-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 200x300, components 3\012- data
Hash 0f61899383e2be212983c22fd9d724c0
c6780793e2bf76ff4c6fc14195757ddf16f58f9e
9fa03ee1875068aabcdd219db193c218a5c8a35fb9569e6ce76dcf68c60b7185
GET /wp-content/uploads/2020/12/medium/UcyXYeO7Rc400410-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 06:36:42 GMT
accept-ranges: bytes
content-length: 17493
cache-control: public
expires: Thu, 01 Dec 2022 13:58:30 GMT
vary: User-Agent
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2021/09/19/e1600d1204a52d36977a9ad7b6ecdc45.md.jpg
200 OK 61 kB URL HTTP/2 4tymode.win/images/2021/09/19/e1600d1204a52d36977a9ad7b6ecdc45.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x444, components 3\012- data
Hash 7655a493f3082396050b60fae44dad18
0d8e526d8b6554558aea21966963583410c9800b
839943d3544da0795c178129911004a25c610d1fa62dc81516ddd2bb38940654
GET /images/2021/09/19/e1600d1204a52d36977a9ad7b6ecdc45.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 15:27:12 GMT
accept-ranges: bytes
content-length: 60967
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2021/09/medium/nmKUWCCKag932066-med.jpg
200 OK 17 kB URL HTTP/2 ayazik.win/wp-content/uploads/2021/09/medium/nmKUWCCKag932066-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x169, components 3\012- data
Hash 7e265e2c50d4e9aed9c0d55a7ab2d1cc
affa2947d111053950538289819f8f1d80bdd144
73c5e89d77bdd53b77ddc1af413366c1f68df6b2f65d42177fc3491be19f5ea9
GET /wp-content/uploads/2021/09/medium/nmKUWCCKag932066-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 19:04:36 GMT
accept-ranges: bytes
content-length: 17350
cache-control: public
expires: Thu, 01 Dec 2022 13:58:30 GMT
vary: User-Agent
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/9dd2d258bb29cc96281c5c27ad82b727.md.jpg
200 OK 61 kB URL HTTP/2 4tymode.win/images/2020/12/11/9dd2d258bb29cc96281c5c27ad82b727.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x444, components 3\012- data
Hash 8266c0c771b7ecd8c67320ebd1f1f01d
e11d2bce9057094239bf55b467052ef93eca954d
b9e8d7b194c27d6609d249ad2ba742e2b804889bb9473abcc8dd350cb1991930
GET /images/2020/12/11/9dd2d258bb29cc96281c5c27ad82b727.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 22:05:22 GMT
accept-ranges: bytes
content-length: 61084
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/39Z4Br3XcC196402-med.jpg
200 OK 17 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/39Z4Br3XcC196402-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x169, components 3\012- data
Hash 7e265e2c50d4e9aed9c0d55a7ab2d1cc
affa2947d111053950538289819f8f1d80bdd144
73c5e89d77bdd53b77ddc1af413366c1f68df6b2f65d42177fc3491be19f5ea9
GET /wp-content/uploads/2020/12/medium/39Z4Br3XcC196402-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 06:36:42 GMT
accept-ranges: bytes
content-length: 17350
cache-control: public
expires: Thu, 01 Dec 2022 13:58:30 GMT
vary: User-Agent
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2021/09/medium/Yqb2pwvUPf736319-med.jpg
200 OK 19 kB URL HTTP/2 ayazik.win/wp-content/uploads/2021/09/medium/Yqb2pwvUPf736319-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 205x300, components 3\012- data
Hash 619520db087a5771688b91e599054afa
ef50076c70579798fa1125ec577c955ae3136773
abdf9cfebc1099b3c6fbffa5890daacb3a9cd6d3cccd5cc6a17bd459c9f109c1
GET /wp-content/uploads/2021/09/medium/Yqb2pwvUPf736319-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 19:04:31 GMT
accept-ranges: bytes
content-length: 18861
cache-control: public
expires: Thu, 01 Dec 2022 13:58:30 GMT
vary: User-Agent
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/QROXEf8leh169823-med.jpg
200 OK 31 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/QROXEf8leh169823-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018-09-06T16:04:09+05:00], baseline, precision 8, 205x300, components 3\012- data
Hash af7f3b91f5f45e56a762a300c52c6aef
bd07ec31415cd81956ba2bf63447b766f63e9fa5
a35cf0759a7544157e1d6add2c7be1c056371ad378537599489a80a5d1156543
GET /wp-content/uploads/2020/12/medium/QROXEf8leh169823-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 06:36:43 GMT
accept-ranges: bytes
content-length: 31192
cache-control: public
expires: Thu, 01 Dec 2022 13:58:30 GMT
vary: User-Agent
content-type: image/jpeg
date: Thu, 01 Dec 2022 12:58:30 GMT
server: Apache
X-Firefox-Spdy: h2
nefree.com/images/2020/12/06/214156965525954ed5c2295a41345d98.md.jpg
200 OK 36 kB URL HTTP/2 nefree.com/images/2020/12/06/214156965525954ed5c2295a41345d98.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x367, components 3\012- data
Hash 358309e0427e7e0b722d4bf0b5ec9ef7
f403c37ccb6f3e66f8bea7643161971722630d65
a34bf4b4425dfd5de0507a982c380b5e6fd46a9c6823b02aad85c99f2f10a13e
GET /images/2020/12/06/214156965525954ed5c2295a41345d98.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:30 GMT
content-type: image/jpeg
content-length: 35683
last-modified: Sun, 06 Dec 2020 20:08:47 GMT
etag: "5fcd3a4f-8b63"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 9671
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3dHH2M05GTbiX3T3eqsJu6cJDV52z4A5bsnhBZLEhaO36dYGjvLAZ1u9MBUjqWG0XL7NWrtsNGSl0j1QdRfftsOeOxMuo3Sv8TXHJ4veZ9QsbRuzzCQnFsO6Ai5V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea68c54b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2020/12/06/c75a116522dbcc3e195658b10137ba9b.md.jpg
200 OK 14 kB URL HTTP/2 nefree.com/images/2020/12/06/c75a116522dbcc3e195658b10137ba9b.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x141, components 3\012- data
Hash c5e0b4c26d13612713af1b0b000ab41d
b5ae1b0edb328f88c3629f7f140f2110c5427ae2
f185efd2a80105fe5c6d0b5685bf066f17b8c4c01b4a060fc0db84af831c032c
GET /images/2020/12/06/c75a116522dbcc3e195658b10137ba9b.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:30 GMT
content-type: image/jpeg
content-length: 14502
last-modified: Sun, 06 Dec 2020 20:08:44 GMT
etag: "5fcd3a4c-38a6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 9671
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zkb5k%2FWFMTC1d9bKB3Db5uu7MabDG39MDJVYjNdQc8P5isWqsZyqIbLYISIgsgPan3NgUjGxXUYFCfONOevksikdR0Vj2FtnkMLWmyDkHS%2BGZ0xmDP8cKibl%2Ftd4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea69c63b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash fc3b38e25b39b6b762c02f6272a54a0d
3e6ae2da01202ffe282146f096ae64088e3809b1
884f3a6dbc758884a04607aa5d72ef7061870f43faf84de1e9be4183d0cdd0f8
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=wd1ZF8anyCJelS1NsGjD; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
200 OK 270 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3\012- data
Size 270 kB (269711 bytes)
Hash d30a4392660ba150ffcb590ecf3b959f
917018a795e409303eecc5e560c2cc4db2785978
5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa
GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 269711
