surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt
301 Moved Permanently 0 B URL HTTP/1.1 surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Dec 2022 03:02:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1; path=/
Location: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mxWS%2BKSNU1ttkWt8K8UHzB42Xk2qXn3rxzs721l5HDpCzIL5lkuI4luHEtJHVxzwQ9GQnUVkrIaSfV1Z0BTQbmMykAyJUXQhBmGQ%2BhFBcIwiTlUD%2BDZP6m6Y04TOew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 780f4b9c1a69b4f7-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e717435470c9f4f06b174d7100c6a98f
292150251495b243c384e0c676a258597ba7f4d8
91ce8257662cb8cea9cc3c74cda1d95dba421daa466b0ac231fa433e0c58e6c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91CE8257662CB8CEA9CC3C74CDA1D95DBA421DAA466B0AC231FA433E0C58E6C6"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20274
Expires: Thu, 29 Dec 2022 08:40:04 GMT
Date: Thu, 29 Dec 2022 03:02:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 259d3eba2ac4ea32f0410a59bd01c18a
ab02cd69e6c04e3842ad1778fb0daa6d0e86fddc
0d6ec941dac6d97a0b24c0cf00a5642a4edda68ae5ec8b3019d1ec05f40d2281
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D6EC941DAC6D97A0B24C0CF00A5642A4EDDA68AE5EC8B3019D1EC05F40D2281"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7825
Expires: Thu, 29 Dec 2022 05:12:35 GMT
Date: Thu, 29 Dec 2022 03:02:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 29 Dec 2022 02:35:24 GMT
content-type: application/json
age: 1606
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 428881081ad357fb55af33ebf9d12c16
29b7be72f76da07db4a03fb1bc57ffe16d520a22
9adff7f91b147b0d93166bc4ece0dd31fd19fd8b2c269a6a596a1e902f49a1fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9ADFF7F91B147B0D93166BC4ECE0DD31FD19FD8B2C269A6A596A1E902F49A1FE"
Last-Modified: Wed, 28 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8363
Expires: Thu, 29 Dec 2022 05:21:33 GMT
Date: Thu, 29 Dec 2022 03:02:10 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QTCTRW7HB9Jk6h5o2XUDSRaZyET/pOu8khQYb/37aO3A/yPe0D1m2rMtoH9wv6PIfQwNmMfTEoU=
x-amz-request-id: AT47SK35S56C9GVR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 29 Dec 2022 02:58:35 GMT
age: 215
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
200 OK 21 kB URL HTTP/1.1 surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4620), with CRLF, LF line terminators
Hash 5b9ec4a092f740136a228f2eebaaa04d
43a38fa78e675f9481436b0c5e49017868e4ffdf
069982d0ac4cb83026b547e11466565ff9dc64197f306377aa791043fb14483a
Analyzer Verdict Alert fortinet Phishing
GET /who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/ HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://surefap.org/wp-json/>; rel="https://api.w.org/", <http://surefap.org/?p=45598>; rel=shortlink
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=htKcTmpLY3Ok9vqKkhqlpoWH2ins%2FTrBVPBulIfj7dd%2B%2FPMmnfswCh4BZ2X5Ls1eBg%2B86a3ADbVfN1VEnd4tveDVlI2%2BNY6vWadDm8lPueX8I%2BbIzTJeplRUUx6Hng%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 780f4b9e3b5ab4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:10 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
200 OK 626 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 10cbc450720b6e3661dc14177f6095bb
6898cb7b1725a4224a6e7fc6cfcf8dc634065608
2ee55a9a2b2f25dfbad0725e2b44a5ea758516c8589f2f0c2fe8c946287407af
GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iwyBcrwUC9uuTcvSMi2TTrL23CR1JUsbDamqQCubVXw0Zm3r46XaMrHQjyBlBoNttKvW45Bhgwl%2FJPU9Ff6RgxTVE4FvYwSVWaJDXd%2B8m2QFEBwIVG51%2Bryfwg%2FUJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9f9c04b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
