surefap.org/category/who-framed-roger-rabbit/page/3
301 Moved Permanently 0 B URL HTTP/1.1 surefap.org/category/who-framed-roger-rabbit/page/3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /category/who-framed-roger-rabbit/page/3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2; path=/
Location: http://surefap.org/category/who-framed-roger-rabbit/page/3/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pv%2BWMrD4TnXnHZ3e60OF7nw5t3ZFzLyOXRMsInqlUJb2cvg7KR9t%2F6C94G0bA9Yr1nDBO0KKdEiOvifkAtmbhJty0npk052qKqRxgRB1IL39QJDwq%2FX%2BZyMlKKh47w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7708ecfa5d951c12-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8060
Expires: Sun, 27 Nov 2022 09:04:05 GMT
Date: Sun, 27 Nov 2022 06:49:45 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: max-age=104652
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:45 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:53:57 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 06:19:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1824
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14985
Expires: Sun, 27 Nov 2022 10:59:30 GMT
Date: Sun, 27 Nov 2022 06:49:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: N20tT2kwBXFzjN1o33ClPNZkEFTGzriwv+7bEioBbniqklKu0cOQBqXhTEc82It59/7H2uk8oag=
x-amz-request-id: E624PDR844Z7Z713
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 06:41:32 GMT
age: 493
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/category/who-framed-roger-rabbit/page/3/
200 OK 23 kB URL HTTP/1.1 surefap.org/category/who-framed-roger-rabbit/page/3/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1845), with CRLF, LF line terminators
Hash e8cbefa6bc28da4eb421e24887b102fa
509b5d62d8e89e11dd328c1b1ea48f749751e7a3
08de40644b91be3faf445c9b9d1a4a87bd559cef5cf470c3348fee4e0939c39a
GET /category/who-framed-roger-rabbit/page/3/ HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://surefap.org/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mSgMWs%2FyHYATgPH%2BhFl4yu2bw%2FvonC%2BEMUu%2B6stmHSeLYKHMOt4V76s8WFt%2BUkrkJnIZHtGi3QYYCUfTrsw0wo2fUemRxhXkQUT%2FhjszO0AkXWILvKz7eZfmAJWqAw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7708ecfc0e4f1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
200 OK 626 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 10cbc450720b6e3661dc14177f6095bb
6898cb7b1725a4224a6e7fc6cfcf8dc634065608
2ee55a9a2b2f25dfbad0725e2b44a5ea758516c8589f2f0c2fe8c946287407af
GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VS4BgtMnT4F%2BITUn8fHSFNxrMGSWPtlYNSoRFso8lQgNx92%2FizQF0nuRURnN%2FoSKWed6aH6TG5Ftfj4BNL2MmuLZEQdHvPShGTCxbw1v4MQrt5R5AAjuCfDayOJn%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd6f2a1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
200 OK 1.6 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
IP
File type ASCII text, with CRLF line terminators
Hash 3fcb0d88088f0e55c490573d9283c88a
6cfae6065bab40117fd241c536630c1c934c033c
1f91f493e9731afedede6c0626959993538cf13569434c5d0639273886b04075
GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UVQ8EteKM7am7qp%2FoPN3Oo0Erh1q3YysdB9RuBj9Seu30mKz6mEh1SglEKPZrBtbRurH9RRCgum7iq%2Fy1AivBBTQ%2BK7ystvJZmA7lYSwi5bEHvPp9OO6OtzEcpNtSA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd68b3b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
200 OK 521 B URL HTTP/1.1 surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
IP
Hash 2291cad033de47da5bf45d44d3fb1c09
ef8ed11bba4cd1b1f649bbd3d64f79f1702e0851
a67c9a95aebe4a4dd8839404fdd77a4ee64f7a65e5859a1dd2255379ddf80235
GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=afW9i9IhHMfVCSrbS6wdrrJYXdw6zpOmaPR%2Biak9%2B0kUvFVTc5Njfe6pmCJfBopk3e9Lroez%2B0v2N165gM0F%2B5fiz6JKlrMhPDCIyjUa%2F3CqSfhe9lQnmBOiEOjPIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd7ec91c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/style.css
200 OK 6.7 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/style.css
IP
Hash 8754f3c381e72b8d256a0f26b09663e1
3c89aea4ebfadeb9791f9fe7fbe37d57952b3899
f70001c43657a392df622ad888a4cb3a62b4599fac8c6bfba3dd1a365be05646
GET /wp-content/themes/FinanceDesk/style.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 13 Feb 2021 23:55:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kgkCofd%2FKOcwg%2BJGuxMRkjrhbr%2BMuuEYZLAQSqNomJeC%2BJnaFjoHI6Vh7Ykj5NauoaYM%2BYmfvDvd0D%2FBnK78gfYZAYFD6Surt2qfYcWYjlU89weShpXEHMqhyei2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd7f8fb4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
200 OK 4.3 kB URL HTTP/1.1 surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash acceec62f949a07f1d1e07d4e88c0b76
b19d22f7b838357798be6a17ad9f30b4f114c41e
bbed1144be64bc962ce6ae0e94a8176e566ce7b3bfea999419de8da948b97219
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EUq%2Fe9GIDgVCotRsApKUfdVQLAy2LHEZUSY5QeLw5hE0r4UU8KHJSq0EWG5evhn8xwMbYmZDyaNjLYh5XB3qaRBqfgSbAxWVwMp95%2FFm1kETml7Bm%2FGz5wOtCPaRJA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd7f91b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
200 OK 489 B URL HTTP/1.1 surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
IP
File type ASCII text, with CRLF line terminators
Hash c8ad5eb64f1140cbe2df28519b376aa2
2782b2ec1b9dd5f9a25eec3b2f7f53de9a3b83c0
766695e386f4d4860ded979bf96717fa000ba7a1da95d900a48f5ddbeff95344
GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2FBnF2yFxC9vnLxgWsmiK9CEY1ts0Vk4tQhySvXiPS6jvQLDw9WE%2B0BwyF7Kx%2Fg2u8V2s29Oswf2y0iMBLKO3Ly%2FEmsURm6LAwGObAWQBMZaoQmyCAz3ZgmObCZcxw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd7f351c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
200 OK 433 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
IP
Hash c459cce9b7bfe8874065f27071c0fa5d
9c48040bd8aed19832c1c6093ddb4d4adef71bda
6b41fda0c20e0aa799c788122491afb3ac541bbe574f4e492d13168a8b2d42ad
GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0LDNayy3W0ebBfCpMO9CKky8os15Il4EZiX84zkbLJGVAVEsCU9yPed3PLMyFmq3kZ4VWL9AzJ3VZqhzEsKBgwI6NhTS7fBpgRBMIL%2F9w1nyJpoLC7dhBOaNYSqmuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd794ffac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
IP
File type ASCII text, with very long lines (10082)
Hash ec17f8a80c23d0b8fc814fcbdb52653e
512c64d495ed700b16d5ccd79a753dd8cfd118e4
883e795f544da6c4b3b39643b9c84aa49d86f0bdeb511de4a790f63152fd89e8
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=08xH0UtSqcu9MP8D5nEdbhBVq%2FD%2Fw5sSdO%2BVkM%2BiVGIg05HykugjQufEDJpSFCgKJhQx524KhugseXlEE0BnPb0iZeGv9l8%2Fp0NN6KDPQHjM7lVJR9T%2FiIMKjwKv7g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd8ed01c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
200 OK 464 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
IP
Hash e4a982df8ef82dfca6e739af2f2c70c9
0ec97ae743cb03849eee9c6f1c0539eec7c737ac
c9f369c77f62349d1a42f1e9ed7b3bd82c29ac23a13cda519eb9cb79689271a9
GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N3IfGYb1oraWa%2Boub4L7w2tyXuaxg%2BmMdgaJM%2BSFDausPi9qi6a%2FEFmb8Naog8GkN46aG%2Btjh64ouTH4JrtaXLLDh6%2BOXEs2EM5yisZqfPCjg401a6Mzw2BztVyAtg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd88c5b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
200 OK 1.5 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
IP
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a0485UorXXmkES0Bm7F00oJbFAs436jvWeufY5TgDwR1XlryYOxUs4Q2l2gGgYhKlMOsvL2eaZAIescpErn85JvMHDuX9yeZP%2Fj7X4K24U75a7ovjcA%2FI6kkteufXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd8f3c1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 2f89b08855471c7476435ce0bec33ba7
970533f152623df03b5fc6fb793b21889e4e0349
d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EnBa3R2kxGRa9gpDWpCGxmLlFaHBjrqf8H%2BWcjRYHiN0SC5hWI06tHYy7k%2FuLE2VY5ElDU3N%2FmjUtwsVKfwVyMeJ4L8EReQqAHsyVQ8ad%2FxmE9UM%2Bpon8K2FZqh2EQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd8f9db4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 9805483db0b3d5fd0639186799348f34
eb28f7ec752038cbd9425c66b54c339ad1236695
9dca4af372f7b1d8d1af5a3c18ed6a827e4f8f358e8404b64fa7a2ff961b5c60
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8JwtQ83v2AVrC2XeJFsVANUF61O14uaLhAHWj3xRgXc%2BgTPlYqAT85IDAcL0B%2BUqyBSowJEURBPQt%2BhZRehfVWRolh%2B1HI9P1XZFQmhtCE%2BygesCRDVv3LzDA1VhXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd8f9cb4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
200 OK 831 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
IP
Hash e9dddc3f35ae0107e1cf0cf680a251a7
26e702e6ed363dbd7508cdfaebfb3c37b51e966b
3c114642de150576617c3e8c9a5ca94d0f351e0d653a069bb269c444fdf80bfd
GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=js0%2B%2FwsijAnDhDnc7oM9ivXz93aWZdBP1o%2FtqmUleeVQPslfiAmPohgFxsQVVK3s%2BDmO1%2BTF%2BCSpuSlYJ%2FJmtg2V1UXm8uiOts8PbfCkPH%2F4xSITqDnzdrmPRMJylw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfd8956fac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.tapioni.com/asg_embed.js
200 OK 35 kB URL HTTP/1.1 cdn.tapioni.com/asg_embed.js
IP
File type Unicode text, UTF-8 text, with very long lines (37787), with NEL line terminators
Hash c5e4bf53a311eb80ad26d997232e65fd
32473a1f1e3979d8f817db99df9464ab797f5304
b6a7428d32f7132b671744d4e408b94adbc8036fda68aeab84b65373da343101
GET /asg_embed.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Fri, 04 Nov 2022 02:06:59 GMT
Last-Modified: Tue, 01 Nov 2022 08:26:05 GMT
ETag: W/"6360d81d-1d0bc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: YmbHJlaURSfT1PXBEqWok6wzgCrWneFJAAWMMTsLkAP4GwypH02ZWw==
Age: 2004166
surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
200 OK 748 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
IP
File type ASCII text, with very long lines (516)
Hash a916ec8951d8cb10ee6fdfecaa3eae84
0f5ed720b36bf6d0474bfdea0fe97ce2f4c28296
eadd127040367bb43fe787cece1d4e624cb6933c31e20b8b73611a79bdd3b15b
GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mXpcBWOmhPia7o%2BuoWCV%2B7%2FCmAv2hmHr7xlFAX981jJRA9NOAcHUNxo9awRLhDNUDio%2BP%2BVhf22GVOEf6Gh1%2B6QF0%2BxYfrM9ryb4P0P%2BoqAiNvS7%2BrKByLnvozPsOA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe1803b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
200 OK 457 B URL HTTP/1.1 surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (1087), with no line terminators
Hash 1fa25d83bb5be8564841713f48e94332
dc5921fc9171ae8f69a52e1f00ea1c43ae3ea8d2
da9e1e7235fb597df5fc429718a771bc8431810ea07f7d2c40dba0b56ccd8cf7
GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BtJoxQlIagg2ZMIjs6bTk39vitxf7%2Fs7cf0l0QnwUw1evnem3wHDaLCP35q4Mj9OUS5jcTPot%2F7KfraQhp0rwzggr0Qo%2F6fA%2Fzq16rza7TUF8re4qilIpU1PdPMVcg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe1804b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/ljekdimdzcz.php
200 OK 11 kB URL HTTP/1.1 surefap.org/ljekdimdzcz.php
IP
File type ASCII text, with very long lines (10335)
Hash fc28df155a4f20f37dd7744dc4b59d5a
7a36425e83db1b58cf593d8e0a6d539094c0e86a
219139cc30dc840f96907563d26091fe59b11fbd357f923a2a8b0270ead273b0
GET /ljekdimdzcz.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=120
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bTo9C1c2SGdBcgXejSSEXpYFslCqH9EmdhtaeUREUfJkXHWa2yaniaeBh8GUa1bf9a5M9N6gXx0TxlMkQ0vncSgLNElF0tOMK7FfPSomkmI3WDfFHawhgGl0AZ8kSA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7708ecfd9ed41c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 1e483d25aa3a2c769c7e680eb75b52a3
2dfe501fc81cd6939bd014cedb41af85b4e3c7af
