www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
188.114.96.1301 Moved Permanently 0 B URL HTTP/1.1 www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/ HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 10:51:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 08 Feb 2023 11:51:52 GMT
Location: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z2m0ElYQhzfN95WqJ2u0%2F4aqJgfQw9Uws%2B95iXRMsXx%2Fqz9wCPZhhTyKjZ3Kjx1ZRfsD3HIkD1MAscnuwQlDur25eu2eu1vRPxGjXTf%2FqHjrlxjnLCuX%2FU5P10Z4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7963d002ed57b51d-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5158
Expires: Wed, 08 Feb 2023 12:17:50 GMT
Date: Wed, 08 Feb 2023 10:51:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8450
Expires: Wed, 08 Feb 2023 13:12:42 GMT
Date: Wed, 08 Feb 2023 10:51:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 10:34:13 GMT
content-type: application/json
age: 1059
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7890
Expires: Wed, 08 Feb 2023 13:03:22 GMT
Date: Wed, 08 Feb 2023 10:51:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MUN+f+stFCBnqvPQvwiobBLZDWZgcisFI63/TYAUjqkDYnKUEvI/BF3QqqkX4O0fx294jlvS5jE=
x-amz-request-id: Q0G6F72D64BPB3AJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 10:35:54 GMT
age: 958
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www1.xup.in/tn/no_tn.gif
172.67.200.163200 OK 1.6 kB IP 172.67.200.163:0
File type GIF image data, version 89a, 48 x 48\012- data
Hash 8ac42ebed34304c5ed08ab2313290d3a
7333be693fbc301e7516d82294b1fb702c539008
98509fb4f226d1389eb15592f1fbba11d239b583c9fdaeff428608745bad2de8
GET /tn/no_tn.gif HTTP/1.1
Host: www1.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/gif
content-length: 1587
last-modified: Tue, 28 May 2013 10:26:01 GMT
etag: "51a48639-633"
expires: Fri, 10 Mar 2023 10:19:27 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 1094585
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VPnpvGNYxJAIuah1TQVmdhSGeYd1svEheDQ5S9aFpoB7jv17NjV%2FEiySKbsMAlhG0JTlWpjPmQM22HRZ9IDomDBwqeGMCCY9NwKQxH2PbhhTuXV98zVgWxS4rYt5Vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d0070a21b51b-OSL
X-Firefox-Spdy: h2
www.xup.in/img/download.gif
188.114.96.1200 OK 5.5 kB URL HTTP/2 www.xup.in/img/download.gif
IP 188.114.96.1:0
File type GIF image data, version 89a, 128 x 128\012- data
Hash 96d017f1e4a155d560e9bd4cac2eb1f9
15d1af25d22aa8d8d08730778f6846012e0f6525
2515fa27673a2afd74cedd227aa38fc797a4803c8822c01adfe336080d2abc0d
GET /img/download.gif HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/gif
content-length: 5529
last-modified: Thu, 28 Sep 2017 22:14:09 GMT
etag: "59cd7431-1599"
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SXDEAEwxt53MfuNxg7Vlg2YQ8rv0%2Beei9Gx6%2FGYcvjpoA3Swkslw4umf5leMQriJVU8Qr3snDPAPRwH%2BtzMsscONc6w7Fc1omJGb9wBreQPrSYiuAAkP4CRKXLHT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d006cac8b51d-OSL
X-Firefox-Spdy: h2
www.xup.in/img/xup_logo.gif
188.114.96.1200 OK 3.0 kB URL HTTP/2 www.xup.in/img/xup_logo.gif
IP 188.114.96.1:0
File type GIF image data, version 89a, 100 x 136\012- data
Hash b25b3a7503afd4a2a35a20cedf87f941
58ea44cc2512468c375a639016d7faabdf6110ec
cee0249c5f9b16ef62ed1988fe8a79a09aed3f5dca11ac2cc8bee77779bce496
GET /img/xup_logo.gif HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/gif
content-length: 2962
last-modified: Thu, 28 Sep 2017 22:14:10 GMT
etag: "59cd7432-b92"
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=587aQbQGgzyzr32ilcvJVtNExCxL6tOY%2Bx3q%2Fn%2FnSPqBRs0EFQm2UYjcD8HBl8VK34fCKzEHc4Jtjpe%2FXcOxcqK1lmBtLCHHgWwc%2BPGJmh%2BSQ3xkvlocraeaNzu8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d006cac2b51d-OSL