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qZaImCoHXcRjrUmZNV%2Bxk3px6uFLA90LwWXdzQ8WxqHA27pnbK%2F1xC%2FlWN%2FiFj4ehZbUxOMwedWkW%2F58N3qWYnr1EZ6Ts9rR%2BhhMqzU2NrSOdBpLRhnxKv%2BRonAVeg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea69f94b4f4-OSL
alt-svc: h2=":443"; ma=60
a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 882ac5aada70fbcec216b3286963414b
8d3498312e9f2558e7c903edee6e2159fb8a0a5b
6f4f6d85bcab3153af947fefaf20d83ba8853bb7420fd9acae88ae5194347337
GET /api/spots/303160?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=aRlWFyBnMIfN3T471eVO; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
nefree.com/images/2020/12/07/ff7777dc215b7617ee276e52bf6a61a8.md.jpg
200 OK 14 kB URL HTTP/2 nefree.com/images/2020/12/07/ff7777dc215b7617ee276e52bf6a61a8.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x141, components 3\012- data
Hash c5e0b4c26d13612713af1b0b000ab41d
b5ae1b0edb328f88c3629f7f140f2110c5427ae2
f185efd2a80105fe5c6d0b5685bf066f17b8c4c01b4a060fc0db84af831c032c
GET /images/2020/12/07/ff7777dc215b7617ee276e52bf6a61a8.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:30 GMT
content-type: image/jpeg
content-length: 14502
last-modified: Mon, 07 Dec 2020 19:00:58 GMT
etag: "5fce7bea-38a6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xf2HMuFRhbAHAB0lEHyt7hVINPjkTgpPZnVJCxFMZ0LI%2BzR1vKo1VJBV9CpkSBL5WNPUS7qe8wEIAI648zD9WrRpInDHWW8VxMN7cQmWRu4wT0hTc8HEYT08iG2a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea65c20b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2017/08/surefap.org--Inside-Riley-Ep2.-Sending-for-Mom-page-00-Cover-41452210_3655613252-267x400.jpg
200 OK 19 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/08/surefap.org--Inside-Riley-Ep2.-Sending-for-Mom-page-00-Cover-41452210_3655613252-267x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 267x400, components 3\012- data
Hash 9a3a5a37c70563414da9850719feb09f
dd2e63346517924d44ef1eb4c80dfd449b9782d3
572dbce08c343ce8f2dfa18365fc64f81b0a626372e7edd78b0f22e199fd88e2
GET /wp-content/uploads/2017/08/surefap.org--Inside-Riley-Ep2.-Sending-for-Mom-page-00-Cover-41452210_3655613252-267x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 18757
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2SMoH%2BEZ2FN0GjyIzx1Ko8mzAtK%2BaPsMswEzcaBhCGfp75Nd8kaFwmYzCo23e9L6kzPLZBOwB%2F9OGwVqZs5Moecz%2B13fbMFCfal6q1ZCFZ7fOuG5Cjga67zKkPJkJw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea6ebc51c0e-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 278 B IP
Hash ea66db389b332b88e591df95041f31b7
e5c9e891de90ffd3d71340bf9b6f83e7b7947af2
1e1412119dfdf66f665357699baa9a8ed2d0300357f57ecf33c927107a4caeaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=122207
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "6387df55-116"
Expires: Fri, 02 Dec 2022 22:55:17 GMT
Last-Modified: Wed, 30 Nov 2022 22:55:17 GMT
Server: nginx
Content-Length: 278
nefree.com/images/2020/12/06/bf9e6f55e3ebb5573299daad307bf296.md.jpg
200 OK 29 kB URL HTTP/2 nefree.com/images/2020/12/06/bf9e6f55e3ebb5573299daad307bf296.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x375, components 3\012- data
Hash 601eeb2e468408722a91ef1419be8b71
dd2410827f788cf0a40d746ca47e5ca5c7ccefb3
8b04b42117da390375efd9bad9e8880f00d03622b4844ecf5722db1f936fee82
GET /images/2020/12/06/bf9e6f55e3ebb5573299daad307bf296.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:30 GMT
content-type: image/jpeg
content-length: 28654
last-modified: Sun, 06 Dec 2020 20:08:45 GMT
etag: "5fcd3a4d-6fee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 9672
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qaaNy7qz91KXU%2BUAB08%2B0ES8GoHjLwUaHqR1VRxmKSpMgWjYnQgD6rUhFrXSoeEq6B8NPbTTsTVa%2FllRAzrE8xm35CsjVsglFz%2Bl9%2FWuNNeQwUVMlLIB3CNlvpje"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea76d6db4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ea66db389b332b88e591df95041f31b7
e5c9e891de90ffd3d71340bf9b6f83e7b7947af2
1e1412119dfdf66f665357699baa9a8ed2d0300357f57ecf33c927107a4caeaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=122207
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "6387df55-116"
Expires: Fri, 02 Dec 2022 22:55:17 GMT
Last-Modified: Wed, 30 Nov 2022 22:55:17 GMT
Server: nginx
Content-Length: 278
surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
200 OK 96 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash af0cbbc54929fe5b3717ac2ac86081b9
e4426f5722c2f1c50aef206b49809c881f933883
d725b5470eb89f76a72a0367b22eb957e862d6518cfc79bc1b03b6331c641cfd
GET /wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/png
Content-Length: 95698
Connection: keep-alive
Last-Modified: Sat, 08 Feb 2020 05:34:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3zNXiCpViR5gXEbH%2BMQoIYQX3nJ94xiBhl9D9X51AOoj9gtB%2Fh70S%2FcXs2knppZvoXYX%2BEQBLUgCGJBQTAyeD%2BVqR1CNMlApsIl9mfb27Jar%2Fxhz%2FBIWztMyii2Twg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea6dc42b517-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 278 B IP
Hash ea66db389b332b88e591df95041f31b7
e5c9e891de90ffd3d71340bf9b6f83e7b7947af2
1e1412119dfdf66f665357699baa9a8ed2d0300357f57ecf33c927107a4caeaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=122207
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "6387df55-116"
Expires: Fri, 02 Dec 2022 22:55:17 GMT
Last-Modified: Wed, 30 Nov 2022 22:55:17 GMT
Server: nginx
Content-Length: 278
surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
200 OK 65 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a80cc46f72d3fb004dbe75ccafd776b
e6e9764bcef6edc5242d61e7b9f740115a57b9cf
41ded72e1e0bdf063ac95b32f15599a553f244fd0e300d1997e0caf3e76142d2
GET /wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/png
Content-Length: 64971
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=64jioP2%2BNShaiiPPEsMZQOPuuQB7E05vX5R4Std4NnK1VgBhwNfeqZ740AjY%2BNgVokPg4PKtQ6fQ5uDGRJRwwu%2BYpyuonPc1Lgrwg5MAjzznXqd5HrduvQiBEex9Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea739260af6-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/45941-featured-269x170.jpg
200 OK 13 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/45941-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 269x170, components 3\012- data
Hash d690b9837a6b19dbc1ad836285b4b2ae
7511b1c7aa327da29578276f5668510b4ed923d3
5188fcf8ae947d71ddf27d5c2258ae1f22137c330c60626785d7fc39a53422e8
GET /wp-content/uploads/wordpress-popular-posts/45941-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 12986
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:43 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ON2Y5Nle3wI7NVaVXjmka%2FcjZKFssd9imNlMemDnk8s8UnmSng4P5%2BEFf7%2BRQVs5mH2Wfhtfokamemo8IPAvnw8Qbt9LoFklq3o%2FSVxh08DwMV9xNLsAXL%2B%2F5i92YQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea75c1d1c0e-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep7.-Cucumber-Salad-English-page00-Cover-57083426-1333x2000-267x400.jpg