be1b058eb9e3fef483e425718456e8bc58fda7d4a81de0d6e794b1e03dfdbd01
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 399
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rsVmbB%2F3gNHl26Qiq0xDnt66xDEjnyq%2Bh8tXXwJ3NyLtIkMRklt5Az7Ym1bF1zxXVqDAC166gFkGrAYFurqTIMkT4psuaBMjIo4wDm%2Fi8TAHdLl7zDCiweLG5O52yw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4f881c12-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
200 OK 65 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a80cc46f72d3fb004dbe75ccafd776b
e6e9764bcef6edc5242d61e7b9f740115a57b9cf
41ded72e1e0bdf063ac95b32f15599a553f244fd0e300d1997e0caf3e76142d2
GET /wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: image/png
Content-Length: 64971
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xvs0M4KQbYAVJESFI8NsFbsen29AZfjGVb3V85k%2FV8qRvBw0tfLDXVyiXXZ0eMwcrySgil5KrUCZd%2F9ZoLpx%2F3OJAbAfEj4LGkM7To95EnGrbfqWDU7DBg3r%2FS3xZA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe7f321c02-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/11/surefap.org__Photoshoot-001_Gotofap.tk__2016923957_1630392450-287x400.jpg
200 OK 31 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/11/surefap.org__Photoshoot-001_Gotofap.tk__2016923957_1630392450-287x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 287x400, components 3\012- data
Hash 1d40679e911a66bfd367525bb2f7b89b
27448e035aaf1517219a689d78bf2c178ac1a5f2
dfd4987cc0e7a12f692b37b6efeebf0b1adead21e7f449332f8f114dfcc782b9
GET /wp-content/uploads/2016/11/surefap.org__Photoshoot-001_Gotofap.tk__2016923957_1630392450-287x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 31217
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 17:01:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M5VhIi%2FPbvBSwpD1aYXMTJf2gF%2FqHh2zcdaMa9nJ6%2FVZJ9nAZ9crd05jDHsCnhEcKnqJirbEfCUVVqyVE9JWwKDaxdSCWFWCcfbjpvMa1iB0mIS%2Bj12479qtjIhdKw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4827b4ff-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/05/goodcomix.tk__Men-For-Jessica-2-list01_1858208963.jpg
200 OK 239 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/05/goodcomix.tk__Men-For-Jessica-2-list01_1858208963.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x837, components 3\012- data
Size 239 kB (239207 bytes)
Hash 642cb1251118ce558ee95647e5a8419a
1d5da91aa8a2d39209e0a8a9da1c409bc7ffa059
95665d9ca3fda79ca88796fac4e062927a567eb91ca21d04df5507f5233f4f22
GET /wp-content/uploads/2016/05/goodcomix.tk__Men-For-Jessica-2-list01_1858208963.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 239207
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BzgIv%2BKv21EK980MsY%2F4ksBoHXzyPGvEf6ZBb%2FAHX7W%2FWWKRJZDQdvdg%2BCJPAIBW8zy%2BTGQpQRsDe6W8s5EgrJkLfPya67fMhwxL4rwr0iq2NPKoMOcN2%2B3ibcxcHg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4f8f1c12-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/09/surefap.org__Roger-Rabbit-Fucking-Blonde-Jessica-01_Gotofap.tk__73764250_1277668556-300x400.jpg
200 OK 26 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/09/surefap.org__Roger-Rabbit-Fucking-Blonde-Jessica-01_Gotofap.tk__73764250_1277668556-300x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x400, components 3\012- data
Hash 05161adaf04f483680b0dd3a2245fbae
57c6e3f8841a4dd1ad9b529058cfaa6c85e27b56
1100fa587ae0b913195c7f6ce5a85935fb1a029b3d53e6ae1988a17bea1e40c3
GET /wp-content/uploads/2016/09/surefap.org__Roger-Rabbit-Fucking-Blonde-Jessica-01_Gotofap.tk__73764250_1277668556-300x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 26266
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 17:05:51 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=brhg6UEYsN8RpLOjpvoaOOQJYr4QuO6bn8H6M7htaBatQN02Z6ONT2yUO5Mae0YKewISbekeGfDeSygcuVkRnL5E6Ymr5BuhQS8HxcmPjzyt%2BuY7b%2FhjgEwW9ynY0w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4951b511-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00546d98c2b3d905ccfb3f79d626cd30
ecb9af8e09b4b597d977fa3949a6e1f208c3cd7e
bcfebf5ef069603e03fff9d4797c7d209b8d0c03af24379ca94e5ec0b667fd89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCFEBF5EF069603E03FFF9D4797C7D209B8D0C03AF24379CA94E5EC0B667FD89"
Last-Modified: Fri, 25 Nov 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4368
Expires: Sun, 27 Nov 2022 08:02:34 GMT
Date: Sun, 27 Nov 2022 06:49:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00546d98c2b3d905ccfb3f79d626cd30
ecb9af8e09b4b597d977fa3949a6e1f208c3cd7e
bcfebf5ef069603e03fff9d4797c7d209b8d0c03af24379ca94e5ec0b667fd89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCFEBF5EF069603E03FFF9D4797C7D209B8D0C03AF24379CA94E5EC0B667FD89"
Last-Modified: Fri, 25 Nov 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4368
Expires: Sun, 27 Nov 2022 08:02:34 GMT
Date: Sun, 27 Nov 2022 06:49:46 GMT
Connection: keep-alive
4tymode.win/images/2020/11/12/e3cd5355d2c7230c6fde18d78aeb9804.md.jpg
200 OK 18 kB URL HTTP/2 4tymode.win/images/2020/11/12/e3cd5355d2c7230c6fde18d78aeb9804.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3\012- data
Hash a83a582f3678e24b7b383735832642c4
827b4b48634e8a9714f7e8b859121a78f8081c26
34a94b9a6c6a2ea9fbfe26375d727d12d0d2cf7a8c82ff1a4e4ae3d10aecdd47
GET /images/2020/11/12/e3cd5355d2c7230c6fde18d78aeb9804.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Nov 2020 13:59:45 GMT
accept-ranges: bytes
content-length: 17639
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/17/5c8ad7e14593e932cf82bbbfbc434e97.md.jpg
200 OK 18 kB URL HTTP/2 4tymode.win/images/2020/11/17/5c8ad7e14593e932cf82bbbfbc434e97.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x163, components 3\012- data
Hash 00cd6bf0545d35d6671968d3efb0d3e7
fd343aab5bcb38ad22c2b8a530d1517916eecb5b
dfa68266445aec0fbf03c70649392590afcd94b80af92528e7052adecbf96292
GET /images/2020/11/17/5c8ad7e14593e932cf82bbbfbc434e97.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 17 Nov 2020 18:45:53 GMT
accept-ranges: bytes
content-length: 17631
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash eb5d17155709c2ff55fa01927ed741cc
509219673258175b86f251ca9376be5b1057e5cd
b3fb28c3088eb45ca6b62f884f197dd8a97be856ef650082df560e2bac28c78a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 20:53:04 GMT
Expires: Wed, 30 Nov 2022 20:53:03 GMT
Etag: "509219673258175b86f251ca9376be5b1057e5cd"
Cache-Control: max-age=309196,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7708ecff3a711c16-OSL
surefap.org/wp-content/uploads/wordpress-popular-posts/68849-featured-269x170.jpg
200 OK 13 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/68849-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 269x170, components 3\012- data
Hash bb0e895f6424729b4a693b1c6aaa9567
94108ff121c6dabe1cfebbb58945da1272b3cd70
cd0005986adf28b16b8779b73891a85c0a6ebb68c62a1d68a37967df3ae74e6b
GET /wp-content/uploads/wordpress-popular-posts/68849-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 13107
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:46 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3325
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kJQ0q37VUuManUG1%2FrrU%2BTxq9qn8%2FCdbaa5Za3alZ1R%2BjUL164xlDyPyF%2Bae0Nqsl3doBn%2F0GThICdd4%2B08BoYcJDWy982f8J9UsGbN8WFyR9c2IfJZnXYyc%2B05GIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecffa8df1c12-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/08/surefap.org__Jessicas-big-tits-1_cr_Gotofap_3203551102_444385956.jpg
200 OK 412 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/08/surefap.org__Jessicas-big-tits-1_cr_Gotofap_3203551102_444385956.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 1077x800, components 3\012- data
Size 412 kB (412083 bytes)
Hash 941c7ed8d1809673fe23bf114256f63d
baaa25218c0b119f5e79c9643e01b96b97562bf4
9c41ec57185749f411d764aa20c4e58c6a936c828370a94f58b8dd0051415f99
GET /wp-content/uploads/2016/08/surefap.org__Jessicas-big-tits-1_cr_Gotofap_3203551102_444385956.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 412083
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:35 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U44eZng8%2FFJfJ2Q3tQgeQ%2Fd4n3jN%2BhjdHhcEkiSB9f5FYt2iCFIxuTp%2BELvtDlVvCl%2FPXFDs09l9We%2FJbDm2N2FZAk2nN%2BsvUP0izKX6kVqbC10gERjVhqSJA9%2BJQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4978fac4-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2019/10/29/d9f95320b7bc005f280dd8ba2a71ac1c.md.jpg
301 Moved Permanently 0 B URL HTTP/2 4tymode.win/images/2019/10/29/d9f95320b7bc005f280dd8ba2a71ac1c.md.jpg
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/2019/10/29/d9f95320b7bc005f280dd8ba2a71ac1c.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=e8bb0fdcf1534017d772c6a0fdde6089; path=/
location: https://4tymode.win/login
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2019/10/29/cd6584797ff0fb1164208ae4fa3f558e.md.jpg
301 Moved Permanently 0 B URL HTTP/2 4tymode.win/images/2019/10/29/cd6584797ff0fb1164208ae4fa3f558e.md.jpg
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/2019/10/29/cd6584797ff0fb1164208ae4fa3f558e.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=1e2ffaedd88cdfd86a3271fa3df146ec; path=/
location: https://4tymode.win/login
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2019/10/29/ca235a0177e352f2c36690d47bddfbc9.md.jpg
301 Moved Permanently 0 B URL HTTP/2 4tymode.win/images/2019/10/29/ca235a0177e352f2c36690d47bddfbc9.md.jpg
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/2019/10/29/ca235a0177e352f2c36690d47bddfbc9.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=7048cdeaeae8d1179e9c4bbb48e4641b; path=/
location: https://4tymode.win/login
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/12/1775582b05efc86e89701bb54e11d7dc.md.jpg
200 OK 24 kB URL HTTP/2 4tymode.win/images/2020/11/12/1775582b05efc86e89701bb54e11d7dc.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x400, components 3\012- data
Hash 810ad5d99508c22a4ae11c096e2723ab
1e505e7c62019bc80373342d287443d2c8ad8954
39187eb1e63acea04ab4e5375f0a33e86c6043226edf85bd50dc2d46d55dcdea
GET /images/2020/11/12/1775582b05efc86e89701bb54e11d7dc.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Nov 2020 13:59:45 GMT
accept-ranges: bytes
content-length: 24468
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/12/ceed21b4affe38a5f7524e1366a3be0b.md.jpg
200 OK 27 kB URL HTTP/2 4tymode.win/images/2020/11/12/ceed21b4affe38a5f7524e1366a3be0b.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x400, components 3\012- data
Hash f61a77a4b7c14563f2da729fd0cc03cb
9ac5593618607e86cb48bd9e3cd5e71f271dca1d
c260882678b36410e35d927b9d297d0ba9823ce2c87bb1a4ec4f6774e7fd87d4
GET /images/2020/11/12/ceed21b4affe38a5f7524e1366a3be0b.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Nov 2020 13:59:45 GMT
accept-ranges: bytes
content-length: 27020
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/17/dd87f36a6940534098c15fe6b7d68b8a.md.jpg
200 OK 45 kB URL HTTP/2 4tymode.win/images/2020/11/17/dd87f36a6940534098c15fe6b7d68b8a.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x444, components 3\012- data
Hash 16655d14eb01d268d6dbf8287cf6c2ff
79c28b44ed26c7055bc9ce4273d8612ddf8db84b
5b6607ff5d255082108cba9c4829a2c7e0492b3666f789bc4712b68f85d21d3c
GET /images/2020/11/17/dd87f36a6940534098c15fe6b7d68b8a.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 17 Nov 2020 18:45:54 GMT
accept-ranges: bytes
content-length: 44814
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/13/b00a1e8dbec5a7a5561fd326ff720677.md.jpg