X-Firefox-Spdy: h2
www.xup.in/com/ads-google-728x90.jpg
188.114.96.1200 OK 14 kB URL HTTP/2 www.xup.in/com/ads-google-728x90.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 728x90, components 3\012- data
Hash 0f498a2ab17689246ec351294f641952
c81e04c66b7009ed985214f3386b9113a5fd3a42
506e0cd8bac817943ec0e63474113e3583944c67af26e4565c1d7dccc682e8f7
GET /com/ads-google-728x90.jpg HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/jpeg
content-length: 13752
last-modified: Thu, 16 May 2019 21:08:16 GMT
etag: "5cddd140-35b8"
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5YUmfBxQXu0tfA9MnDdfC9GduDPIfSyIf2lVCpxS05peHAihdifHcZnKmyNxBCjRTCLJenfN60c%2FfcKae9UoFP%2FXlJxVlyALmXm%2BuGyY2v8lnqwGG1vdu54ERYhd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d006dacbb51d-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 06954931c0f8ff51ec2e94e6eb4de9c1
8cea5cb51f65144ab9bddc58f03942bab90cd395
936c49a46239c8fca22f7c4c0ff3bf326e7656fd33416f54a487f57e1f9a26ad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=109251
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:51:52 GMT
Etag: "63e2868b-116"
Expires: Thu, 09 Feb 2023 17:12:43 GMT
Last-Modified: Tue, 07 Feb 2023 17:12:43 GMT
Server: nginx
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 10:14:52 GMT
age: 2220
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.xup.in/img/iclist.gif
188.114.96.1200 OK 325 B URL HTTP/2 www.xup.in/img/iclist.gif
IP 188.114.96.1:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 473d45663c00c1436dae506845245f3c
a4ea56bbd1349dfe574e8a9bac1744c477d7c1ce
3536a3e61b6d9aef57e1418f037cf643a5261d63967d23256acd6afc8862fd24
GET /img/iclist.gif HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/main.css?v=5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/gif
content-length: 325
last-modified: Thu, 28 Sep 2017 22:14:09 GMT
etag: "59cd7431-145"
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qEqo%2FjxJ6tfRxsoGILvB43qytKiszEn8pcMtSTyD9QqW3D4mYdS%2Fo%2FL2UNLyAlaVALG8V2%2BDsqJbwLfujSHqCokXOzWHvgh%2B4iMrAAOGtx8OoDAltIwoQlghtsF0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d0079c07b51d-OSL
X-Firefox-Spdy: h2
www.xup.in/img/bg_black.gif
188.114.96.1200 OK 1.5 kB URL HTTP/2 www.xup.in/img/bg_black.gif
IP 188.114.96.1:0
File type GIF image data, version 89a, 123 x 25\012- data
Hash 1ca193cc7b4210483fdf78baabddf91d
ca38a59405773a654476cc9d39c17799791989d5
ae9c8954bbfc64cf291fea95c5674fb9113faa2a00d8e2697fa565957371e146
GET /img/bg_black.gif HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/main.css?v=5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/gif
content-length: 1522
last-modified: Thu, 28 Sep 2017 22:14:09 GMT
etag: "59cd7431-5f2"
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MbhXh1RAvyJjOAx%2BFAPAT0%2BZ3G69TOlG3Q8HQW6ctG4XQHhCFqCaxklsdopTzOgWWYWWhkhGt17FBbVXAIpWR9PaQFeZu3hwKhPoXr1nTxp%2Fvc9BXx0utmd9m1Xr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d0079c04b51d-OSL
X-Firefox-Spdy: h2
www.xup.in/img/xup_logo.gif?banner.728x90.ads.png.gif
188.114.96.1200 OK 3.0 kB URL HTTP/2 www.xup.in/img/xup_logo.gif?banner.728x90.ads.png.gif
IP 188.114.96.1:0
File type GIF image data, version 89a, 100 x 136\012- data
Hash b25b3a7503afd4a2a35a20cedf87f941
58ea44cc2512468c375a639016d7faabdf6110ec
cee0249c5f9b16ef62ed1988fe8a79a09aed3f5dca11ac2cc8bee77779bce496
GET /img/xup_logo.gif?banner.728x90.ads.png.gif HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/gif
content-length: 2962
last-modified: Thu, 28 Sep 2017 22:14:10 GMT
etag: "59cd7432-b92"