200 OK 19 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep7.-Cucumber-Salad-English-page00-Cover-57083426-1333x2000-267x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 267x400, components 3\012- data
Hash 22001b1b306c153f0fd6278775213de3
c6cd9d521191b46a812b05f51ec03f6d1565a6d4
2ca1ab93d41905b178b5f673c5b4f49506b5d4157ef3d3f7b5bc88432957e64d
GET /wp-content/uploads/2020/12/SureFap.org-Inside-Riley-Ep7.-Cucumber-Salad-English-page00-Cover-57083426-1333x2000-267x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: image/jpeg
Content-Length: 19218
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:13:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vK5c7wcYTdEzNoq3Z7eJKPeqUd%2BWPsbojcbdIirEPSqFe6IgMLhZnC5XGEb2YtQhDqfLURlmfxpLLYTKe94bq9myLq1Gx1UpsEqztbntdjjgnWIXNz3doHzEiOXiJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea7089ffac4-OSL
alt-svc: h2=":443"; ma=60
a.shukriya90.com/api/settings/23307
404 Not Found 9 B URL HTTP/2 a.shukriya90.com/api/settings/23307
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 9e076f5885f5cc16a4b5aeb8de4adff5
475c848673a3f79fa778f01c2bd5a721d4c41707
e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
GET /api/settings/23307 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Origin: http://surefap.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Thu, 01 Dec 2022 12:58:30 GMT
content-type: text/plain; charset=utf-8
content-length: 9
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ea66db389b332b88e591df95041f31b7
e5c9e891de90ffd3d71340bf9b6f83e7b7947af2
1e1412119dfdf66f665357699baa9a8ed2d0300357f57ecf33c927107a4caeaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3171
Cache-Control: max-age=125378
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:30 GMT
Etag: "6387df55-116"
Expires: Fri, 02 Dec 2022 23:48:08 GMT
Last-Modified: Wed, 30 Nov 2022 22:55:17 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash d5f4f3df75ee69d06bd97b4d18da2f27
db7730c03a24454ce8d73c23efc23588274bdd66
8cc92a62f0ae109f02ca2e7f9a86e09284a9e4b61be9534e79c5f68872fb291a
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=xCqRjJK2164sO5xHA97D; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nefree.com/images/2020/12/08/5bf6de8d0df59b7b6ac27960c4691e3f.md.jpg
200 OK 40 kB URL HTTP/2 nefree.com/images/2020/12/08/5bf6de8d0df59b7b6ac27960c4691e3f.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x367, components 3\012- data
Hash af2acc2a949b47e6ce83b76d20ed2051
5a9ae27999c0c4b13c734aa0228af7ce973e460c
65dd247b8aa2bca00da9908d6c8b1f4718c2fe4bc8d90a5448bd83a6c513e2f3
GET /images/2020/12/08/5bf6de8d0df59b7b6ac27960c4691e3f.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: image/jpeg
content-length: 39592
last-modified: Tue, 08 Dec 2020 16:51:45 GMT
etag: "5fcfaf21-9aa8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=COILJx8bAYrlOgoPgPZSPq7VX8KmzMXekfJaI7McrdlkixkcftXYZpGSi0IPkajdEyD2oUM%2BXfcS%2B%2BqlRCVHdCpOiG%2FJ1cxci%2B79IcH2%2FH6fHJ0gYDS9K7vvb8b7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea66c27b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2020/12/08/c334875bb348ef616ab37a886f8e7302.md.jpg
200 OK 14 kB URL HTTP/2 nefree.com/images/2020/12/08/c334875bb348ef616ab37a886f8e7302.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x141, components 3\012- data
Hash c5e0b4c26d13612713af1b0b000ab41d
b5ae1b0edb328f88c3629f7f140f2110c5427ae2
f185efd2a80105fe5c6d0b5685bf066f17b8c4c01b4a060fc0db84af831c032c
GET /images/2020/12/08/c334875bb348ef616ab37a886f8e7302.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: image/jpeg
content-length: 14502
last-modified: Tue, 08 Dec 2020 16:51:41 GMT
etag: "5fcfaf1d-38a6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WjIMxbR7h0kZNYmWMm61SUdEroiEljX5s1VUojREHV6s83Ihq8XeHjgtE%2BEQUbfspsZXQMj19OKX8DnX62WdzAko1%2FVEHXMXw49k8JcsGV09LDRLucDCE%2Fkydxnb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea66c26b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
200 OK 8.6 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 269x170, components 3\012- data
Hash dc9802a6d8bb38c758f2e602de516de3
60809f2f96869416259893a43c91fe392f3a3a4d
789981c56beb944e93e129833632dd5b53e97012360fbf0f7b4e77c399996c05
GET /wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/jpeg
Content-Length: 8613
Connection: keep-alive
Last-Modified: Sun, 09 Oct 2022 20:09:59 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aIh4HrstqJZEiS6idPNKtG4ddh58medWYrqlmqF5o0W3qRlVwdR88umOOuw8VGGx%2BQ2GJjHAviA01HV4v8xDMLlII%2FmXFgWJLiBp4qunwt2Q22IIo%2BPiJJdoV2Zahw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea74999b527-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2017/10/surefap.org--Inside-Riley-Ep3.-Morning-Stretch-page-00-Cover-35188986_213100735-273x400.jpg
200 OK 21 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/10/surefap.org--Inside-Riley-Ep3.-Morning-Stretch-page-00-Cover-35188986_213100735-273x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 273x400, components 3\012- data
Hash 6f9e7442446b9a8a6cbc239a30fc6105
bb3e8da0149d2d6164ab93cc990779a797b0a0e7
5a2c410c24771cd42b43df8f0af81b3441720bcb6c5da6848fb547a637e81d74
GET /wp-content/uploads/2017/10/surefap.org--Inside-Riley-Ep3.-Morning-Stretch-page-00-Cover-35188986_213100735-273x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/jpeg
Content-Length: 20942
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:27 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XzZf2xZO13evnm3j%2FP3ipnEIroP%2Be5NOyXi0ppB%2FsKIMwKGW1rnwi89X3fvBtOhPqES97k%2FHR4O%2BqRzMEgGAJHekRyR0McC8ar8H35HqAI7yQpT170o%2BwXbcgs%2Bpgg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea6f81bb4f4-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://surefap.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 21:18:06 GMT
expires: Tue, 28 Nov 2023 21:18:06 GMT
cache-control: public, max-age=31536000
age: 229225
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 1e483d25aa3a2c769c7e680eb75b52a3
2dfe501fc81cd6939bd014cedb41af85b4e3c7af
be1b058eb9e3fef483e425718456e8bc58fda7d4a81de0d6e794b1e03dfdbd01
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GM4XYyk2NHchAJGUn6%2BK4lsjxAAIXLkENDnOpXNnkJ2P%2FuugjCIaB1Iz0grlHF16dls9BCG47Lti77xG5BV2te94sSMWbIDuD5vglRuCS2NeQ4ZSV7SB0f3S%2B%2B0h4A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea7a99b0af6-OSL
alt-svc: h2=":443"; ma=60
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
a.shukriya90.com/api/click/3868886721517644095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/3868886721517644095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/3868886721517644095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
surefap.org/wp-content/uploads/wordpress-popular-posts/36996-featured-269x170.jpg
200 OK 8.9 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/36996-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 269x170, components 3\012- data