200 OK 43 kB URL HTTP/2 4tymode.win/images/2020/11/13/b00a1e8dbec5a7a5561fd326ff720677.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash f0cff361200de9dc3a1baf80c92b01af
f9ef2a677d2ea6d97904c4e2e361e6d48190e7d9
a521c78e1b8eb3e6b2dbbfeb4e1e40455f0bea4dd6f7c74d89af76f495642302
GET /images/2020/11/13/b00a1e8dbec5a7a5561fd326ff720677.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 13 Nov 2020 20:47:07 GMT
accept-ranges: bytes
content-length: 43349
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
200 OK 270 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3\012- data
Size 270 kB (269711 bytes)
Hash d30a4392660ba150ffcb590ecf3b959f
917018a795e409303eecc5e560c2cc4db2785978
5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa
GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 269711
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3325
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Skd%2FXOIJeHq448C1b2cN5Fm51n5tWsbfx3yl8XnW71gerV6R6t%2BGm0xoY%2BoqF7kzLtvWl288TYy4HajXix6fuUk6p6rf8gofIgNUx3PMhXqXjTAUSUnJEVDSRBtbvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed002a09fac4-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/11/17/ecfd6751a1780e6d8620e0a53620f1d5.md.jpg
200 OK 31 kB URL HTTP/2 4tymode.win/images/2020/11/17/ecfd6751a1780e6d8620e0a53620f1d5.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x307, components 3\012- data
Hash c5c5f1c6969ca218f4d1e2cb7ab3840e
3e4de6a5b026ac9fb5a132ac90b03d3fe8b7c63b
60bd779a2e2aed38901bdff14e2e2c96f9056cb35143fb2edc3c5e1d8da921cc
GET /images/2020/11/17/ecfd6751a1780e6d8620e0a53620f1d5.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 17 Nov 2020 18:45:54 GMT
accept-ranges: bytes
content-length: 31353
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4tymode.win/images/2020/11/13/f20e19e2e439bf17bf213d7e4734809c.md.jpg
200 OK 47 kB URL HTTP/2 4tymode.win/images/2020/11/13/f20e19e2e439bf17bf213d7e4734809c.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 4ceddd0598870d81be65aba2efa48222
378dffb4ee1592ecbc77812f3dd6a88394edf8de
e35784932af31d5b49006b6922c217df24493da91cc8fab5a09eeedf470954b9
GET /images/2020/11/13/f20e19e2e439bf17bf213d7e4734809c.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 13 Nov 2020 20:47:06 GMT
accept-ranges: bytes
content-length: 46825
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/13/d537a87992cff2ed923d9d46e674c8a8.md.jpg
200 OK 53 kB URL HTTP/2 4tymode.win/images/2020/11/13/d537a87992cff2ed923d9d46e674c8a8.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x395, components 3\012- data
Hash bf1311166f76f045f32b46d73f0109ed
23da017be09a6c270c37473b1a41686a1798f937
d82a60695ef6f3aa18a58be5bab5959ba163fd3f5ea2f5f38aa66222ab55c43d
GET /images/2020/11/13/d537a87992cff2ed923d9d46e674c8a8.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 13 Nov 2020 20:47:06 GMT
accept-ranges: bytes
content-length: 53385
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash cc6b38cbd53e741f39dd0113edd5d5bd
292e0b97760227cec4cde8f48f9a771bc95264c5
8c26d3f844d543b87318273f6792b33e128f845b7e0e3c4a036e739ea9243a47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=144329
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Etag: "63829953-116"
Expires: Mon, 28 Nov 2022 22:55:15 GMT
Last-Modified: Sat, 26 Nov 2022 22:55:15 GMT
Server: nginx
Content-Length: 278
surefap.org/wp-content/uploads/2016/05/goodcomix.tk__The-Best-Choice-For-Jessica-01_2973342886.jpg
200 OK 464 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/05/goodcomix.tk__The-Best-Choice-For-Jessica-01_2973342886.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 768x1024, components 3\012- data
Size 464 kB (463586 bytes)
Hash 0a584095b9f4fa0fbdcb0bc796846255
df3873228d2e5dad206e2d7ac312e98b5d7f3b6e
df653cbd8424770e1fca095b79cd9422e8ff8d577d93fbe3bba1b7b00712b4eb
GET /wp-content/uploads/2016/05/goodcomix.tk__The-Best-Choice-For-Jessica-01_2973342886.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 463586
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:38 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oFXJFZXt7zX9IKGYRqYtnAzgr0DZoJWDPTZ9fvzZB5fUNEbmt%2B6i21a78dv809bobBp8PqQPQHGm0%2FXTh%2Bw%2BF%2FolmGDg6EqVh9tE8lxaKiVukQYzfwv84hh6Hi1RRw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4826b4ff-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/11/surefap.org__Wet-Jessica-01_Gotofap.tk__212144169_1374712467-270x400.jpg
200 OK 24 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/11/surefap.org__Wet-Jessica-01_Gotofap.tk__212144169_1374712467-270x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 270x400, components 3\012- data
Hash a90431476cd9e24449fedb5df8dade29
2cf9e85be0ef0e76c961b931ef7fabdd8ebe794e
91f9c1e36ee7a432c48dcbb8a52270539117432b4086e35ac63944fb0e12bd2d
GET /wp-content/uploads/2016/11/surefap.org__Wet-Jessica-01_Gotofap.tk__212144169_1374712467-270x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 23527
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 17:01:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aFZgODuxhl3yDc42nJhjgGBInnUEjgY7oB%2F4VflP%2BKwSsu15vw1FgyOE%2FKs%2B9OYnSC17xxhtwxJZ8sqnJDJWcNUN4w%2BrPQwNOxQjDqbwxUZpRc039na09A6mLNe5Uw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecffaa3bb511-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/10/surefap.org__Fucking-Rabbits-Family-01_Gotofap.tk__3346527449_3781988238-300x400.jpg
200 OK 23 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/10/surefap.org__Fucking-Rabbits-Family-01_Gotofap.tk__3346527449_3781988238-300x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x400, components 3\012- data
Hash 87151b51a9901567525d3ff7c3e0d23c
775015837d0ed199a17aed382169bb4262231a3e
28bfdefab7c78c46c311038ab8d1a31ae4438bc9f465db5e2e35f389ee6b748c
GET /wp-content/uploads/2016/10/surefap.org__Fucking-Rabbits-Family-01_Gotofap.tk__3346527449_3781988238-300x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 23217
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 17:06:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=buZK71AT1HYQY41dEJlsLUoVLWxzbiKt7JmboEi7swUwuIDbkZlCHbylUEZMLsAJfRw1tARHXVFyhJA38TN3pyQIpDfWAfRpl9fTVvoYigFRSKTyMFdeSKBj8HyZoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecffa972b4ff-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2016/07/surefap.org__PokahontasJessika-01a_Gotofap_255982345_3576088888.jpg
200 OK 176 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/07/surefap.org__PokahontasJessika-01a_Gotofap_255982345_3576088888.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 600x446, components 3\012- data
Size 176 kB (175513 bytes)
Hash 8522b41c5e175fceb3db583e949bd7b5
df181523e0641fdc4d2266b9f2795f9dace6ffe5
bcea2b8fd247f0021764b9bdaeb7a860319166179db057ab726ddb35f42ccc8f
GET /wp-content/uploads/2016/07/surefap.org__PokahontasJessika-01a_Gotofap_255982345_3576088888.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 175513
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:41 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f1wavb%2BTQklFjj6LwmtZbCmJ0hi0axJuMn40RpTW903FSyUjSD7OkvELlMLnUKzq5veb6%2BFDXk%2F31aX3Z%2F4QNcsDTtiUhiPQ0fqPeTQX%2FH5hm5%2FUMCi5513eT3NsTg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecffafd61c02-OSL
alt-svc: h2=":443"; ma=60
cdn.o333o.com/asg_embed.js
200 OK 3.5 kB URL HTTP/1.1 cdn.o333o.com/asg_embed.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash b7817d72dc32336f5f3bcd80a6c8b61a
7bf69b7dbd7fb81bdcdcd9f79b205aeca9b5f920
11e0c6885ee787d163dbdd7f0fb451a60fd15bffb1d0cb2ca121ba8c8bc54852
GET /asg_embed.js HTTP/1.1
Host: cdn.o333o.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51578
Content-Type: application/javascript
Last-Modified: Thu, 17 Nov 2022 11:24:59 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "63761a0b-c97a"
Cache-Control: max-age=315360000, public
X-HW: 1669531785.dop009.sk1.t,1669531785.cds239.sk1.c
Access-Control-Allow-Origin: *
fonts.googleapis.com/css?family=Oswald
200 OK 773 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald
IP
Hash b968034e5db1320a23b3ec6bc05225c3
6d42d1ed742c6e827a6294f88a5d9ebd286040eb
bbf202a46edb7a3f3e78204b56c37913a554429ea22c566f97cab9c8048c04bf
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 06:49:46 GMT
date: Sun, 27 Nov 2022 06:49:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
200 OK 3.6 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 11264f0bb61fddb34a8899875cd91a1f
eab9aa3bf59084ed93553b47a3b1583852a39fc8
b567893a1ae9ae3fd3671e6bde1338f26cc3f6d79a32bd00f33158d5f7b042c2
GET /api/spots/303160?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=2P6bBhjl8PChFMgsdvYB; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
surefap.org/wp-content/uploads/wordpress-popular-posts/113202-featured-269x170.jpg
200 OK 13 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/113202-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 269x170, components 3\012- data
Hash 7cd058f4e4ace502b322cfeab2cf0f2e
d9a00bb100b47c2e901a9015221f2bf808bf8104
e92409ad2b42f626d837454abaa18eae58dab1317d1605962517eff353741c43
GET /wp-content/uploads/wordpress-popular-posts/113202-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 13067
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 04:40:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3325
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AHZQ%2F7W46JvMrbd%2B97bvVUh2j%2B%2Fxhm6dUUjG7%2FyXJjbOfFtWv%2F481221WBdHTafp88DW6FMaD%2FOxTtaqnnLkZL4TReLm9QUrRgi6PnmtKJSuJcvCPXlymqENzoPK6A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed00c9f1b4ff-OSL
alt-svc: h2=":443"; ma=60
img25.imagetwist.com/th/12561/vyivu0sn9pmz.jpg
200 OK 17 kB URL HTTP/1.1 img25.imagetwist.com/th/12561/vyivu0sn9pmz.jpg
IP
ASN #43350 NForce Entertainment B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 250x185, components 3\012- data
Hash 65690ca33b77c2046e35dc1081b36ee7
db5bde8d719cf12b3faa5ecf6b47fdfad45c4aa6
83b7a1d592d0d699796fa5b4264ec568f146d2c73396ef9ba8a2e318c6c2ff28
GET /th/12561/vyivu0sn9pmz.jpg HTTP/1.1
Host: img25.imagetwist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Accept-Ranges: bytes
ETag: "3717175994"
Last-Modified: Thu, 18 Aug 2016 22:15:56 GMT
Content-Length: 17086
Connection: close
Date: Sun, 27 Nov 2022 06:49:46 GMT
Server: lighttpd/1.4.54
surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
200 OK 8.6 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 269x170, components 3\012- data
Hash dc9802a6d8bb38c758f2e602de516de3
60809f2f96869416259893a43c91fe392f3a3a4d
789981c56beb944e93e129833632dd5b53e97012360fbf0f7b4e77c399996c05
GET /wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 8613
Connection: keep-alive
Last-Modified: Sun, 09 Oct 2022 20:09:59 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3325
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=20oR0S8KAoWLAJDY%2BwN5HMWo7l8dmDKPUF3FJpPpbIegTD7LUTqd8EhXgKbVv%2F%2FcHKRpfFeUu%2FVy3nYau76Zm2UMVa0G0uM7jCJjaB0JnF39ymjlIRpKclOogStdsg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed00eb43b511-OSL
alt-svc: h2=":443"; ma=60
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 8eff420c466d644f3d8a82536cbf1dec
763e58048b0ddc3209e0111d60b49b0fce6fc0ab
37358fa0b78c0c97af6229e861bc59c7d17d04ff16e58860166f6a56d40fa82e
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=vmpJEUiLqvUBnrGlqIQz; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
a.shukriya90.com/api/settings/23307
404 Not Found 9 B URL HTTP/2 a.shukriya90.com/api/settings/23307