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P01mNAseS3mCm3q3xDkHktiKj1Fot0bxhPwlRZMc5djD91lvJx53KBNtctQYlXzUmyDL5JFgdUvzIcCqMWyQc8MiqJgMQ70mcFXn%2BGNrp6aOQ66pkKQrHyOT5vPd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d007ac1cb51d-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 06954931c0f8ff51ec2e94e6eb4de9c1
8cea5cb51f65144ab9bddc58f03942bab90cd395
936c49a46239c8fca22f7c4c0ff3bf326e7656fd33416f54a487f57e1f9a26ad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=109251
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:51:53 GMT
Etag: "63e2868b-116"
Expires: Thu, 09 Feb 2023 17:12:44 GMT
Last-Modified: Tue, 07 Feb 2023 17:12:43 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5457
Expires: Wed, 08 Feb 2023 12:22:50 GMT
Date: Wed, 08 Feb 2023 10:51:53 GMT
Connection: keep-alive
push.services.mozilla.com/
52.41.153.123101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.153.123:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bw5O2UTSHTlKIhOz990M4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Y6Mv5QeJOdgpZUPYvIsCsxveQN8=
ocsp.digicert.com/
93.184.220.29200 OK 829 B IP 93.184.220.29:0
File type Windows Precompiled iNF, version 2.3, flags 0xf4fec7e4, src URL, digitally signed, at 0x4282c195, at 0xedad1b90 WinDirPath, LanguageID 3b25, at 0xed87139c\012- data
Hash 59ed2acf9ef0a30887e11927a8ce1066
9a12820d872d863bed09d5cd3d77e8a05dc17588
7ab4f28dcfd97b9fc4efd53ddce253e052cdc35a8bd4fa8af02c07bdb3bb92fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 387
Cache-Control: max-age=105004
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:51:53 GMT
Etag: "63e27472-117"
Expires: Thu, 09 Feb 2023 16:01:57 GMT
Last-Modified: Tue, 07 Feb 2023 15:55:30 GMT
Server: ECS (amb/6BAD)
X-Cache: HIT
Content-Length: 279
sexei.net/com/ads-google-728x90.jpg
188.114.97.1200 OK 14 kB URL HTTP/2 sexei.net/com/ads-google-728x90.jpg
IP 188.114.97.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 728x90, components 3\012- data
Hash 0f498a2ab17689246ec351294f641952
c81e04c66b7009ed985214f3386b9113a5fd3a42
506e0cd8bac817943ec0e63474113e3583944c67af26e4565c1d7dccc682e8f7
GET /com/ads-google-728x90.jpg HTTP/1.1
Host: sexei.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:53 GMT
content-type: image/jpeg
content-length: 13752
last-modified: Mon, 01 Mar 2021 17:53:21 GMT
etag: "603d2a11-35b8"
cf-cache-status: HIT
age: 880
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c7a9NU9Er%2F%2F6hvbOdaI0UU7devs1XpcCfGalb4VwkeMkAORad7M5krczLMUcLBJys42um0HJO4KDAAYz6XoEYd7kfeHOU45cQVdKDDK7Y6pp7uYLJG3WknBKnbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d00c2bcab4ee-OSL
X-Firefox-Spdy: h2
www.perfect-privacy.com/de/?a_aid=55685fa0ee5e9
31.204.153.87200 OK 9.7 kB URL HTTP/1.1 www.perfect-privacy.com/de/?a_aid=55685fa0ee5e9
IP 31.204.153.87:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (515)
Hash 693483ecf50b798a7c7a2988b6d5f7ee
bb4685ccd6300689828724583515bbe3c8c9c940
c3b88261514c4c3373715feb1600bc7c254a3fbb2e645976e6d806be85659d85
GET /de/?a_aid=55685fa0ee5e9 HTTP/1.1
Host: www.perfect-privacy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 10:51:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 9733
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Cache-Control: max-age=0, must-revalidate, private
Expires: Wed, 08 Feb 2023 10:51:53 GMT
Set-Cookie: pp_sessid=adg2dr98laogl2u28l5u90cj03; path=/; secure; HttpOnly
a_aid=55685fa0ee5e9; expires=Sun, 09-Apr-2023 10:51:53 GMT; Max-Age=5184000; path=/; domain=www.perfect-privacy.com; secure; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Delivered-By: 31.204.153.87
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 370a09a41db7b87e97a9833fa6f55649
ad867bebe948b85c51be68869e4b042956f1c80f
de5d0b1b9477f7696d1f2a0e8100ded8f1fb5ae4a2e657099e352a8837722487