Hash c8c6bcd7a416bff11296465d35ecfb7e
584b086573b171ab9028bf3fd4f91eb65e0f3dc8
628148117351b00b0dff5d9c77fb5a931cd18ed83bd83ed412c78cd42b6fba85
GET /wp-content/uploads/wordpress-popular-posts/36996-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/jpeg
Content-Length: 8945
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 12:42:13 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G9ZxzVfCoaya67rzeZr9oSbFCq7b5h8pnRVPu8YxoJLo5KcPJwlUBncD9PLAoA9rsahmT7UMWwtoECwYstfb2hUXUQs38qn7fmzEIiG1Lf8zDiytcbkx%2F0QwQUP8PQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfea79cf5b517-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 12:08:56 GMT
cache-control: public,max-age=3600
age: 2975
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
nefree.com/images/2020/12/07/4acda66a328cc8123732c2a21aef0b6b.md.jpg
200 OK 31 kB URL HTTP/2 nefree.com/images/2020/12/07/4acda66a328cc8123732c2a21aef0b6b.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x367, components 3\012- data
Hash 51a981e5329e3fb03e86456eb7a6384b
055909daca62525711c5b7acb1f4ede882a635b1
abd83a63e905be2faadf3bd1f1d43b906bef84cd8148a44abc17613601d617bc
GET /images/2020/12/07/4acda66a328cc8123732c2a21aef0b6b.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: image/jpeg
content-length: 30989
last-modified: Mon, 07 Dec 2020 19:00:59 GMT
etag: "5fce7beb-790d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pZGXzXGPyJTB3bvngDpRPDEapsqSmpnFyytB6CzW5ECpTbMvpGfzgK6Gt6YCfBeVslWLZZbdnHdHA6cBEiTESQviqoXGfvhDtarh6ZD1BICAIu13wWUskLP%2BRl0J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea68c51b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.shukriya90.com/api/click/17493170291278377095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/17493170291278377095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/17493170291278377095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
a.shukriya90.com/api/click/9129114712871155095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/9129114712871155095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/9129114712871155095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
nefree.com/images/2020/12/07/5bda1cbc3840708f164d318f58a6ea85.md.jpg
200 OK 39 kB URL HTTP/2 nefree.com/images/2020/12/07/5bda1cbc3840708f164d318f58a6ea85.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x367, components 3\012- data
Hash 39e1e288df1a90bca2a81c64d7670f7a
a8276a25aac7547f68c32cb1d41211c51c724d1f
6866adc6824ac10415fdfca6516684ec2312cda83ec208a5197236a3884f5957
GET /images/2020/12/07/5bda1cbc3840708f164d318f58a6ea85.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: image/jpeg
content-length: 39183
last-modified: Mon, 07 Dec 2020 19:01:01 GMT
etag: "5fce7bed-990f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3k5cYYjDmElKNjpW184NWT%2FqLWG136DKPUhxnYrkSBoAF8xGAmwZs4rjr1sb3RmSbMqpoqcz1O%2FksjiX6dsV3BcQwRxcTjkO%2B7dTDrlZVyTm8CIkA%2FMiSBwMLRkt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea7bdccb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
syndication.realsrv.com/ads-iframe-display.php?idzone=2778226&type=728x90&p=1&dt=1669899509600&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
200 OK 1.3 kB URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=2778226&type=728x90&p=1&dt=1669899509600&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1206)
Hash b9b3bc746ded2e4eb1effb6dcb4b3b04
a7daf1ceb0c5ad5f2dfb9392708e422b3e844de7
746a07b1b7cfd7d3f337bede99f75817b1c0042637498bb3430eebfdbe2c163e
GET /ads-iframe-display.php?idzone=2778226&type=728x90&p=1&dt=1669899509600&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226388a4f71bfa51.491199352102177460%22%3B%7D; expires=Sat, 30 Nov 2024 12:58:31 GMT; path=; domain=.realsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
nefree.com/images/2020/12/08/7cdb3f3f27388b02b97d15441a95940a.md.jpg
200 OK 36 kB URL HTTP/2 nefree.com/images/2020/12/08/7cdb3f3f27388b02b97d15441a95940a.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x368, components 3\012- data
Hash a882e76727550f72ef43226ac56be2be
4e27d01984ec7b4d2705e98e653fc9fa8d06767c
6a454d62d6bf0e3dffec8788c02dd29ab35a4840e47c917f8a2d79c006afc211
GET /images/2020/12/08/7cdb3f3f27388b02b97d15441a95940a.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: image/jpeg
content-length: 36192
last-modified: Tue, 08 Dec 2020 16:51:43 GMT
etag: "5fcfaf1f-8d60"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e3MvAu9ryaySjaQKjHg%2Fg2CpCrxZz8MKtNDeU8cQV%2BgCHkD5CV%2FDuETd%2Brq8chT6tE7kC5F1ithc5%2BXA4xPQbO8F4DV7Vtilo4QIAbbJt8pagc8%2BK78y%2B4NtEMbK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772bfea7ee2eb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5186
Cache-Control: max-age=164084
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:31 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:33:15 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
200 OK 5.3 kB URL HTTP/2 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP
File type ASCII text, with very long lines (2401)
Hash cc3119a4758d99775a34acc45e2022b9
35a123b2c780a6710cdda6c4df43e970df75f90f
1efcb34eafd3cef030b923a197daddcff44f83819e91c8721cb4bca0aef9c499
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
stenadewy.pro/aBW.ZCyDPE3_BG1HcI2Jh-aLbM2N5Ol_SQWRQS9TN-DVEW1XOYT_UaybMcidZ-6fbg2h5il_SkWlQm9nN-DpEq1rOsT_UuyvMwgx?iframeId=iwkevw
200 OK 0 B URL HTTP/2 stenadewy.pro/aBW.ZCyDPE3_BG1HcI2Jh-aLbM2N5Ol_SQWRQS9TN-DVEW1XOYT_UaybMcidZ-6fbg2h5il_SkWlQm9nN-DpEq1rOsT_UuyvMwgx?iframeId=iwkevw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aBW.ZCyDPE3_BG1HcI2Jh-aLbM2N5Ol_SQWRQS9TN-DVEW1XOYT_UaybMcidZ-6fbg2h5il_SkWlQm9nN-DpEq1rOsT_UuyvMwgx?iframeId=iwkevw HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
200 OK 20 kB URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type ASCII text, with very long lines (2401)
Hash e485772a578164f45ddf0098a7e36063
763e120a6b5fc5e66d54eae438008629dd0b4f18
f7b8eacdcb9ecd4b71b9faa80d8e16531a54d6d4656d684a5a47fea20a8a118d
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26957), with no line terminators
Hash 0db772eac3d593b76f0b7b577f1446b1
dd9c4c575a1ebbd9d44c83ad68e4909f3ebf19fe
ed2b43d32274d9f017cc65249e1ae6eec2ebc69b38b53c2daba065dc9090ff9c
GET /7a2fa356cc779900c863a51e810fbfce/invoke.js HTTP/1.1
Host: www.effectiveperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba0f0e602ff047e26ba36bf98fc6baa7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/352013?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=VKknOYxZmXrbApdishQ6; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: N09OZ2P28gIDZ6ZrZ5I20g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: t/RnLqi1/FPxNX6LV2Ly+dMpFlg=
surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
200 OK 121 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
IP
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash f395c59b99ad9effdd18186e3416b83f