200 OK 1.6 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
IP
File type ASCII text, with CRLF line terminators
Hash 3fcb0d88088f0e55c490573d9283c88a
6cfae6065bab40117fd241c536630c1c934c033c
1f91f493e9731afedede6c0626959993538cf13569434c5d0639273886b04075
GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FFTKi0olED5f%2FIVP1nabRsdisxF5lK7LvqOFX%2FKz%2B%2FKZvkaUeQMNrLa%2BxAJs5Codp3CVxY36Du54SocKLe7N7%2FPbHUS8SW%2BwLixD7pCRTFIcvmxksegDvy0T0OWhng%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9f9f79b4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/style.css
200 OK 6.7 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/style.css
IP
Hash 8754f3c381e72b8d256a0f26b09663e1
3c89aea4ebfadeb9791f9fe7fbe37d57952b3899
f70001c43657a392df622ad888a4cb3a62b4599fac8c6bfba3dd1a365be05646
GET /wp-content/themes/FinanceDesk/style.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 13 Feb 2021 23:55:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LnBSBgHnQ2I6dJPacTEU%2B8m%2B4ZXFHg0EFlD5Jb%2F%2F7DVce%2BPCK6Ws%2ByFtDSW%2Bu6dl8jfrZwam6sieDBqIyszx%2FGZe3HAFDw%2F%2BbCIiaRQngtb1oidNnFIYpGTo%2B4wkUA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9f9c05b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
200 OK 4.3 kB URL HTTP/1.1 surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash acceec62f949a07f1d1e07d4e88c0b76
b19d22f7b838357798be6a17ad9f30b4f114c41e
bbed1144be64bc962ce6ae0e94a8176e566ce7b3bfea999419de8da948b97219
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iyzPdcxTA5khuYqSZCyRj6DDkW%2BF5arwNOH69DujnuqCanb6cGoKWkWlGu5MBdWPPOM5wiAMYfg01xBqGZTtO6BTt434c0WHrVzByvmZ3ZEDxOSh0y8Fm6Jcq9HqWw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fa9491c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
200 OK 521 B URL HTTP/1.1 surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
IP
Hash 2291cad033de47da5bf45d44d3fb1c09
ef8ed11bba4cd1b1f649bbd3d64f79f1702e0851
a67c9a95aebe4a4dd8839404fdd77a4ee64f7a65e5859a1dd2255379ddf80235
GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVB8GeSavo21i6wNcRzCAK9MBg4fj%2BgEdK60IWwiPCaXh%2B2oxwUYztdk0aR40R5O%2B38kMZZp0eGgG6k2Dby%2BYOLAlS%2FtN7FOw1PcuiIcyFWvH%2BZxpo1HVgAbghttFg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9faa6e0afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
200 OK 464 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
IP
Hash e4a982df8ef82dfca6e739af2f2c70c9
0ec97ae743cb03849eee9c6f1c0539eec7c737ac
c9f369c77f62349d1a42f1e9ed7b3bd82c29ac23a13cda519eb9cb79689271a9
GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IoxP8jxpnf3CU%2FubWpiH5xrApSslCIg2X68yXlaG8izdc8ahajO6V6rHZMDsVV4pcU%2FS4J0V5mCAn1PME2verdF3MRFniGXYW0uKA9dEygqRkWTddYtXIoU%2Buv1Hag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9faf7fb4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
200 OK 433 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
IP
Hash c459cce9b7bfe8874065f27071c0fa5d
9c48040bd8aed19832c1c6093ddb4d4adef71bda
6b41fda0c20e0aa799c788122491afb3ac541bbe574f4e492d13168a8b2d42ad
GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WpiCUQcZ5ydTAa6J98e9tDXZSAyIbZQiPC%2BY0AuhrVFu8zCf4ksvhJSdpmXOC%2Fa6rsYHfQwkJoO%2BdkDipRjL4LGpjgBI6FEGWYGqGdbqJla%2FxjuN3kI551zqiiB81w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fa939b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
IP
File type ASCII text, with very long lines (10082)
Hash ec17f8a80c23d0b8fc814fcbdb52653e
512c64d495ed700b16d5ccd79a753dd8cfd118e4
883e795f544da6c4b3b39643b9c84aa49d86f0bdeb511de4a790f63152fd89e8
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ri2CKs%2FGvkTKPBmoQQXPVSu6GUMA3WxbG%2FRugzNfzPVRzd%2Fk6i8Ti%2ByLnuGK8NobsABbSgCMzdqAROgmRm7CVtcm9uxTeQFXfHoUCuX8Vs5OhfG3NU7%2FZpI630QAXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fbc14b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