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 10:51:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 03:08:49 GMT
Expires: Sun, 12 Feb 2023 03:08:48 GMT
Etag: "ad867bebe948b85c51be68869e4b042956f1c80f"
Cache-Control: max-age=317214,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7963d00bfb480b06-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7121
Expires: Wed, 08 Feb 2023 12:50:35 GMT
Date: Wed, 08 Feb 2023 10:51:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7121
Expires: Wed, 08 Feb 2023 12:50:35 GMT
Date: Wed, 08 Feb 2023 10:51:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7121
Expires: Wed, 08 Feb 2023 12:50:35 GMT
Date: Wed, 08 Feb 2023 10:51:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a8e532-be72-47cc-8389-e8f28ffc3c2a.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a8e532-be72-47cc-8389-e8f28ffc3c2a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 33b061f03be149fea0df63b42a8ec226
e5e491c6ef8b6234450a34ee5df28b9a58a8ad43
a5970bbb40be173878cd2e920bd1a6ed27775fbdc222bb66ccbc5969984882f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a8e532-be72-47cc-8389-e8f28ffc3c2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4269
x-amzn-requestid: df152b3a-fa15-4dac-96f9-41b9ea8e5136
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkQH5PoAMFl1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c481-63636a42419209fb0c17eceb;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0hu3nATq26ngjS5942rJgt7AcT4wjG0mFfNrtsajSN2PpdAOYhTjFg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:43:42 GMT
age: 47292
etag: "e5e491c6ef8b6234450a34ee5df28b9a58a8ad43"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5416f10c-2a0c-46e5-a76b-853a2be4c374.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5416f10c-2a0c-46e5-a76b-853a2be4c374.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe800d6af728cd622a6192ad5e7dda6a
3a301dd894fc428c7d1863c9d5eaf2652f5c2083
f4923c211ef24e933bbe73bd8d2033d6b6da4a9fa0c9d4699a1041a7bd8bf5a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5416f10c-2a0c-46e5-a76b-853a2be4c374.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12216
x-amzn-requestid: cc61a63b-35fe-4bfa-ad20-1db3f4165446
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7LFrCIAMFoYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-2b5e27c62218510b74ea0989;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Cf13Lp2SFHQ4SSF6_KpC4zx339tZRkMmnmF-OKM_2hbWbIoR3OLJ_g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:50:49 GMT
age: 46865
etag: "3a301dd894fc428c7d1863c9d5eaf2652f5c2083"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 726928e5de19ef978faebbe933c34008
bdaba3ed0c7efb65de88af96063d830683c8499b
c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qfHMhMAdnYcOa0Xm23enTGXj4CQC-QFHV50Pq6QQdvM5YcIgUZVPRQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:54:36 GMT
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
content-type: image/jpeg
age: 46638
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0594f78c4fdfed5dd2e0666312555f40
db903b9a3f387c1510170f8d16dd4d289f7df83f
8874083a529064657b18be58147ae7df5fe79c822c4bd2a023fdf3df7186a62e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3712
x-amzn-requestid: 44c7e7bd-1a95-49b6-9b0a-f8aff3725ded
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftbOtH-lIAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba591-2fb19c33646c3d327681e9f9;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 11:59:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z5r7rFH2nEro98p7U4_Lz8xIrX_bnU7ntAc46ytGzL8498buHzsCcg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 01:06:59 GMT
age: 35095