31fa705e99763fd0d6183cf20c99e99605a8987f
9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632
GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/png
Content-Length: 121
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DK%2FGgrt0Dy8NpOzj2GA3C5vmWovyjPQ4l0oN6NUymrSOVym8Y%2BIMUQr6OBjvMI1U3YC%2F22xuxf%2BRo9Z30U9bkuMDbcfnUmH40bAgapNGVqx%2B0lDyyw7Cvj%2BVw%2FDAuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeaa9d9fb4f4-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 358948a0ec900509e53396438fadea91
c47bd41c2dfd3879ca398829ac3438fce227dd96
d4cc3dfa1061aedf2533cf134f9d584568bc41a25090fb7ce77c5cdbec6c37e6
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4X6QxIKRvPBPb3Vkc76no%2BcOHk6u1q9b1oTqclFUiwyKc3LbFDqObywbtCWlGyf8BUfT5xmpExpyyy0y9eMdv60m9o5MlI8iy1AJ6kujZRaE8HBpGgEqih4%2F4xEeiA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeab299ab517-OSL
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 819f953b0edd066d30cf5847c5564d3c
12f3ea06c2a617db03caa556e37c1cb106d44f93
9794d926ccf993a8cd760c76077cf94f5b270633aff450e45934a5c8fd52d62d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93323
Date: Thu, 01 Dec 2022 12:58:31 GMT
Etag: "63875b15-1d7"
Expires: Fri, 02 Dec 2022 14:53:54 GMT
Last-Modified: Wed, 30 Nov 2022 13:31:01 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QJSnhNJ8VLd7K5-9ZpKWA5-2j1a3tGuoHJazyRgzyhBX61UMyQmYfg==
Age: 4973
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 31f2ceddd8dbcfac0e6758947a1ece9f
1f732b577240b02a6214724351d62607d3d9d1a1
ed76ec996f92ded6a1ebbc2491e80ea0507896060a1cc2f3c722a4babfd5fff4
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
set-cookie: uid_id2=611bce83-d214-4383-984a-34fa499e284e:3:1; expires=Sun, 28 Nov 2032 12:58:31 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash db10c08007a299fb0043017811fc18be
f64473fdf776a9fe4bfed61ce5f9e7542ed58160
0a198aeacf2dd6383e4d9cc36aae921c5c1887a221a9791d3a27c8481265d939
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 07:08:32 GMT
Expires: Tue, 06 Dec 2022 07:08:31 GMT
Etag: "f64473fdf776a9fe4bfed61ce5f9e7542ed58160"
Cache-Control: max-age=410399,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 772bfeaaffd4b4fd-OSL
adserver.juicyads.com/js/jads.js
200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP
File type ASCII text, with very long lines (3769), with no line terminators
Hash 65b1efdf55163b144c5018b8772765ad
509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eb9"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 302 Moved Temporarily
Date: Thu, 01 Dec 2022 12:58:31 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167
Content-Length: 32
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 01 Dec 2022 12:41:08 GMT
expires: Thu, 01 Dec 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 1043
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
surefap.org/favicon.ico
200 OK 2.4 kB IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash e4cb9c2ef4866c61686ea529cca5864c
51b1a32b077611d3f312c177cca13717e1d4c7aa
fed799214bbf9fecbb850e4a9013982864d232b335954ae57ef807b559821225
GET /favicon.ico HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ugaromix/
Cookie: PHPSESSID=if9ai2bbe0ftjb0l5eh7dlj7f4
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:37:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kirTzITe5JcmFnz2TrfihIMZ7%2Foq426zFcx8ncxF3neaWbRYIvGxSokg1sYPJSCpSCCBRoq7BAJF60e1XVWlSqoVieNXilu4kd%2B1jDdBxrC%2FfY1nKDbTjmz7IF2ZuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeac0f7ab4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 6728e9760df5baf0dff206f5b97b9eab
c423d08788d629379634c77cf4febc68e5894de9
11d1dce244dc4c99df3e6639aeabee7893e1d5d716c6ecc4947a8d010b146c61
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Mon, 05 Dec 2022 11:26:30 GMT
ETag: "c423d08788d629379634c77cf4febc68e5894de9"
Last-Modified: Thu, 01 Dec 2022 11:26:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2791
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeac7e960b3d-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 6728e9760df5baf0dff206f5b97b9eab
c423d08788d629379634c77cf4febc68e5894de9
11d1dce244dc4c99df3e6639aeabee7893e1d5d716c6ecc4947a8d010b146c61
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Mon, 05 Dec 2022 11:26:30 GMT
ETag: "c423d08788d629379634c77cf4febc68e5894de9"
Last-Modified: Thu, 01 Dec 2022 11:26:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2791
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeac8ea30b3d-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 12:58:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=526114496&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&ul=en-us&de=UTF-8&dt=Publisher%20Ugaromix%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1573091919&gjid=491783663&cid=316139776.1669899510&tid=UA-68853511-3&_gid=152078092.1669899510&_r=1&_slc=1&z=8049065
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=526114496&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&ul=en-us&de=UTF-8&dt=Publisher%20Ugaromix%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1573091919&gjid=491783663&cid=316139776.1669899510&tid=UA-68853511-3&_gid=152078092.1669899510&_r=1&_slc=1&z=8049065
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=526114496&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&ul=en-us&de=UTF-8&dt=Publisher%20Ugaromix%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1573091919&gjid=491783663&cid=316139776.1669899510&tid=UA-68853511-3&_gid=152078092.1669899510&_r=1&_slc=1&z=8049065 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://surefap.org
date: Thu, 01 Dec 2022 12:58:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash bc5947e1188b03a2b9ba0c1507dd0f4c
9d78b57591c8d910d7a186a8ef9ed12330b63339
98ea4f1e938d259fda623da208123e83a746359dedaa08644d77757d9a4ce000
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 05 Dec 2022 11:07:20 GMT
ETag: "9d78b57591c8d910d7a186a8ef9ed12330b63339"
Last-Modified: Thu, 01 Dec 2022 11:07:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1901
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeaccc49b512-OSL
informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
200 OK 1.6 kB URL HTTP/2 informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
IP
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash 86fe084626594cda48398fda2f8b3a91
5140a121177a6fcd40e59ac1f9c72e38d684823e
8d66a20513618c2da382545ce3630e1226106d9c5b285bfd3ced6c321dc59dba
GET /informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews HTTP/1.1
Host: informer.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 1646
last-modified: Thu, 01-Dec-2022 12:58:31 GMT
content-type: image/png
pragma: no-cache
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
expires: Thu, 01-Dec-2022 12:58:31 GMT