200 OK 489 B URL HTTP/1.1 surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
IP
File type ASCII text, with CRLF line terminators
Hash c8ad5eb64f1140cbe2df28519b376aa2
2782b2ec1b9dd5f9a25eec3b2f7f53de9a3b83c0
766695e386f4d4860ded979bf96717fa000ba7a1da95d900a48f5ddbeff95344
GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OZIb0gbr3hZPRL6vvY8A5Bk0vWjB0So%2B%2BXKAFfWOCZHFQPIW4DJ1Bdtti30W8zF539ZvBFnPwwl8zxPjihRVr1KV4Hvj4s%2BM3WS79%2BfBK%2B5s692%2BKGsXPMt%2FKg4ZTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fac11b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 2f89b08855471c7476435ce0bec33ba7
970533f152623df03b5fc6fb793b21889e4e0349
d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yS%2Bb%2FFOUcLfQVqwnmgkX2iecmPy%2BemUBW4E0NmdyS4uo46ttrsrdT1cn9eHkw5KofzrZw9dyhsLFbvV5%2Fsv3YolbovqPZw3OwX5CnX8E%2FzPojJxKz9yJ16er13edKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fba700afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
200 OK 1.5 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
IP
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fbwqpaaIl%2F2%2FKi%2FBWpWQjD6lXlpjeeGEHsZGt1sLRiWaahTVxkqPq4VsH4qn0VoqZLPmRPiE6xA1P41lHzhEnS0iz5q%2BpPdSroWPecJQFQgEnjqsBA5VqwdrD0u5GQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fbf80b4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 9805483db0b3d5fd0639186799348f34
eb28f7ec752038cbd9425c66b54c339ad1236695
9dca4af372f7b1d8d1af5a3c18ed6a827e4f8f358e8404b64fa7a2ff961b5c60
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u3upB7TB65NcxyAtjdEJKZQWHsnOJx7zeaCPWCGt09OEI7ZGfmhNT9EFGlxgifa6gtdgdQveBRujmaQv3bitNrhz9NtvOGuN26HOsTjaTc%2FUI%2BrKcezmS7VIXfPRqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fb94d1c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
200 OK 831 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
IP
Hash e9dddc3f35ae0107e1cf0cf680a251a7
26e702e6ed363dbd7508cdfaebfb3c37b51e966b
3c114642de150576617c3e8c9a5ca94d0f351e0d653a069bb269c444fdf80bfd
GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pgflLEKS5biJhlRHhp6quo3HdNgtr%2FjX6luGgqC9NJimsU8uy3QqYojuQLl%2Bdz%2BgmUA%2B7igS5p72q56dzcewlldpcXUPW%2FVwVdwvg6GQRSLpfLsU18jc7ztwrmtr8g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4b9fb945b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/ljekdimdzcz.php
200 OK 11 kB URL HTTP/1.1 surefap.org/ljekdimdzcz.php
IP
File type ASCII text, with very long lines (10335)
Hash a89bec0cbe35438775a00f63069b201b
39ad47b38ef4a6a854b1ec6bbc72778ecc2bec87
af59d30ece1cdeea3b5713bfd51977717d8add7ccb6c5a352ddde1dc320776d0
GET /ljekdimdzcz.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=120
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q7opGE5XAqefr%2FG2W39X7Fwb2GkR7ZJ206MFw9Cp3cvfVTeXruvYiWn%2BfEOvwOPXiKszyFDbIjpMOCncKGaiKSGxn%2B1QBZkFB48SjhBFgZSVhOmfvPfH2cpgLp%2Bglg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 780f4b9fbc16b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 1e483d25aa3a2c769c7e680eb75b52a3
2dfe501fc81cd6939bd014cedb41af85b4e3c7af
be1b058eb9e3fef483e425718456e8bc58fda7d4a81de0d6e794b1e03dfdbd01
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LHdOa6XVv8eRfDOEk0ky%2Fnm1ll4T4Q9cjTvjrKhzcwR4wbHC9%2FTTAsq2fKZOwifRmpj8ACRb47bvhkNkliLxwNcRp8PVfSX0db35wlpKmAdHViNQ5OrMhVLrr%2FaG%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba009671c06-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
200 OK 65 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a80cc46f72d3fb004dbe75ccafd776b
e6e9764bcef6edc5242d61e7b9f740115a57b9cf
41ded72e1e0bdf063ac95b32f15599a553f244fd0e300d1997e0caf3e76142d2