etag: "db903b9a3f387c1510170f8d16dd4d289f7df83f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www1.xup.in/exec/cfxddl.php?fid=52507103&fname=shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4
172.67.200.163206 Partial Content 781 kB URL HTTP/2 www1.xup.in/exec/cfxddl.php?fid=52507103&fname=shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4
IP 172.67.200.163:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 781 kB (781092 bytes)
Hash e6bf19e28a3ac9a33375f605fa09cf3b
f9b261e9c13f0ca862d071466769d4f1ada985e3
eb925f4abf46f5a9aa57de46d7486794274a302ad0013ab04d1a67444ae4e332
GET /exec/cfxddl.php?fid=52507103&fname=shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4 HTTP/1.1
Host: www1.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.xup.in/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 206 Partial Content
date: Wed, 08 Feb 2023 10:51:53 GMT
content-type: application/octet-stream
content-length: 24309236
access-control-allow-origin: https://www.xup.in
link: <https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/>; rel="canonical"
pragma: public
cache-control: public, max-age=16070400
expires: Sat, 03 Feb 2024 10:50:09 GMT
content-disposition: attachment; filename="SHANIA_DIE_GEISSENS_GOTTVERDAMMTE_PHILOSOPHEN_TV_TOTAL.MP4"
content-transfer-encoding: binary
last-modified: Wed, 08 Feb 2023 10:50:09 GMT
cf-cache-status: HIT
content-range: bytes 0-24309235/24309236
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tpBAOf7BBpuOSwSLMk9Ne9WmWMOZvNtCRRuUqb7SoHBJ6yY9fA0q5HLOMZR0D%2Bwlsy9P5vcCVxQtTxR52C5FWCuoUWAZNUBWA%2FuR314%2Fe7oxp9QZJUQyhF0iZ5zutQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7963d0080b6eb51b-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b327816bc2c6fd7291c75c693685d54
771070be61d0724b1c90ca86ea34c804bd7e501a
d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6838
x-amzn-requestid: 54fc5ae9-d37a-46cf-97e0-d05de1417cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7QEsCoAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-40de6212468fcd0e78a93708;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mgfr5wO7Bj5BVjKYY7O0c4ogLognfq09QrA9khZROr2CVyOWgKTz1g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:52:35 GMT
age: 46759
etag: "771070be61d0724b1c90ca86ea34c804bd7e501a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sexei.net/responsive.html
188.114.97.1304 Not Modified 0 B URL HTTP/2 sexei.net/responsive.html
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /responsive.html HTTP/1.1
Host: sexei.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
If-Modified-Since: Wed, 27 May 2020 14:34:59 GMT
TE: trailers
HTTP/2 304 Not Modified
date: Wed, 08 Feb 2023 10:51:54 GMT
last-modified: Wed, 27 May 2020 14:34:59 GMT
etag: W/"5ece7a93-1c04"
cache-control: max-age=1800
cf-cache-status: HIT
age: 4513
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d%2BXI4AjARBzBygoeOxNUMWPZu8cgu%2FSUtCtjJQbjxolu0mMdRLyR7p9OMVejkz4bl3FuFvDDjCW8H1fPwBdJKwkOd3iiWojXtafDJZ5XnixDBT4xRhvvm%2F2E2Ps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d0136d39b4ee-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3da12230409c46f44ce2fc28fcab29cb
9383e761e3316ca6c7c4326f564c14ece1657354
6cbbedccfdc142cf2a2cd7eb9ec509d92865342d8a1273299a1bd8298dc9c258
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2811
Cache-Control: max-age=94064
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 10:51:55 GMT
Etag: "63e24040-116"
Expires: Thu, 09 Feb 2023 12:59:39 GMT
Last-Modified: Tue, 07 Feb 2023 12:12:48 GMT
Server: ECS (amb/6BAD)
X-Cache: HIT
Content-Length: 278
www1.xup.to/exec/ximg.php?fid=14371339
104.21.233.187200 OK 26 kB URL HTTP/2 www1.xup.to/exec/ximg.php?fid=14371339
IP 104.21.233.187:0