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 14 kB URL HTTP/1.1 top-fwz1.mail.ru/js/code.js
IP
File type ASCII text, with very long lines (729)
Hash e2e25d9473a05570c20838aca1c2c3ea
a8ac67a13111a4e61cf7eb9bb8850ef5ab1246d4
b75b8d2fe8eb0c9e8191c51f99eb62b37c944f36118aacb5237e4bde65c60e11
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Nov 2022 16:42:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIE:1669899511:0:::; path=/; expires=Sat, 02-Dec-23 12:58:31 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"637e4d62-85c6"
Expires: Thu, 01 Dec 2022 13:58:31 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167
200 OK 1.5 kB URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash f311bb25da5f4b788d484017653fdc5e
74c631107d122e86d934d6ccc890628b405870ac
bfb75d4449bbc0f0af30ddbdcc07b0eadb7e5fcdde5381e4928102752c22b9e5
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ugaromix/;0.9738517811930167 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: image/gif
Content-Length: 1536
Connection: keep-alive
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 1d79426653c3b55939eaec59a2ce8ef5
c6db0314df7a4e5c08047f6306e0b79a1ad3bab2
2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73267
date: Thu, 01 Dec 2022 12:58:31 GMT
access-control-allow-origin: *
etag: "63875d46-11e33"
expires: Thu, 01 Dec 2022 13:58:31 GMT
last-modified: Wed, 30 Nov 2022 16:40:22 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f77e78940059e3c40845b88d983f0190
b87c36cb7d50fe79ae0e46f8f1eeec0019983bfe
65adf84ea35680143369ffdf369437398967ff593e48c8e16d4d6ed12217e30b
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:31 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Mon, 05 Dec 2022 09:50:15 GMT
ETag: "b87c36cb7d50fe79ae0e46f8f1eeec0019983bfe"
Last-Modified: Thu, 01 Dec 2022 09:50:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1250
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772bfeadd86e0b3d-OSL
top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 01 Dec 2022 12:58:32 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633
set-cookie: FTID=1RMYgQ0tkIIE:1669899512:2787143:::; path=/; expires=Sat, 02-Dec-23 12:58:32 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 01 Dec 2022 12:58:32 GMT
access-control-allow-origin: *
etag: "63875d46-2b"
expires: Thu, 01 Dec 2022 13:58:32 GMT
accept-ranges: bytes
last-modified: Wed, 30 Nov 2022 16:40:22 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 24e83e70da62f7ab0bd4e66b21b0e2f4
51d2b17fa72ea28871bd5ab3ea7738301b3e6c43
e69a4200c26dcb8e60a3f870795c7d39daf64d619254cc6055d68791bddfaff3
GET /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Thu, 01 Dec 2022 12:58:32 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 01-Dec-2022 12:58:32 GMT
last-modified: Thu, 01-Dec-2022 12:58:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669899510384%3A1669899510400%3A1%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga;visible=true;_=0.34216444274155633 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:32 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669899512:2787143:::; path=/; expires=Sat, 02-Dec-23 12:58:32 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15a50c9fa8b9d562b4743d76da3f2275
84257fcccbc6464020568e9606dca5b9142d386a
700edd4d5d63c800bccca41f53bd4836861f68b04709654e0dc29ac86c18c4f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "700EDD4D5D63C800BCCCA41F53BD4836861F68B04709654E0DC29AC86C18C4F4"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6345
Expires: Thu, 01 Dec 2022 14:44:17 GMT
Date: Thu, 01 Dec 2022 12:58:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6479
Expires: Thu, 01 Dec 2022 14:46:31 GMT
Date: Thu, 01 Dec 2022 12:58:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6479
Expires: Thu, 01 Dec 2022 14:46:31 GMT
Date: Thu, 01 Dec 2022 12:58:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6479
Expires: Thu, 01 Dec 2022 14:46:31 GMT
Date: Thu, 01 Dec 2022 12:58:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:44:47 GMT
age: 54825
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 9d34c42b-ba0c-498f-8f99-d4ab527ffa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMdHXNIAMFgaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe9-376846f31dc9b995797cbd18;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:25 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DngCuOTO9fQAwWe_ip6EtBcgruigZN6Bl1_v5BHM2dsWlhqCXCL3gg==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:33 GMT
age: 54779
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:29:35 GMT
age: 84537
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 54552
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CJiSRzIK7-rQE81gaP2We0LhgKX1YmuJKEGYEqW34Bm1KMx6NB8yhQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 04:29:19 GMT
age: 30553
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:21:34 GMT
age: 85018
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
yearbookhobblespinal.com/watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid=
307 Temporary Redirect 0 B URL HTTP/1.1 yearbookhobblespinal.com/watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid= HTTP/1.1
Host: yearbookhobblespinal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 01 Dec 2022 12:58:32 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Location: https://yearbookhobblespinal.com/watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid=&shu=13bdeb6486acdf171ef0ecb013eeaa538abaaf60740f1fc68fab81291c3212089288567a21c70a9e1d36e117728a6bed1698296d89914249ffeb59cc87dc32f9091eec2390b0f56c09fee076e877e5b9ff42c8b37e57f567ee4bec920938a55470&pst=1669899572&rmtc=t
Set-Cookie: u_pl=15842260; expires=Fri, 02 Dec 2022 12:58:32 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.tgM8p9KWPZDpstWJWxGyFjTbywsg_bkT2JqrGxFgIXM; expires=Thu, 01 Dec 2022 12:59:32 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d084f1dbc84b399af3547cf8363f0230
Strict-Transport-Security: max-age=0; includeSubdomains
yearbookhobblespinal.com/watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid=&shu=13bdeb6486acdf171ef0ecb013eeaa538abaaf60740f1fc68fab81291c3212089288567a21c70a9e1d36e117728a6bed1698296d89914249ffeb59cc87dc32f9091eec2390b0f56c09fee076e877e5b9ff42c8b37e57f567ee4bec920938a55470&pst=1669899572&rmtc=t
200 OK 2.4 kB URL HTTP/1.1 yearbookhobblespinal.com/watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid=&shu=13bdeb6486acdf171ef0ecb013eeaa538abaaf60740f1fc68fab81291c3212089288567a21c70a9e1d36e117728a6bed1698296d89914249ffeb59cc87dc32f9091eec2390b0f56c09fee076e877e5b9ff42c8b37e57f567ee4bec920938a55470&pst=1669899572&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (3124)
Hash 5d4ca967b2afe011c16e80db2ec68887
587be81ad2fa959fe6bc98a6d5fed3c1b5554455
642dc942990fa5e2a7bca5c8d4d84b188e4b44940dfc5f6466427b43d9b44999