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 9e076f5885f5cc16a4b5aeb8de4adff5
475c848673a3f79fa778f01c2bd5a721d4c41707
e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
GET /api/settings/23307 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Origin: http://surefap.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Sun, 27 Nov 2022 06:49:46 GMT
content-type: text/plain; charset=utf-8
content-length: 9
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash cc6b38cbd53e741f39dd0113edd5d5bd
292e0b97760227cec4cde8f48f9a771bc95264c5
8c26d3f844d543b87318273f6792b33e128f845b7e0e3c4a036e739ea9243a47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=144329
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Etag: "63829953-116"
Expires: Mon, 28 Nov 2022 22:55:15 GMT
Last-Modified: Sat, 26 Nov 2022 22:55:15 GMT
Server: nginx
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 06:08:54 GMT
cache-control: public,max-age=3600
age: 2452
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://surefap.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 23:14:30 GMT
expires: Sat, 25 Nov 2023 23:14:30 GMT
cache-control: public, max-age=31536000
age: 113716
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img25.imagetwist.com/th/12561/vlhogeptzby6.jpg
200 OK 18 kB URL HTTP/1.1 img25.imagetwist.com/th/12561/vlhogeptzby6.jpg
IP
ASN #43350 NForce Entertainment B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 250x185, components 3\012- data
Hash d57cd8920caac67f6712a428a0ba155a
f794e6c19ba6a99a0391e8386767eff2bdbc8d97
a4dc3b63ea354f2ea27731f0430d45d7278b736ff1766d0fdb018f87879763fe
GET /th/12561/vlhogeptzby6.jpg HTTP/1.1
Host: img25.imagetwist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Accept-Ranges: bytes
ETag: "3247432378"
Last-Modified: Thu, 18 Aug 2016 22:15:56 GMT
Content-Length: 18086
Connection: close
Date: Sun, 27 Nov 2022 06:49:46 GMT
Server: lighttpd/1.4.54
nefree.com/images/2020/11/15/53efdac43a1567fa302f7346b1b197cc.md.jpg
200 OK 22 kB URL HTTP/2 nefree.com/images/2020/11/15/53efdac43a1567fa302f7346b1b197cc.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x188, components 3\012- data
Hash f7f788b98e120404ed48b3dc75e45b02
652706b2afddf208685ba39dbe85b9de01b629b1
ed613fa994aff24cfa36dda16cc4cbc7fcd6a97af7310cc444041a40238d26e1
GET /images/2020/11/15/53efdac43a1567fa302f7346b1b197cc.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:49:46 GMT
content-type: image/jpeg
content-length: 21616
last-modified: Sun, 15 Nov 2020 16:05:29 GMT
etag: "5fb151c9-5470"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lI1x7pLurETSV2X%2BRZk1j8VqqFLmdgX5g3b5PcmjQ%2FVOVOzQGaln6gG34wJ18nIf%2FaCkcP3yvuKf%2FP%2B4OcoJ7qSdIFPNr2pinsj3McEIbPnj5CXjRdp1i1W2eo6u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708ed00d9251bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4tymode.win/login
200 OK 22 kB IP
ASN #24940 Hetzner Online GmbH
Hash 758acef244449f0134c8b3c2277bd750
6f81f38cece29954630075e420f7e941de3e431b
3a1635cd77a3149814e832fc54251b43fefaeadbe253e3af1b78af62243e099a
Analyzer Verdict Alert fortinet Phishing
GET /login HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=fa66f029545dc95d7f3fe08dfffb114a; path=/
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
img25.imagetwist.com/th/12561/wp1nyjdrggls.jpg
200 OK 20 kB URL HTTP/1.1 img25.imagetwist.com/th/12561/wp1nyjdrggls.jpg
IP
ASN #43350 NForce Entertainment B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 250x185, components 3\012- data
Hash 59a710910e3dee04dd856b8ca3c101cc
5300914ec89c4f378c20543c7ea993ac1ccce2eb
8cff662e5805202db1d795cabf36331cca078fa183709ed5f5e0837b3607e928
GET /th/12561/wp1nyjdrggls.jpg HTTP/1.1
Host: img25.imagetwist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Accept-Ranges: bytes
ETag: "1838147745"
Last-Modified: Thu, 18 Aug 2016 22:15:56 GMT
Content-Length: 19855
Connection: close
Date: Sun, 27 Nov 2022 06:49:46 GMT
Server: lighttpd/1.4.54
ocsp.digicert.com/
200 OK 278 B IP
Hash cc6b38cbd53e741f39dd0113edd5d5bd
292e0b97760227cec4cde8f48f9a771bc95264c5
8c26d3f844d543b87318273f6792b33e128f845b7e0e3c4a036e739ea9243a47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=144329
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Etag: "63829953-116"
Expires: Mon, 28 Nov 2022 22:55:15 GMT
Last-Modified: Sat, 26 Nov 2022 22:55:15 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 278
surefap.org/wp-content/uploads/2016/06/surefap.org__Jessica-with-two-huge-dicks-2-01_709322360_2225817015.jpg
200 OK 250 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/06/surefap.org__Jessica-with-two-huge-dicks-2-01_709322360_2225817015.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 768x1024, components 3\012- data
Size 250 kB (250250 bytes)
Hash 36137c58f3152322d6c9d742a10d7cd7
b03dee16dd7b2c525f8b66308dde9012572bc6b3
e9cc52a0f9eb54e8718ec363b559925a0f8512cfe58b54d96e49f897fb997ef0
GET /wp-content/uploads/2016/06/surefap.org__Jessica-with-two-huge-dicks-2-01_709322360_2225817015.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 250250
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BfyA2ZkrHScfr3fiHRCdQj5VuoZaaZ7g9FKUy4MxFu6TVBwNWv98reEMKyKXU1cf6r6aXbKb59wkX2jdb3r5xt%2Ftj2k6KpgGsPKrpPvFUnPmyE9vKBp0hscnuDDRDg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecffb8f11c12-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2020/11/15/c900b9bc221271f4d95f9c099bd3099d.md.jpg
200 OK 33 kB URL HTTP/2 nefree.com/images/2020/11/15/c900b9bc221271f4d95f9c099bd3099d.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x333, components 3\012- data
Hash 9407cb0802dd736fbb166fe7357473e1
84a94b5be06bef5c5b1cb1eff708016445b86723
0f44711e43ed5e8984ead98ee7fd024f51dda21ac79491f485da18e4af96f7ad
GET /images/2020/11/15/c900b9bc221271f4d95f9c099bd3099d.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:49:46 GMT
content-type: image/jpeg
content-length: 32768
last-modified: Sun, 15 Nov 2020 16:05:31 GMT
etag: "5fb151cb-8000"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xWBET6IcJQIila7tUwORe6c7RDy36mqyV%2FBgtTTlO9lD2scJ%2FVRJ3J6ui1JmOVvBNmV%2BgnNec0aw%2BIIo2PMqEhT%2FFrJ83ZrskD2hnBIuRt8YgcjEFZjZjheJnMeS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708ed00f9301bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/TsXUKpO4YQ143421-med.jpg
200 OK 14 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/TsXUKpO4YQ143421-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 225x300, components 3\012- data
Hash 5361c892004f00596d21eb307070da76
9a5a0432eee670ef02db678d3d672b117afa71a1
3f435016908bd211b0f9be88476bd4449b8c4462854c6bea7491873bdfbc9e79
GET /wp-content/uploads/2019/10/medium/TsXUKpO4YQ143421-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Oct 2019 19:57:15 GMT
accept-ranges: bytes
content-length: 14429
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/6Q7vd2EdgA997521-med.jpg
200 OK 14 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/6Q7vd2EdgA997521-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 225x300, components 3\012- data
Hash 51fd39ae4b6ae47ee35737cbb4cee115
eff341f3fd09a235b9172b3bdab1c1312ae5d957
d2786b08d192306b24f21951960684dc0e534e4ff4d15e0a0fc2aabcff25d326
GET /wp-content/uploads/2019/10/medium/6Q7vd2EdgA997521-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Oct 2019 19:57:15 GMT
accept-ranges: bytes
content-length: 14463
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2016/08/surefap.org__Jessica-and-Holli-Would-Play-for-the-Other-Team-01_Gotofap_1481702119_3793740686.jpg
200 OK 410 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2016/08/surefap.org__Jessica-and-Holli-Would-Play-for-the-Other-Team-01_Gotofap_1481702119_3793740686.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 700x921, components 3\012- data
Size 410 kB (410117 bytes)
Hash 9dbfe330a049e7e4af9148a57f3c0027
032a35476c3387d1f1e569860d6e1220cbbbdf8c
c080b80b26ad4017a853aacb77b0b9b3e373d6d9a320f33f4e171e3c51b08844
GET /wp-content/uploads/2016/08/surefap.org__Jessica-and-Holli-Would-Play-for-the-Other-Team-01_Gotofap_1481702119_3793740686.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/jpeg
Content-Length: 410117
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:35 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nCsSIdotDYqHn9PELYiXv1M9LemL62pQ5Cub6zAxXo4gzswZF2xz6ZO8OAj%2F8VwRtyGthifa1g75eEwDIL1PenrnCSiMAWv9KRQINoMv7nQhwhCNFihRd8bNRhPy5A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed00ca90fac4-OSL
alt-svc: h2=":443"; ma=60
ayazik.win/wp-content/uploads/2019/10/medium/8oiCEtd15S311297-med.jpg
200 OK 17 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/8oiCEtd15S311297-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x225, components 3\012- data
Hash a41b5723cd28db2d256ccf48962655f8
6361ba7c6606e1e112d9caf0c338650ecae269a1
cf3fa473b7a461a0093682ba5a0bd3d06d81fb06bef2116fdfb3910fe435dd56
GET /wp-content/uploads/2019/10/medium/8oiCEtd15S311297-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Oct 2019 19:57:17 GMT
accept-ranges: bytes
content-length: 16850
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/fsfEovIdc6561291-med.jpg
200 OK 17 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/fsfEovIdc6561291-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "ACD Systems Digital Imaging", Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 225x300, components 3\012- data
Hash 5855656984b0216dbef8734234a50f3d
46deea1882a4a040e539a29b5f4cfe046841d156
f1dcde3fab10f3891c906782a98830db001d5548ecce3d52a51cae409f4412d9
GET /wp-content/uploads/2019/10/medium/fsfEovIdc6561291-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Oct 2019 15:23:36 GMT
accept-ranges: bytes
content-length: 17234
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
nefree.com/images/2020/11/15/71ba5979b9ffa1d709453ed86e2a1598.md.jpg
200 OK 32 kB URL HTTP/2 nefree.com/images/2020/11/15/71ba5979b9ffa1d709453ed86e2a1598.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x333, components 3\012- data
Hash 89f7477f1e6876665fe2cc7971d0d8be
b905681c4e58f518f8c272e3079a170bdd57efb9
24b1d9546d8de87fc9c63d9c71d997c8c905fc0ef169aa5fcc5296ec0174b0bb
GET /images/2020/11/15/71ba5979b9ffa1d709453ed86e2a1598.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:49:46 GMT
content-type: image/jpeg
content-length: 32218
last-modified: Sun, 15 Nov 2020 16:05:30 GMT
etag: "5fb151ca-7dda"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B9PASQit4mRUIJxcgZD9ROYvIDhcTG8NH74EVIUDC6%2BY34JE0lcAzXiGDdSIg9FGTtkwJxdOIkolpX7jSZEle4avdkeyhr9AKlg94abrUDnbqgsKKiKvlTVhl2d5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708ed0129431bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/3g5RIlmn6l167051-med.jpg
200 OK 18 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/3g5RIlmn6l167051-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 215x300, components 3\012- data
Hash 547524c100e55c7d906aabe355774d24
2eda6a5507fe8f1eb81b33a99ef18a7bed58e756
10be9a78ebb99d933029a7a66e20290939000230e42f0a6f44dc01cfbee0eeee
GET /wp-content/uploads/2019/10/medium/3g5RIlmn6l167051-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Oct 2019 14:11:13 GMT
accept-ranges: bytes
content-length: 17983
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
a.shukriya90.com/api/click/10654755616938066095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/10654755616938066095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/10654755616938066095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