Hash 54ce42eb3e4828a8e5ea3d7bb1426e89
f997d7fbab455012623a8fe5098dabf5494e39e1
8975367483f7014619c69cbc87239f09215154f4627fc68f719f709f4ecfc581
GET /exec/ximg.php?fid=14371339 HTTP/1.1
Host: www1.xup.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:55 GMT
content-type: application/png
content-length: 26092
cache-control: public
expires: Sun, 16 Apr 2023 14:17:49 GMT
content-disposition: inline; filename="728X90_B.PNG"
last-modified: Mon, 16 Jan 2023 14:17:50 GMT
cf-cache-status: HIT
age: 155398
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dGlc7mHRuXpDXKfAScZFABxGTTWPCOcpyqbhuIWLiyrjyFYkdK1LxxbXd7PsauySwC4vGywA9WeLVtnFJP66wN8Syfo%2FZb1VS422UejEmStK9lk5or1IXT1RpK0Ltw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d01609850635-LHR
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d69c998302943bbce0f6befa96abcfc7
8b62b4fb9acf89aae2c054d89d1667a9c25d6c3e
ca2c268040d5b5a0a431fd5c6e2b341e34970b8d7bfd60f0a3c8d1607a6c2907
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA2C268040D5B5A0A431FD5C6E2B341E34970B8D7BFD60F0A3C8D1607A6C2907"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5939
Expires: Wed, 08 Feb 2023 12:30:55 GMT
Date: Wed, 08 Feb 2023 10:51:56 GMT
Connection: keep-alive
www.fastcounter.de/fcounter.php?rnd=1675853570214&id=9073&s=&l=en-US&u=&w=1280&h=1024
135.181.76.57200 OK 910 B URL HTTP/2 www.fastcounter.de/fcounter.php?rnd=1675853570214&id=9073&s=&l=en-US&u=&w=1280&h=1024
IP 135.181.76.57:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (547), with CRLF line terminators
Hash 3ffba27bc20750a2a6b166d5ed1f52de
2fcb978332088c3aa981e98d3630ec776e06ec7a
3252a8371c071d876551c3f8b0c9cdc69ac7738eef1fb92f21a2e40e165b1b8c
GET /fcounter.php?rnd=1675853570214&id=9073&s=&l=en-US&u=&w=1280&h=1024 HTTP/1.1
Host: www.fastcounter.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 08 Feb 2023 10:51:56 GMT
content-type: text/javascript;charset=UTF-8
content-length: 910
X-Firefox-Spdy: h2
www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
188.114.96.1200 OK 0 B URL HTTP/2 www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
IP 188.114.96.1:0
GET /dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/ HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: text/html; charset=iso-8859-15
content-security-policy: upgrade-insecure-requests
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IjABEtKMBXsT0nifNxs859FG2nIRS1byPh%2FYfjAOwxe8Pb6jZKOzxdAmzE1O5UUF47MvDgWPxBw8gyZC3iKYepjYP8xv8CpzFImvshhgOw%2BykiybdHhcnlaBsh2z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7963d0047f85b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.xup.in/main.css?v=5
188.114.96.1200 OK 0 B IP 188.114.96.1:0
GET /main.css?v=5 HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:17:59 GMT
etag: W/"63d2a7b7-13e1"
cache-control: max-age=16070400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RpvdHUI6zAf3HCXY0g8g6qCiN9Q07cgzwkE%2FOpSTwWiWDQgvX%2BdFHFqt0PBIl8zZtOm5zr3%2FlCJASvkY5KF15WIy5m8jksLWYwzVx0UAKN769yMUkpHrsLblSbML"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d006cab9b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
linksnappy.com/?ref=142655
104.23.143.24302 Found 0 B URL HTTP/2 linksnappy.com/?ref=142655
IP 104.23.143.24:0
GET /?ref=142655 HTTP/1.1
Host: linksnappy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 10:51:54 GMT
content-type: text/html; charset=UTF-8
set-cookie: Auth=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.linksnappy.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.linksnappy.com
PHPSESSID=iv9bbll6nqnfost360q2tqkgp0; path=/
affiliate=142655; expires=Tue, 05-Dec-2023 10:51:53 GMT; Max-Age=25920000; path=/; domain=.linksnappy.com