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1209464270414.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ugaromix%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&tz=0&dev=e&res=12.1053&uuid=&shu=13bdeb6486acdf171ef0ecb013eeaa538abaaf60740f1fc68fab81291c3212089288567a21c70a9e1d36e117728a6bed1698296d89914249ffeb59cc87dc32f9091eec2390b0f56c09fee076e877e5b9ff42c8b37e57f567ee4bec920938a55470&pst=1669899572&rmtc=t HTTP/1.1
Host: yearbookhobblespinal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Cookie: u_pl=15842260; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTg0MjI2MCwiayI6IjdhMmZhMzU2Y2M3Nzk5MDBjODYzYTUxZTgxMGZiZmNlIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo2ODAzOCwicGlkIjo1NTg0NiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjoyNSwicHQiOjQsInBrIjoia2VkZ2llM3giLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cDovL3N1cmVmYXAub3JnL3B1Ymxpc2hlci91Z2Fyb21peC8ifX0.tgM8p9KWPZDpstWJWxGyFjTbywsg_bkT2JqrGxFgIXM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 01 Dec 2022 12:58:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Set-Cookie: iprc5920011351e66a6daef6e97f5ecc4386=3569676; expires=Thu, 01 Dec 2022 16:58:32 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 02 Dec 2022 12:58:32 GMT; secure; SameSite=None
uncs=1; expires=Fri, 02 Dec 2022 12:58:32 GMT; secure; SameSite=None
pdhtkv25=true; expires=Fri, 02 Dec 2022 12:58:32 GMT; secure; SameSite=None
uncs25=1; expires=Fri, 02 Dec 2022 12:58:32 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 33b05fc20a30e0de21f75933b3b6780c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3c0282fb1989711e4a48dce935bf7813
30bed8a42fc820e4feb64bd22ddfefe120889014
81e304f070d6b7aa4dc67c727523578cd18a665a5cfe674a3b1391f3f39fc11a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81E304F070D6B7AA4DC67C727523578CD18A665A5CFE674A3B1391F3F39FC11A"
Last-Modified: Thu, 01 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14078
Expires: Thu, 01 Dec 2022 16:53:11 GMT
Date: Thu, 01 Dec 2022 12:58:33 GMT
Connection: keep-alive
a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2C3d-graphics%2Cblowjob%2Cboobs%2Ccumshot%2Cfacial%2Cfingering%2Cnude%2Cpussy%20licking&s1=%25subid1%25
200 OK 186 kB URL HTTP/2 a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2C3d-graphics%2Cblowjob%2Cboobs%2Ccumshot%2Cfacial%2Cfingering%2Cnude%2Cpussy%20licking&s1=%25subid1%25
IP
ASN #24940 Hetzner Online GmbH
Size 186 kB (185524 bytes)
Hash 1bac73ac6a434558f24606a014a1ba7c
c142cf447cf7edd0b0ad2315d896607c53622200
729199e8480adbde1680f9cf7101131082a5f63e55521df3fef0743d183191ed
GET /api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2C3d-graphics%2Cblowjob%2Cboobs%2Ccumshot%2Cfacial%2Cfingering%2Cnude%2Cpussy%20licking&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=bWphN56sFPsFoGQkxXYV; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=498259
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=498259
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (417), with CRLF, LF line terminators
Hash 8454c2765c925026c9fef4a3f6c1f61c
26ab2199485850bc9afdd831fd257d8afb025700
9c74ab32355f87af27ca588c0580af96e75d93300d1f8ade43446e7cda17065b
GET /adshow.php?adzone=498259 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=27d72a6b788a50dfb5675d0870c37b5f; expires=Fri, 01-Dec-2023 12:58:31 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps53545=1; expires=Fri, 02-Dec-2022 12:58:32 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjE1MDM3Mzg7aToxNjcwMTU4NzExO30%3D; expires=Sun, 04-Dec-2022 12:58:31 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 04-Dec-2022 12:58:31 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/network/user124984/53545-1667326246-0419794001667326246.png
200 OK 33 kB URL HTTP/1.1 ads.juicyads.me/network/user124984/53545-1667326246-0419794001667326246.png
IP
File type PNG image data, 160 x 600, 8-bit colormap, non-interlaced\012- data
Hash 0c31734ab5fc0dde8b4ef0f4d8e4c624
7a054b274952ced7374a096145369836ae604080
9ecd6616a04afad24774b42cdbddb7d32477da823060444c29ea0a6874e542a7
GET /network/user124984/53545-1667326246-0419794001667326246.png HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 12:58:34 GMT
Connection: Keep-Alive
ETag: "1667326246"
Cache-Control: max-age=31299451
Content-Length: 32727
Content-Type: image/png
Last-Modified: Tue, 01 Nov 2022 18:10:46 GMT
Accept-Ranges: bytes
X-HW: 1669899514.dop002.sk1.t,1669899514.cds201.sk1.c
adserver.juicyads.com/adshow.php?adzone=499390
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=499390
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (366), with CRLF, LF line terminators
Hash 672b923bf6a3232efee59fe8b287508c
52cdea0a2b129ba26104e676b288b805e2329bdc
34099af13576ad9b01eeae9004e91f6c91faf6b63157b05250cadad7643df7b2
GET /adshow.php?adzone=499390 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=27d72a6b788a50dfb5675d0870c37b5f; expires=Fri, 01-Dec-2023 12:58:31 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YTowOnt9; expires=Sun, 04-Dec-2022 12:58:31 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 04-Dec-2022 12:58:31 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
200 OK 284 kB URL HTTP/2 ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 284 kB (284264 bytes)
Hash 94eeda124cd4fd45a6ca4a7f0d672cc0
2c614d114dd89373a06a8823c4973f97b6120736
4a28e5c786dab8824c53af0d6543b86f58527139584fd50e41b97a5e917dfcc7
GET /ads/user161341/ad1266795-1658474854.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:34 GMT
etag: "1658474854"
cache-control: max-age=20111569
content-length: 284264
content-type: image/gif
last-modified: Fri, 22 Jul 2022 07:27:34 GMT
accept-ranges: bytes
x-hw: 1669899514.dop012.sk1.t,1669899514.cds262.sk1.hn,1669899514.cds261.sk1.c
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669899508300///-8/369/369/369/369/369/369//380/477/624/495/1793/1794/1832/4689/4689/;ni=;lvid=1669899510384%3A1669899512994%3A2%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga-ym;visible=true;_=0.7132853178654663;e=RT/load;et=1669899512991
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669899508300///-8/369/369/369/369/369/369//380/477/624/495/1793/1794/1832/4689/4689/;ni=;lvid=1669899510384%3A1669899512994%3A2%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga-ym;visible=true;_=0.7132853178654663;e=RT/load;et=1669899512991
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669899508300///-8/369/369/369/369/369/369//380/477/624/495/1793/1794/1832/4689/4689/;ni=;lvid=1669899510384%3A1669899512994%3A2%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga-ym;visible=true;_=0.7132853178654663;e=RT/load;et=1669899512991 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:34 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669899514:2787143:::; path=/; expires=Sat, 02-Dec-23 12:58:34 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 220289d84f5c69b69a98ebf1262ee973
549c77a2bc9e012d7f61d1950c729064973a6ae3