a.shukriya90.com/api/click/11560973960308287095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/11560973960308287095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11560973960308287095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
ayazik.win/wp-content/uploads/2019/10/medium/8fSUGzapvV595496-med.jpg
200 OK 18 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/8fSUGzapvV595496-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "ACD Systems Digital Imaging", Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 225x300, components 3\012- data
Hash 63346886629cae7699bbbfd175eb1bfc
30626460c534c9195a64b76fa8f7fa0824bf2b71
9a961f843188917c8ff63b96d282b2e1343e019774fcffaa093c3a79806f1484
GET /wp-content/uploads/2019/10/medium/8fSUGzapvV595496-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Oct 2019 15:23:36 GMT
accept-ranges: bytes
content-length: 17871
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/vCbPEHAsXt883543-med.jpg
200 OK 18 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/vCbPEHAsXt883543-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "ACD Systems Digital Imaging", Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 225x300, components 3\012- data
Hash b7fc258d2ca3679bd669a8cd37f3494f
474e1fbe173b28e4d4dc47f756fd7a4011215a9b
704758e56cd2eff23325a9ac3e65d1019aeb7ea41123cb8cd3d78b3ba052750b
GET /wp-content/uploads/2019/10/medium/vCbPEHAsXt883543-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Oct 2019 15:23:36 GMT
accept-ranges: bytes
content-length: 17573
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/603KfjEnOm110743-med.jpg
200 OK 19 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/603KfjEnOm110743-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 215x300, components 3\012- data
Hash 14abe3f116e6fea12649a76e83d6a4b2
d160fd6433d31c678a24d87c70f18881261fd492
c3cf5ef2a63ced8d5e5f419ecbfe4cd0bd7fc06f6cc06894122714161c39c08a
GET /wp-content/uploads/2019/10/medium/603KfjEnOm110743-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Oct 2019 14:11:13 GMT
accept-ranges: bytes
content-length: 19432
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/ck6cAOCSvl859966-med.jpg
200 OK 21 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/ck6cAOCSvl859966-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 215x300, components 3\012- data
Hash 2165366dbd2310023096e7e4922dd278
2f0b1887401396f2d9a2c1930d70e32db76b478f
6a7266f4e5d3535edd72e9a14a8f264eb6749ddcb7438569f6eeac4d35bbe068
GET /wp-content/uploads/2019/10/medium/ck6cAOCSvl859966-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Oct 2019 14:11:13 GMT
accept-ranges: bytes
content-length: 20916
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/9qR6TwTeeG700032-med.jpg
200 OK 35 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/9qR6TwTeeG700032-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=1189, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], baseline, precision 8, 300x223, components 3\012- data
Hash ca52821e3caadef17fa0f46f9f2c0f44
07e258c39a7dea934b6c43a3ea6d573dca2937f4
c1358a92274204231bcb11c802eead7994de2d7fa53e2b00c26781d1ffd6c213
GET /wp-content/uploads/2019/10/medium/9qR6TwTeeG700032-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Oct 2019 17:07:13 GMT
accept-ranges: bytes
content-length: 35120
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2019/10/medium/jJIE31F8Xu789637-med.jpg
200 OK 36 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/jJIE31F8Xu789637-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=1189, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], baseline, precision 8, 300x223, components 3\012- data
Hash 96c9720d408fede736ff7f116f642c40
b3365d0e56738d7787f55fe31c330aad954f3e4c
c285c98bb08c5b7b857e6f699de8afbdfb3bcbe1d9ed9f27dfe02de70ae183d3
GET /wp-content/uploads/2019/10/medium/jJIE31F8Xu789637-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Oct 2019 17:07:13 GMT
accept-ranges: bytes
content-length: 35572
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5004
Cache-Control: max-age=99629
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:46 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:30:15 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ayazik.win/wp-content/uploads/2019/10/medium/tQ9qA5257E646012-med.jpg
200 OK 37 kB URL HTTP/2 ayazik.win/wp-content/uploads/2019/10/medium/tQ9qA5257E646012-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=1189, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], baseline, precision 8, 300x223, components 3\012- data
Hash 20d2afe86e76fdf6266abd7c606c1480
754d3f3f88335dd16bafd296a3977f64ae16c40d
44ed747a22892b549646c7bdb74bcfc15d9d6778632c3073219706be30bffb6c
GET /wp-content/uploads/2019/10/medium/tQ9qA5257E646012-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Oct 2019 17:07:13 GMT
accept-ranges: bytes
content-length: 36618
cache-control: public
expires: Sun, 27 Nov 2022 07:49:46 GMT
vary: User-Agent
content-type: image/jpeg
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
a.shukriya90.com/api/click/10369615021638238095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/10369615021638238095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/10369615021638238095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash 2110d7153b493064cd1a9dfaef190af6
f947123d6536a9f49d4a00a34a8ef0eb4feff90f
e9fd21bec879b843e3c72324df2f02061f93eaf706947cfea215122edb367cf8
GET /7a2fa356cc779900c863a51e810fbfce/invoke.js HTTP/1.1
Host: www.effectiveperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: caf265dc9be8bf5f6e8dc36bc0335087
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/352013?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=DUk95RHcuCSAyHL68lAn; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 358948a0ec900509e53396438fadea91
c47bd41c2dfd3879ca398829ac3438fce227dd96
d4cc3dfa1061aedf2533cf134f9d584568bc41a25090fb7ce77c5cdbec6c37e6
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3325
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5s2PZqs%2F23KbL8VIqpr6OfCoBCS5h85ZW2lM4AbRgjqlACecLr5mPqiYk8VxZIL5qvv1TmugtiGRsYi0J2FXCijp%2B4ThOF3AA3OtYCd00FXGyfzIFZlVyZNovKnlYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed03cbf1b4ff-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2019/10/29/cd6584797ff0fb1164208ae4fa3f558e.md.jpg
301 Moved Permanently 0 B URL HTTP/2 4tymode.win/images/2019/10/29/cd6584797ff0fb1164208ae4fa3f558e.md.jpg
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/2019/10/29/cd6584797ff0fb1164208ae4fa3f558e.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=61c0f79bb8a21f5f1812abed3c8e1f1d; path=/
location: https://4tymode.win/login
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2019/10/29/ca235a0177e352f2c36690d47bddfbc9.md.jpg
301 Moved Permanently 0 B URL HTTP/2 4tymode.win/images/2019/10/29/ca235a0177e352f2c36690d47bddfbc9.md.jpg
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/2019/10/29/ca235a0177e352f2c36690d47bddfbc9.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=06273d2bedceb20ac184c073fe54d4cf; path=/
location: https://4tymode.win/login
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2019/10/29/d9f95320b7bc005f280dd8ba2a71ac1c.md.jpg
301 Moved Permanently 0 B URL HTTP/2 4tymode.win/images/2019/10/29/d9f95320b7bc005f280dd8ba2a71ac1c.md.jpg
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/2019/10/29/d9f95320b7bc005f280dd8ba2a71ac1c.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=0b64de74849fc543b4aa8b5167fa6c40; path=/
location: https://4tymode.win/login
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
200 OK 121 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
IP
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash f395c59b99ad9effdd18186e3416b83f
31fa705e99763fd0d6183cf20c99e99605a8987f
9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632
GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: image/png
Content-Length: 121
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 399
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rxPp%2FCTs49Tl3F1qszT0SuudWq4DjtiV1Oda5yiwnrHab0juL6zooFwl7GkAE9eYzFWQDmTHEObv3mKYQFkwBS3nGz%2FUUF5JuTUXV96AZCdVidII0C2m45PYVjVLAw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed042c47b4ff-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 53wMVO3r5gdZXPYFWH+2rA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZPbbFZ1gNxhkHcTS6clR1BrIYkA=
ocsp.sectigo.com/
200 OK 472 B IP
Hash 93591363b08fd7c3063619a5ef7f9da3
ab1056e885880006d63b12acda93f875eb8d4b19
6bf953b26bfe85c4faf2dae85b5829a763240bc94ceda08e34a80f63a553b8ff
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:46 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 19:08:29 GMT
Expires: Fri, 02 Dec 2022 19:08:28 GMT
Etag: "ab1056e885880006d63b12acda93f875eb8d4b19"
Cache-Control: max-age=475721,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7708ed040c251c16-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4af47334194a0d10c2bfd52f16eb91ac
8ea04d240499dea43f26c738c8428df118dd622d
6741505308b8f473e68a567b74e6cd099b7a624b3711cc0acab45b2add675f74
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 27 Nov 2022 06:49:46 GMT
Last-Modified: Sun, 27 Nov 2022 06:09:48 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gCZ-ld7yNkVLcLEJ4oQ5_l_uYJ8ozFmk6fUqs4HsMaztu6_rI64HtQ==
Age: 2398
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash c07af365a786b74b282baf525dc0a851
d0f87fed2824645a207bc5dc54a8491039045b14
ba80d3af61683d49ac46eec414d6590142590bc0aceb54e15823b2af3295bad8
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
set-cookie: uid_id2=e13a5e6f-485f-4ea6-af81-3bb490a573b1:1:1; expires=Wed, 24 Nov 2032 06:49:47 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
surefap.org/favicon.ico
200 OK 2.4 kB IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash e4cb9c2ef4866c61686ea529cca5864c
51b1a32b077611d3f312c177cca13717e1d4c7aa
fed799214bbf9fecbb850e4a9013982864d232b335954ae57ef807b559821225
GET /favicon.ico HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:37:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3325
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2B9YPiEFPlysLKrJ0rv0w6CSd1uerad4Yf%2Fjr%2BMLjuMk%2F3AhFtszJXVEB2LI%2F%2BKJJdnJunekWbwQNJmfzaGSjtSno5xQArzJ1AG2R5KtXG4QZBaiY%2FqijggQpWiquQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed052d23b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
4tymode.win/login
200 OK 23 kB IP
ASN #24940 Hetzner Online GmbH
Hash dd0eb91872889a0a8a294bf6296b9df1
263f98e728b9791db4d46a1e797689abb2fb01a1
55ade26808595f48e3a75fb9eb48d326c3af3e2941e4c4cddb59b567ad55bf6f
Analyzer Verdict Alert fortinet Phishing
GET /login HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=099b554d8c6a02b7b6e14eeda8580a83; path=/
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:47 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4tymode.win/login
200 OK 21 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1945)
Hash 7fe6f5c6f8e08722411e5ddb7d160e1f
138b3ac1dcc73811c0910518cb753b9d042ab87a
6991f12a48a5d4053325083edbbcd483d8df125bc679c3f0a8dec35fb3fdf853
Analyzer Verdict Alert fortinet Phishing
GET /login HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=56d3ebc4ec989d1228f8a642eab5ef7d; path=/
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:47 GMT
server: Apache