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /home
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
alternate-protocol: 443:npn-spdy/3
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7963d00d4a3db51b-OSL
X-Firefox-Spdy: h2
www.xup.in/js/chk.js
188.114.96.1200 OK 0 B IP 188.114.96.1:0
GET /js/chk.js HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: application/javascript
last-modified: Thu, 24 Mar 2022 14:26:13 GMT
etag: W/"623c7f85-35d"
cache-control: max-age=16070400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XxRCG2gEhvKnM9cPjyiBstOmGFj4fpJuYosAX5mUtKQ1%2BeukTM80XzTf%2BHUxl9EgkFVs66srCFM5rjKnaLhB%2BeWiu3UxHZefhNq4N5KUX%2Fz%2BZwh6jKyKX91tItIj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d006daceb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.xup.in/js/images.js
188.114.96.1200 OK 0 B IP 188.114.96.1:0
GET /js/images.js HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: application/javascript
last-modified: Thu, 28 Sep 2017 22:14:09 GMT
etag: W/"59cd7431-58a"
cache-control: max-age=16070400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0qYIAOrcXeQqQ%2FB5SHxRioKe8UNB4JSEJupBa5K%2F4SLHvz%2FAUOU0uZOZFjUEIcxjaH0setjut53S%2BShxOUzUuYpTzqJR4%2F4hVmzxByFhwcCRvARITtg2vpJGFfhF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d006cabdb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.xup.in/favicon.ico
188.114.96.1200 OK 0 B IP 188.114.96.1:0
GET /favicon.ico HTTP/1.1
Host: www.xup.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/dl,52507103/shania_Die_Geissens_Gottverdammte_Philosophen_TV_total.mp4/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:52 GMT
content-type: image/x-icon
last-modified: Thu, 28 Sep 2017 22:14:07 GMT
etag: W/"59cd742f-57e"
cache-control: max-age=16070400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c2EBkbHl71l7skT0QaOOiPqNGRm6qGiOvMFM0uurB0bxvEDQk6VBjSZdgCFFdSZ%2BDpkcMzehVj8veRAgPGu9ie7V1BJ%2B0Dxu%2FtviUVF3FPkcNBFOyx7%2FnrRXUFV6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d0073b79b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
youspacko.com/com/traffic_in.php?bh=728x90&site=4
104.21.44.219200 OK 0 B URL HTTP/2 youspacko.com/com/traffic_in.php?bh=728x90&site=4
IP 104.21.44.219:0
GET /com/traffic_in.php?bh=728x90&site=4 HTTP/1.1
Host: youspacko.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xup.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:53 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: u=1675853513; expires=Wed, 08-Feb-2023 12:51:53 GMT; Max-Age=7200; path=/; domain=.youspacko.com; SameSite=None; secure
site=4; expires=Thu, 09-Feb-2023 10:51:53 GMT; Max-Age=86400; path=/; domain=.youspacko.com; SameSite=None; secure
expires: -1
cache-control: no-cache
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jT%2BM1TB4qrkyX9IYHmnmL0ZH5OLD9h6pajPwTCc5ahBo309Fp4VqW7H9ASVQNBkyYWL1AxzFKWKOzyzKzJ7HObAzET4W20zjWP7BVwkapDwsuGvl6QCf5Jdfe3uEp8jw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7963d007fe8d0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sexei.net/responsive.html
188.114.97.1200 OK 0 B URL HTTP/2 sexei.net/responsive.html
IP 188.114.97.1:0
GET /responsive.html HTTP/1.1
Host: sexei.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 10:51:53 GMT
content-type: text/html
last-modified: Wed, 27 May 2020 14:34:59 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 4512
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vGBU%2FTIzr0LLHIapCQXAC7tuIbtlryN5PB3MEQHstKAmAtTl8psU961kF0mrSy8GRulYGxJ6L%2BysgJQJS36197g4IcyJouopMw7FpW%2FFmy%2BFuAgsW03HYb8CauA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7963d00c0bafb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2