6539b6217a38fa15acf28b504a2490e5e414163159573141e9300919ad6242fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6539B6217A38FA15ACF28B504A2490E5E414163159573141E9300919AD6242FD"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5616
Expires: Thu, 01 Dec 2022 14:32:11 GMT
Date: Thu, 01 Dec 2022 12:58:35 GMT
Connection: keep-alive
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=510572718&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669899514%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125834%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899514&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=510572718&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669899514%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125834%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899514&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=510572718&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669899514%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125834%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899514&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 160757
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 01 Dec 2022 12:58:35 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 01-Dec-2022 12:58:35 GMT
last-modified: Thu, 01-Dec-2022 12:58:35 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
d.pssy.xyz/t.php
200 OK 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 12:58:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=9e1e00e5-7bcc-4740-b494-5ff6415d7988; expires=Fri, 01-Dec-2023 12:58:36 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=944540557&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669899515%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125834%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899515&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=944540557&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669899515%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125834%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899515&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=944540557&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669899515%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125834%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899515&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 01 Dec 2022 12:58:36 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 01-Dec-2022 12:58:36 GMT
last-modified: Thu, 01-Dec-2022 12:58:36 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=222546980&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669899515%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125835%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899515&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=222546980&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669899515%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125835%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899515&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=423151910&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&rn=222546980&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669899515%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221201125835%3Au%3A16698995111018075482%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669899515&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 7124
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 01 Dec 2022 12:58:36 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 01-Dec-2022 12:58:36 GMT
last-modified: Thu, 01-Dec-2022 12:58:36 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669899510384%3A1669899517076%3A3%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga-ym;visible=true;_=0.6156529443501073;e=RT/unload;et=1669899517074;pvt=6981;vtauto=6696
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669899510384%3A1669899517076%3A3%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga-ym;visible=true;_=0.6156529443501073;e=RT/unload;et=1669899517074;pvt=6981;vtauto=6696
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ugaromix/;st=1669899510093;title=Publisher%20Ugaromix%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b9b15c190fe9ed1c;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669899510384%3A1669899517076%3A3%3Af551a1d8b661a114beb6ed2bef4b2c12;opts=jst-ga-ym;visible=true;_=0.6156529443501073;e=RT/unload;et=1669899517074;pvt=6981;vtauto=6696 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 12:58:38 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669899518:2787143:::; path=/; expires=Sat, 02-Dec-23 12:58:38 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ads.realsrv.com/ads.js
200 OK 0 B IP
ASN #60068 Datacamp Limited
GET /ads.js HTTP/1.1
Host: ads.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 12:58:31 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Tue, 29 Nov 2022 13:18:12 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1669900751
server: CDN77-Turbo
x-77-nzt: AblMCQ14WPH/WCUAAA
x-77-nzt-ray: c0a4cc28b5e4fae3f7a48863714c8b02
x-cache: HIT
x-age: 9560
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald
IP
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Dec 2022 12:58:30 GMT
date: Thu, 01 Dec 2022 12:58:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fugaromix%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1017%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A80494394938%3Ahid%3A423151910%3Az%3A0%3Ai%3A20221201125830%3Aet%3A1669899511%3Ac%3A1%3Arn%3A134202990%3Arqn%3A1%3Au%3A16698995111018075482%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C97%2C0%2C369%2C377%2C1%2C1316%2C38%2C%2C%2C%2C1794%3Ans%3A1669899508300%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669899511%3At%3APublisher%20Ugaromix%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 01 Dec 2022 12:58:32 GMT
access-control-allow-origin: http://surefap.org
set-cookie: yabs-sid=451996451669899512; Path=/; SameSite=None; Secure
i=oM104XPS0qV4TUx21//kxr+p8XtBtrzGf0rsmI/42JUUiYzBW+fZoJuH5N3ouyJDZR7xj7aVd4e7GFNU+vaHUzAypM4=; Expires=Sun, 28-Nov-2032 12:58:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8783528171669899512; Expires=Fri, 01-Dec-2023 12:58:32 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8783528171669899512; Expires=Fri, 01-Dec-2023 12:58:32 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1701435512.yc.1669899512#1701435512.yrts.1669899512#1701435512.yrtsi.1669899512; Expires=Fri, 01-Dec-2023 12:58:32 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 01-Dec-2022 12:58:32 GMT
last-modified: Thu, 01-Dec-2022 12:58:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
172.67.191.234
95.211.229.245
104.21.45.92
23.36.76.226
79.137.52.116
77.88.21.119
52.28.211.11
185.76.9.16
93.184.220.29
135.181.208.216