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 06:41:08 GMT
expires: Sun, 27 Nov 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 519
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 5e4a5e0003d09ca91e7af5cdc74c54a2
fba8a06893fe3012a663521c6d76865cefd6a263
dd03fc1e92d5fde87e4b5d65dc0eec19774ed386a1ffea22ddbeeacf78fc9598
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Thu, 01 Dec 2022 05:01:23 GMT
ETag: "fba8a06893fe3012a663521c6d76865cefd6a263"
Last-Modified: Sun, 27 Nov 2022 05:01:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2955
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed059efdb4ee-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 5e4a5e0003d09ca91e7af5cdc74c54a2
fba8a06893fe3012a663521c6d76865cefd6a263
dd03fc1e92d5fde87e4b5d65dc0eec19774ed386a1ffea22ddbeeacf78fc9598
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Thu, 01 Dec 2022 05:01:23 GMT
ETag: "fba8a06893fe3012a663521c6d76865cefd6a263"
Last-Modified: Sun, 27 Nov 2022 05:01:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2955
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed05a9520b06-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:49:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=1746069959&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&ul=en-us&de=UTF-8&dt=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=557343246&gjid=489980416&cid=698175305.1669531787&tid=UA-68853511-3&_gid=1492772644.1669531787&_r=1&_slc=1&z=28015957
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1746069959&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&ul=en-us&de=UTF-8&dt=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=557343246&gjid=489980416&cid=698175305.1669531787&tid=UA-68853511-3&_gid=1492772644.1669531787&_r=1&_slc=1&z=28015957
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=1746069959&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&ul=en-us&de=UTF-8&dt=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=557343246&gjid=489980416&cid=698175305.1669531787&tid=UA-68853511-3&_gid=1492772644.1669531787&_r=1&_slc=1&z=28015957 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://surefap.org
date: Sun, 27 Nov 2022 06:49:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 14 kB URL HTTP/1.1 top-fwz1.mail.ru/js/code.js
IP
File type ASCII text, with very long lines (729)
Hash e2e25d9473a05570c20838aca1c2c3ea
a8ac67a13111a4e61cf7eb9bb8850ef5ab1246d4
b75b8d2fe8eb0c9e8191c51f99eb62b37c944f36118aacb5237e4bde65c60e11
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Nov 2022 16:42:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIE:1669531787:0:::; path=/; expires=Tue, 28-Nov-23 06:49:47 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"637e4d62-85c6"
Expires: Sun, 27 Nov 2022 07:49:47 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip
4tymode.win/login
200 OK 23 kB IP
ASN #24940 Hetzner Online GmbH
Hash 74177c67c74b2d8bb18b5a664d3a59bf
33db0e797d743dc796f661323ed0de732943aa0c
556a0c00ad9f22ede6352bfba00b375c571291a3606464c37ae65b633f147c44
Analyzer Verdict Alert fortinet Phishing
GET /login HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=ffbcada4edc36ee8a1befb5c48fc769d; path=/
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:47 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 26210db33b0243fa6781227dda702c1d
25fe5ca85843659d0a10a453b2837e87645f08f6
a235403c60bf2109d5aa0e2e6764154ef8d43ee23e5c6bf152a1740d878184e3
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 01 Dec 2022 02:31:35 GMT
ETag: "25fe5ca85843659d0a10a453b2837e87645f08f6"
Last-Modified: Sun, 27 Nov 2022 02:31:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3182
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed060e8a0b55-OSL
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;0.5276252947409515
200 OK 1.5 kB URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;0.5276252947409515
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash e893f7ec5d55cb86f193b2163dd2baa3
516a04037412b0dec6e6943e8c04e57ade3fd341
01dbbffa0e51b94e36939baa905b1e9496805b39d09f144da7d2e474157c937c
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;0.5276252947409515 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: image/gif
Content-Length: 1528
Connection: keep-alive
Expires: Fri, 26 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 14b5a8754828b3019000208176a81c8c
d732a5b437178d2eccbad51bbf4131975c1f948c
bd4963c7fdcf088679fb557141111168156b6bc8374f1f0b03fa236f5cb35cc6
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73313
date: Sun, 27 Nov 2022 06:49:47 GMT
access-control-allow-origin: *
etag: "637f41b2-11e61"
expires: Sun, 27 Nov 2022 07:49:47 GMT
last-modified: Thu, 24 Nov 2022 13:04:34 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 7ffe1880c471dc7092d35437c2fe3e4b
ac69d6ea46eecaee6a58c0d6839289e11443121f
85b5f43628221b8fddae91ff24ed995dbe3740bd6e123059cdedc4424ac073a9
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Thu, 01 Dec 2022 06:12:31 GMT
ETag: "ac69d6ea46eecaee6a58c0d6839289e11443121f"
Last-Modified: Sun, 27 Nov 2022 06:12:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 174
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ed06fffbb4ee-OSL
top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581
set-cookie: FTID=1RMYgQ0tkIIE:1669531787:2787143:::; path=/; expires=Tue, 28-Nov-23 06:49:47 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=499390
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=499390
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (366), with CRLF, LF line terminators
Hash bebaa552850fae018bd67910f020c695
f0152d82e064bf87eb226da304a4e67af7a00c82
2883ba9e844b2637e2964758bbcfba86bbeb45c273e1eb99a5b26c3e72d0e58d
GET /adshow.php?adzone=499390 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=09816d2727c6add46fd2eec493ff4482; expires=Mon, 27-Nov-2023 06:49:46 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YTowOnt9; expires=Wed, 30-Nov-2022 06:49:46 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 30-Nov-2022 06:49:46 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
stenadewy.pro/aUWVZ.yWP_3YBZ1acb2-hdaebf2g5_liSjWkQl9-NnDoEp1qO_TsUtyuMvi-Zx6ybz2A5_lCSDWEQF9-NHDIEJ1KO_TMUNyOMPg-?iframeId=wutpri
200 OK 0 B URL HTTP/2 stenadewy.pro/aUWVZ.yWP_3YBZ1acb2-hdaebf2g5_liSjWkQl9-NnDoEp1qO_TsUtyuMvi-Zx6ybz2A5_lCSDWEQF9-NHDIEJ1KO_TMUNyOMPg-?iframeId=wutpri
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aUWVZ.yWP_3YBZ1acb2-hdaebf2g5_liSjWkQl9-NnDoEp1qO_TsUtyuMvi-Zx6ybz2A5_lCSDWEQF9-NHDIEJ1KO_TMUNyOMPg-?iframeId=wutpri HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stenadewy.pro/a.W-ZLyMPN3OB_1QcR2ShTa-bV2W5XlYS_WaQb9cNdD-Ef2gNhjiU_2kNlymZn6-bp2q5rlsS_WuQv9wNxD-Ez2ANBjCU_2ENFwG?iframeId=ormppr
200 OK 0 B URL HTTP/2 stenadewy.pro/a.W-ZLyMPN3OB_1QcR2ShTa-bV2W5XlYS_WaQb9cNdD-Ef2gNhjiU_2kNlymZn6-bp2q5rlsS_WuQv9wNxD-Ez2ANBjCU_2ENFwG?iframeId=ormppr
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a.W-ZLyMPN3OB_1QcR2ShTa-bV2W5XlYS_WaQb9cNdD-Ef2gNhjiU_2kNlymZn6-bp2q5rlsS_WuQv9wNxD-Ez2ANBjCU_2ENFwG?iframeId=ormppr HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
200 OK 5.7 kB URL HTTP/2 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP
File type ASCII text, with very long lines (2401)
Hash e40de7380ad861464d1fc4676ac43d29
2666e5ec3b5a76a549673e44903d1569c84e475c
d3866364083ff31a4dcf50335e48657207e76121b80dd196c88e5a780f7a525a
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669531787002%3A1669531787019%3A1%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga;visible=true;_=0.2273260631425581 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669531787:2787143:::; path=/; expires=Tue, 28-Nov-23 06:49:47 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:47 GMT
access-control-allow-origin: *
etag: "637f41b2-2b"
expires: Sun, 27 Nov 2022 07:49:47 GMT
accept-ranges: bytes
last-modified: Thu, 24 Nov 2022 13:04:34 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=498259
200 OK 1.8 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=498259
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1655), with CRLF, LF line terminators
Hash 29157e818171ed1c35128b3171606ef9
204807c6edb294e66df3812248bcb61c39a43fc8
a84fad6bb8a1f66d54b3bad0b2d95ffbae70d597c1c8e77c9632c1bd9299e279
GET /adshow.php?adzone=498259 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=897b4afc04210064b2b40156da76cf0c; expires=Mon, 27-Nov-2023 06:49:47 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps161=1; expires=Mon, 28-Nov-2022 06:49:47 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjExOTY3MTM7aToxNjY5NzkwOTg3O30%3D; expires=Wed, 30-Nov-2022 06:49:47 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 30-Nov-2022 06:49:47 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
200 OK 284 kB URL HTTP/2 ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 284 kB (284264 bytes)
Hash 94eeda124cd4fd45a6ca4a7f0d672cc0
2c614d114dd89373a06a8823c4973f97b6120736
4a28e5c786dab8824c53af0d6543b86f58527139584fd50e41b97a5e917dfcc7
GET /ads/user161341/ad1266795-1658474854.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:49:47 GMT
etag: "1658474854"
cache-control: max-age=20479296
content-length: 284264
content-type: image/gif
last-modified: Fri, 22 Jul 2022 07:27:34 GMT
accept-ranges: bytes
x-hw: 1669531787.dop067.sk1.t,1669531787.cds259.sk1.hn,1669531787.cds261.sk1.c
X-Firefox-Spdy: h2
ads.juicyads.me/1x1.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Connection: Keep-Alive
ETag: "1457030838"
Cache-Control: max-age=17693479
Content-Length: 43
Content-Type: image/gif
Last-Modified: Thu, 03 Mar 2016 18:47:18 GMT
Accept-Ranges: bytes
X-HW: 1669531787.dop012.sk1.t,1669531787.cds217.sk1.c
ads.juicyads.me/network/user1037/1-1619547642-0028094001619547642.jpg
200 OK 55 kB URL HTTP/1.1 ads.juicyads.me/network/user1037/1-1619547642-0028094001619547642.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 160x600, components 3\012- data
Hash dc758a7ea885c9e45ccbf2bb315cf2fa
e00e03b7f8648b660ca4d485ec65b6439d4b0762
86bb80e5cee68b62da1c0f9d3a9c80940f39812d43dd00b671f6a2acce62e8ff
GET /network/user1037/1-1619547642-0028094001619547642.jpg HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:47 GMT
Connection: Keep-Alive
ETag: "1619547642"
Cache-Control: max-age=13110220
Content-Length: 55292
Content-Type: image/jpeg
Last-Modified: Tue, 27 Apr 2021 18:20:42 GMT
Accept-Ranges: bytes
X-HW: 1669531787.dop065.sk1.t,1669531787.cds250.sk1.c
10945-2.s.cdn15.com/creatives/152327/199283/425871_ee9a7.gif
200 OK 378 kB URL HTTP/2 10945-2.s.cdn15.com/creatives/152327/199283/425871_ee9a7.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Size 378 kB (378033 bytes)
Hash 23256a77f1398a3bce4652655188358b
5f3a817f31f04c665ce41140b76da85558e3a3d1
b953fdc460f1f5f72863ac9083e2bed01e02b9ffba2d42edaf1dbb776f780afe
GET /creatives/152327/199283/425871_ee9a7.gif HTTP/1.1
Host: 10945-2.s.cdn15.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://stenadewy.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: image/gif
content-length: 378033
last-modified: Fri, 01 Apr 2022 16:46:46 GMT
etag: "23256a77f1398a3bce4652655188358b"
x-timestamp: 1648831605.67539
x-trans-id: txe9184ccb6e24484085e83-00631e8637
x-openstack-request-id: txe9184ccb6e24484085e83-00631e8637
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsrP7jnHS8YSuPjrkuTCVphpOep5ZtMQ/BuVATeWDB/wTfYfr6RO3mwsJAG8WiB2Xy4r9ZCzEX+KXj7FcuF7pXjs
x-served-from: l1
expires: Wed, 22 Feb 2023 08:52:14 GMT
cache-control: max-age=7524147
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
x-vhostid: 160, 22395
accept-ranges: bytes
X-Firefox-Spdy: h2
stenadewy.pro/aYW.1Zwacbm-Vdzecf2gl_vibjjk9lh-ZnEolpkqP_TsQtyuNvT-gx3yMzSAZ_pCZDnEJFh-bHWIVJJKZ_DM1NuOdPG-dR6SYT3Uk_mWcXHYVZz-abFcpdveb_mgVhJiZjD-0l0mMnToY_2qNrTsct1-Jvnwpxvyb_mAVBJCZDD-0F0GMHTIY_2KNLTMcN1-
200 OK 0 B URL HTTP/2 stenadewy.pro/aYW.1Zwacbm-Vdzecf2gl_vibjjk9lh-ZnEolpkqP_TsQtyuNvT-gx3yMzSAZ_pCZDnEJFh-bHWIVJJKZ_DM1NuOdPG-dR6SYT3Uk_mWcXHYVZz-abFcpdveb_mgVhJiZjD-0l0mMnToY_2qNrTsct1-Jvnwpxvyb_mAVBJCZDD-0F0GMHTIY_2KNLTMcN1-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aYW.1Zwacbm-Vdzecf2gl_vibjjk9lh-ZnEolpkqP_TsQtyuNvT-gx3yMzSAZ_pCZDnEJFh-bHWIVJJKZ_DM1NuOdPG-dR6SYT3Uk_mWcXHYVZz-abFcpdveb_mgVhJiZjD-0l0mMnToY_2qNrTsct1-Jvnwpxvyb_mAVBJCZDD-0F0GMHTIY_2KNLTMcN1- HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: application/javascript
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Sun, 27 Nov 2022 06:49:47 GMT
set-cookie: kadCCap=199455:1:1668245056;221398:1:1669325799;219484:1:1667715065;79610:1:1669272875;194136:1:1669413157;218693:1:1669515516;220335:1:1669231427;212269:1:1667199062;219652:1:1669330335;219047:1:1667194435;220790:1:1668460505; max-age=1701067787; path=/
kadACap=449523:1:1669519460;446531:1:1669270846;419293:1:1669526430;419295:1:1669362714;446013:1:1668228435;346327:1:1669504325;424441:1:1669449948;419299:1:1669432259;407100:1:1668246232;383700:1:1669473413;451724:1:1669474978;190964:1:1669272875;445506:1:1669286676;419323:1:1669432178;451139:1:1669521403;442019:1:1669447425;401659:1:1669529511;445735:1:1669286676;419291:1:1669443279;419297:1:1669465197;453831:1:1669526424;419321:1:1669463839;419303:1:1669446827;419301:1:1669283271;410252:1:1669443062; max-age=1701067787; path=/
kadCSCap=218693:1:1669515516; path=/
kadASCap=442019:1:1669447425;449523:1:1669519460;419321:1:1669463839;451724:1:1669474978;419293:1:1669526430;383700:1:1669473413;419297:1:1669465197;419303:1:1669446827;346327:1:1669504325;453831:1:1669526424;424441:1:1669449948;451139:1:1669521403;401659:1:1669529511; path=/
kadRPixJ=bnVsbA==; max-age=1701067787; path=/
kadUnP3=CA0QxJ+KnAYaDQjrxaQBEAEY/JGLnAYaDQivp/4BEAMYjveLnAYaDQjgoogCEAEY7YiInAYaDQjMyZcCEAEYya2KnAYaDQj66pcCEAEYgf6GnAYaDQjE7JcCEAEY+YWInAYaDQi+8JcCEAEYxJ+KnAYaDQjzwZkBEAEYxbqKnAYaDQioiJcCEAgYhcmInAYaDQjQ6pcCEAEYq/mGnAYiCggBEAMYjveLnAYiCggDEAoYxJ+KnAYqDAj5oCgQARj5hYicBioMCMPpDBADGI73i5wGKgwIjL0SEAEYxbqKnAYqDAj09CcQARjEn4qcBioMCPX0JxABGKv5hpwGKgwIpJMoEAgYhcmInAYqDAiSnCgQARjJrYqcBioMCLH/ExABGPyRi5wGKgwIjJUmEAEY7YiInAYqDAjfoCgQARiB/oacBg==; max-age=1701067787; path=/
x-content-type-options: nosniff
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669531785010///-7/376/376/376/376/376/376//384/450/536/492/1636/1638/1757/2634/2634/;ni=;lvid=1669531787002%3A1669531787647%3A2%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga-ym;visible=true;_=0.17889251544084828;e=RT/load;et=1669531787645
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669531785010///-7/376/376/376/376/376/376//384/450/536/492/1636/1638/1757/2634/2634/;ni=;lvid=1669531787002%3A1669531787647%3A2%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga-ym;visible=true;_=0.17889251544084828;e=RT/load;et=1669531787645
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;nt=0/1/1669531785010///-7/376/376/376/376/376/376//384/450/536/492/1636/1638/1757/2634/2634/;ni=;lvid=1669531787002%3A1669531787647%3A2%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga-ym;visible=true;_=0.17889251544084828;e=RT/load;et=1669531787645 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:48 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669531788:2787143:::; path=/; expires=Tue, 28-Nov-23 06:49:48 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15362
Expires: Sun, 27 Nov 2022 11:05:50 GMT
Date: Sun, 27 Nov 2022 06:49:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15362
Expires: Sun, 27 Nov 2022 11:05:50 GMT
Date: Sun, 27 Nov 2022 06:49:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15362
Expires: Sun, 27 Nov 2022 11:05:50 GMT
Date: Sun, 27 Nov 2022 06:49:48 GMT
Connection: keep-alive
a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Canal%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cporno%2Cpussy%20licking&s1=%25subid1%25
200 OK 4.7 kB URL HTTP/2 a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Canal%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cporno%2Cpussy%20licking&s1=%25subid1%25
IP
ASN #24940 Hetzner Online GmbH
Hash 1d33597042d39aac4bc7d322348f54fc
27003cb52241fee552d3f9adf6378256fea427d9
bd02f7ec7e1a30159ca90df06d000a2f5600e6b0c0939ab8c301a1938d072185
GET /api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Canal%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cporno%2Cpussy%20licking&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=DL4ek7s6rm4ZXcwEmJdU; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 20:58:18 GMT
age: 35490
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 32287
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 32291
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32013626-b98e-4f6b-bd84-ffd1a2c2b7ea.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32013626-b98e-4f6b-bd84-ffd1a2c2b7ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8965857253845582ad8333615154be59
6636e8929347aed0b19a22dd1e60065a9014ee30
42941561f6315d974d28f45104cfe79fb2eaf594e5e4efccf4f1377972cbb972
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32013626-b98e-4f6b-bd84-ffd1a2c2b7ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5483
x-amzn-requestid: b20511dd-2a15-4c90-b4c3-77f153b89c18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIymCEY9IAMFUnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803159-384168242833530b79db4012;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:07:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XnlUNKu4ofuJ8xeafiSJfmDbg4DMFQNV5WH1DpilrHxKEMBjRIEHrQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 03:57:02 GMT
age: 10366
etag: "6636e8929347aed0b19a22dd1e60065a9014ee30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 892849386662d30042f01ab952a3ec14
3b349ac17a00d68875e64bee110ec85d07cffda2
893797d55f15081d45af7a31af9fefe106ace9ba236e9b113787d07ab416faf9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9926
x-amzn-requestid: b03f4d3b-b144-4466-ab11-96c8201d75a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Je2G_NIAMFZRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b22c5-5ef5e11a198cd8202372d8da;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:03:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Eeu-CbRcm2Zv8ZVXNO3vhUt2shbKNQZ1YqsxCMk96twd7zL_rceGYg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 22:05:31 GMT
age: 31457
etag: "3b349ac17a00d68875e64bee110ec85d07cffda2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 949fc6a68c263e9826a31bceed73163e
b0da1f7aed2b0fea560b6ab64afc767eba7e980e
c2261eb9d64ffa5218230a3b4edddda9496061863abab7cf1aaffa428f1f0d1b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2261EB9D64FFA5218230A3B4EDDDDA9496061863ABAB7CF1AAFFA428F1F0D1B"
Last-Modified: Sun, 27 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18373
Expires: Sun, 27 Nov 2022 11:56:01 GMT
Date: Sun, 27 Nov 2022 06:49:48 GMT
Connection: keep-alive
reproductiontape.com/watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 reproductiontape.com/watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1 HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:49:48 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Location: https://reproductiontape.com/watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1&shu=1338359519da86a076a1726f3f67034244a60f744a2a700d0bd33723baea32287766508b205db56f9b3835ed5e0e89e0b1210890c6b334df26ddec5942a25dd8ec6b0272054447deca7bbe571daaecb8c2dcd8bebb62b609ebd8adb56b7b8d&pst=1669531848&rmtc=t
Set-Cookie: u_pl=15842260; expires=Mon, 28 Nov 2022 06:49:48 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTg0MjI2MCwiayI6IjdhMmZhMzU2Y2M3Nzk5MDBjODYzYTUxZTgxMGZiZmNlIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo2ODAzOCwicGlkIjo1NTg0NiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjoyNSwicHQiOjQsInBrIjoia2VkZ2llM3giLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cDovL3N1cmVmYXAub3JnL2NhdGVnb3J5L3doby1mcmFtZWQtcm9nZXItcmFiYml0L3BhZ2UvMy8ifX0.ez-Zm3af5T2DoBZLafOUmi3eDgERlF8wzwTWXB87d8k; expires=Sun, 27 Nov 2022 06:50:48 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: be2ee755f65f08ce50e62759a4fa422a
Strict-Transport-Security: max-age=0; includeSubdomains
reproductiontape.com/watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1&shu=1338359519da86a076a1726f3f67034244a60f744a2a700d0bd33723baea32287766508b205db56f9b3835ed5e0e89e0b1210890c6b334df26ddec5942a25dd8ec6b0272054447deca7bbe571daaecb8c2dcd8bebb62b609ebd8adb56b7b8d&pst=1669531848&rmtc=t
200 OK 2.5 kB URL HTTP/1.1 reproductiontape.com/watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1&shu=1338359519da86a076a1726f3f67034244a60f744a2a700d0bd33723baea32287766508b205db56f9b3835ed5e0e89e0b1210890c6b334df26ddec5942a25dd8ec6b0272054447deca7bbe571daaecb8c2dcd8bebb62b609ebd8adb56b7b8d&pst=1669531848&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (3138)
Hash d7fca518c4a8f837bb6c929128b1540f
422cb68730c648906b47516900850494edf2c2be
c748027090b58e05969c157ccece39d6bbe4c8b10624d2b817d0968f99dc6b5e
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.802803040078.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22who%22%2C%22framed%22%2C%22roger%22%2C%22rabbit%22%2C%22xxx%22%2C%22cartoon%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&tz=0&dev=e&res=12.1053&uuid=e13a5e6f-485f-4ea6-af81-3bb490a573b1%3A1%3A1&shu=1338359519da86a076a1726f3f67034244a60f744a2a700d0bd33723baea32287766508b205db56f9b3835ed5e0e89e0b1210890c6b334df26ddec5942a25dd8ec6b0272054447deca7bbe571daaecb8c2dcd8bebb62b609ebd8adb56b7b8d&pst=1669531848&rmtc=t HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Cookie: u_pl=15842260; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTg0MjI2MCwiayI6IjdhMmZhMzU2Y2M3Nzk5MDBjODYzYTUxZTgxMGZiZmNlIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo2ODAzOCwicGlkIjo1NTg0NiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjoyNSwicHQiOjQsInBrIjoia2VkZ2llM3giLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cDovL3N1cmVmYXAub3JnL2NhdGVnb3J5L3doby1mcmFtZWQtcm9nZXItcmFiYml0L3BhZ2UvMy8ifX0.ez-Zm3af5T2DoBZLafOUmi3eDgERlF8wzwTWXB87d8k
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:49:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=e13a5e6f-485f-4ea6-af81-3bb490a573b1:1:1; expires=Sun, 04 Dec 2022 06:49:48 GMT; secure; SameSite=None
iprc3075e55e807d2a9c7c72101098e78f94=3569676; expires=Sun, 27 Nov 2022 10:49:48 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 06:49:48 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 06:49:48 GMT; secure; SameSite=None
pdhtkv25=true; expires=Mon, 28 Nov 2022 06:49:48 GMT; secure; SameSite=None
uncs25=1; expires=Mon, 28 Nov 2022 06:49:48 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7ffa232723a6810c720ba1b928e93820
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc3bc3b231ebbd46c9990216f02a737a
abe0a2ee650eb32a809271c99a97ca551c43141f
7a8f5b295ee6b5263fd51ce81a12e0aa43b69a234fda244b7c8ad9827569620c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7A8F5B295EE6B5263FD51CE81A12E0AA43B69A234FDA244B7C8AD9827569620C"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4258
Expires: Sun, 27 Nov 2022 08:00:46 GMT
Date: Sun, 27 Nov 2022 06:49:48 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
200 OK 185 kB URL HTTP/2 cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 185 kB (185150 bytes)
Hash 69cbf6dd022575e7dcaa17248e7e4643
daf78102256bb6d153facc728e9fe73be02138e6
41110fdcc38e4d9358f19dd9440d766d798d159e2bc6dd69197321df9d1b9582
GET /cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:49:48 GMT
content-type: image/png
content-length: 185150
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 09:50:43 GMT
etag: "62e10a73-2d33e"
expires: Tue, 29 Nov 2022 06:49:48 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d1079b9a686d615518b7229059eb1767
9bac833753ffe651c045e1644718fe6f33366134
bb94de57bb48d39cb50386a1e0b7fddb3ea491b5d8010bef365fa2cccdb2fcff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB94DE57BB48D39CB50386A1E0B7FDDB3EA491B5D8010BEF365FA2CCCDB2FCFF"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6340
Expires: Sun, 27 Nov 2022 08:35:29 GMT
Date: Sun, 27 Nov 2022 06:49:49 GMT
Connection: keep-alive
d.pssy.xyz/t.php
200 OK 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:49:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=f21fcdf8-29e1-4faf-99a3-78943b6c01d3; expires=Mon, 27-Nov-2023 06:49:49 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=774432100&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531791%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064950%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531791&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=774432100&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531791%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064950%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531791&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=774432100&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531791%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064950%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531791&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 174338
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:51 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 06:49:51 GMT
last-modified: Sun, 27-Nov-2022 06:49:51 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=534983564&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669531791%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064951%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531791&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=534983564&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669531791%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064951%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531791&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=534983564&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669531791%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064951%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531791&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:51 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 06:49:51 GMT
last-modified: Sun, 27-Nov-2022 06:49:51 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=778435723&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531792%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064951%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531792&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=778435723&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531792%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064951%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531792&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=778435723&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531792%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064951%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531792&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 8470
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:52 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 06:49:52 GMT
last-modified: Sun, 27-Nov-2022 06:49:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=261352135&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064953%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=261352135&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064953%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=3&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=261352135&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064953%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 8641
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:54 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 06:49:54 GMT
last-modified: Sun, 27-Nov-2022 06:49:54 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=755339327&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064954%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=755339327&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064954%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=755339327&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064954%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:54 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 06:49:54 GMT
last-modified: Sun, 27-Nov-2022 06:49:54 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669531787002%3A1669531794146%3A3%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga-ym;visible=true;_=0.6009580209402121;e=RT/unload;et=1669531794144;pvt=7498;vtauto=7149
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669531787002%3A1669531794146%3A3%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga-ym;visible=true;_=0.6009580209402121;e=RT/unload;et=1669531794144;pvt=7498;vtauto=7149
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/category/who-framed-roger-rabbit/page/3/;st=1669531786646;title=Who%20Framed%20Roger%20Rabbit%20xxx%20cartoon%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=85b15ead9d89bd2d;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1669531787002%3A1669531794146%3A3%3Add1ec4e2c3f85574864a9c6f17067b3e;opts=jst-ga-ym;visible=true;_=0.6009580209402121;e=RT/unload;et=1669531794144;pvt=7498;vtauto=7149 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:54 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1669531794:2787143:::; path=/; expires=Tue, 28-Nov-23 06:49:54 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=4&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=946174934&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064954%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=4&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=946174934&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064954%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=4&wv-hit=359685857&page-url=http%3A%2F%2Fsurefap.org%2Fcategory%2Fwho-framed-roger-rabbit%2Fpage%2F3%2F&rn=946174934&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669531794%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221127064954%3Au%3A1669531787489885442%3Avf%3Ahbzrup1heb8z95k3olq7w%3Awe%3A1%3Ast%3A1669531794&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1745
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 06:49:54 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 06:49:54 GMT
last-modified: Sun, 27-Nov-2022 06:49:54 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
4tymode.win/login
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /login HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=80cacc3bc92712a0878eb213ed2fa43d; path=/
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/login
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /login HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=7754af781dce02ce42e312f424c7dbb4; path=/
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 06:49:46 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
200 OK 0 B URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
IP
GET /wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/category/who-framed-roger-rabbit/page/3/
Cookie: PHPSESSID=vgucvopmnado3rhb6suv8c6na2
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:49:45 GMT
Content-Type: image/png
Content-Length: 95698
Connection: keep-alive
Last-Modified: Sat, 08 Feb 2020 05:34:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3324
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a8Uv7K1Rlu18G05pCZCDS1lBzkCZgtU2Qo0oCijKjpV3mkjrHNthODu2w3ZRZC32IjISAr%2FXsBz2L9c3UZaqvEyZPaKHmnSnGSOJubS%2FvTyoLyLMdoOy4y7tUJz1Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7708ecfe4f171c02-OSL
alt-svc: h2=":443"; ma=60
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
200 OK 0 B URL HTTP/2 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
200 OK 0 B URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
stenadewy.pro/atWuZ.yvP-3xBy1zcA2_hCaDbE2F5-lHSIWJQK9_NMDNEO2PN-jRUS3TNUS_ZW6XbY2Z5-lbScWdQe9_NgDhEi2jN-jlUm3nNoQ_?iframeId=ntgzcy
200 OK 0 B URL HTTP/2 stenadewy.pro/atWuZ.yvP-3xBy1zcA2_hCaDbE2F5-lHSIWJQK9_NMDNEO2PN-jRUS3TNUS_ZW6XbY2Z5-lbScWdQe9_NgDhEi2jN-jlUm3nNoQ_?iframeId=ntgzcy
IP
GET /atWuZ.yvP-3xBy1zcA2_hCaDbE2F5-lHSIWJQK9_NMDNEO2PN-jRUS3TNUS_ZW6XbY2Z5-lbScWdQe9_NgDhEi2jN-jlUm3nNoQ_?iframeId=ntgzcy HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:49:47 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Sun, 27 Nov 2022 06:49:47 GMT
set-cookie: kadCCap=221398:1:1669325799;220335:1:1669231427;219484:1:1667715065;79610:1:1669272875;212269:1:1667199062;219652:1:1669330335;194136:1:1669413157;218693:1:1669515516;219047:1:1667194435;220790:1:1668460505;199455:1:1668245056; max-age=1701067787; path=/
kadACap=346327:1:1669504325;419301:1:1669283271;419323:1:1669432178;419293:1:1669526430;451139:1:1669521403;419299:1:1669432259;407100:1:1668246232;383700:1:1669473413;451724:1:1669474978;190964:1:1669272875;410252:1:1669443062;445506:1:1669286676;419295:1:1669362714;419297:1:1669465197;445735:1:1669286676;419291:1:1669443279;449523:1:1669519460;424441:1:1669449948;453831:1:1669526424;419321:1:1669463839;446531:1:1669270846;446013:1:1668228435;442019:1:1669447425;401659:1:1669529511;419303:1:1669446827; max-age=1701067787; path=/
kadCSCap=218693:1:1669515516; path=/
kadASCap=419297:1:1669465197;419303:1:1669446827;442019:1:1669447425;449523:1:1669519460;451139:1:1669521403;419321:1:1669463839;451724:1:1669474978;401659:1:1669529511;346327:1:1669504325;419293:1:1669526430;383700:1:1669473413;453831:1:1669526424;424441:1:1669449948; path=/
kadRPixJ=bnVsbA==; max-age=1701067787; path=/
kadUnP3=CAwQxJ+KnAYaDQivp/4BEAIYjveLnAYaDQj66pcCEAEYgf6GnAYaDQjzwZkBEAEYxbqKnAYaDQjrxaQBEAEY/JGLnAYaDQjMyZcCEAEYya2KnAYaDQjQ6pcCEAEYq/mGnAYaDQjE7JcCEAEY+YWInAYaDQi+8JcCEAEYxJ+KnAYaDQjgoogCEAEY7YiInAYaDQioiJcCEAgYhcmInAYiCggBEAIYjveLnAYiCggDEAoYxJ+KnAYqDAjfoCgQARiB/oacBioMCPmgKBABGPmFiJwGKgwIjJUmEAEY7YiInAYqDAj09CcQARjEn4qcBioMCPX0JxABGKv5hpwGKgwIpJMoEAgYhcmInAYqDAiSnCgQARjJrYqcBioMCMPpDBACGI73i5wGKgwIjL0SEAEYxbqKnAYqDAix/xMQARj8kYucBg==; max-age=1701067787; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
172.67.191.234
135.181.208.216
88.212.201.198
93.184.220.29
104.18.32.68
185.94.236.247
142.132.131.203
23.36.76.226
79.137.52.116