GET /wp-content/uploads/wordpress-popular-posts/5188-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/png
Content-Length: 64971
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tfvdqc4lkMTP%2FoSJO%2Fybi%2FTQCSCgimcTvOrUMpYOapPhkDMVdRdUGyCdtOTZfINDRx2eFk%2FRy4nUvo812byBwUJDHBW%2BGx1nrshkDOfeUvhGg%2FKVEUrgI8wXnBgi2A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba01c3cb4f7-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
200 OK 96 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash af0cbbc54929fe5b3717ac2ac86081b9
e4426f5722c2f1c50aef206b49809c881f933883
d725b5470eb89f76a72a0367b22eb957e862d6518cfc79bc1b03b6331c641cfd
GET /wp-content/uploads/wordpress-popular-posts/36493-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/png
Content-Length: 95698
Connection: keep-alive
Last-Modified: Sat, 08 Feb 2020 05:34:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WsrHGez4TqbdR8L7RMKxSe5yphOhsKD5SqW%2FvIeGSLeHSAF6F7zLwt429M%2F%2FUuoA7YpWjElp8XoJHPDjf%2BoQ%2BDSi4%2FyGgq2IeV40C5sfAC%2FqAlwuF%2BRpuzcEHa1D7w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba019751c06-OSL
alt-svc: h2=":443"; ma=60
cdn.o333o.com/asg_embed.js
200 OK 52 kB URL HTTP/1.1 cdn.o333o.com/asg_embed.js
IP
File type Unicode text, UTF-8 text, with very long lines (65467), with no line terminators
Hash 03be5925c6d050828c8e8079238a2c54
08d9032963f56800172d1b84793e426da395080c
cc1f8193215d3894462d8afc8abe2f67a9f7c6637d7b8c2764bd71c556ca10f4
GET /asg_embed.js HTTP/1.1
Host: cdn.o333o.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51530
Content-Type: application/javascript
Last-Modified: Tue, 13 Dec 2022 09:50:49 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "63984af9-c94a"
Cache-Control: max-age=315360000, public
X-HW: 1672282931.dop228.sk1.t,1672282931.cds239.sk1.c
Access-Control-Allow-Origin: *
surefap.org/wp-content/uploads/2020/12/SureFap.org-Jessica-Rabbit-Pigmans-Captive-Part-2-page00-Cover27460158-lq-150x150.jpg
200 OK 7.3 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Jessica-Rabbit-Pigmans-Captive-Part-2-page00-Cover27460158-lq-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 150x150, components 3\012- data
Hash c776be4a9d395ce61a9ac2b75dfafe32
ad10afd50d70ae6101dc09f5413dcd400fbef1c6
8d0d604653f47b16064bfec6c9787978471514b99a1ec831eaa28706b7ce04b2
GET /wp-content/uploads/2020/12/SureFap.org-Jessica-Rabbit-Pigmans-Captive-Part-2-page00-Cover27460158-lq-150x150.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 7259
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:30:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dNqN%2BMXJjaGgw%2FSQbbutUcJXX9w5ivKIgatv1QL5%2FB9ax1ay3rZFUE0dW4ygzXtIQDMYUgyU35ikk7tANKyOBGkTFr1Ko4Uc60Tl%2FZ6BP15qZMkevAU%2B4DTDJ65lnw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba00f9bb4f1-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/comment-reply.min.js?ver=5.0.16
200 OK 583 B URL HTTP/1.1 surefap.org/wp-includes/js/comment-reply.min.js?ver=5.0.16
IP
File type ASCII text, with very long lines (1076), with no line terminators
Hash 7c59d55007a415c1ebe1a0acd61192d4
c604c317e6949fd86db7326b4aab9a6b4c965591
268d7f7f3c22c3cafd5cc100e4a06e052c329d2d8da2f9b4fe7f93550bbda889
GET /wp-includes/js/comment-reply.min.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lDtFwA8OP4GeZ5TVsSNnPuoabp1Pt356Zb15JEwO8zaXbe1x48MH1d%2BXLByexbf885LcbhV4ZYZWuT0c%2BXYzr9PR0Fvt7f5CGdMVCBQ7FfESVqxB2JGB86wX%2FuzARA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba04c54b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
200 OK 748 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
IP
File type ASCII text, with very long lines (516)
Hash a916ec8951d8cb10ee6fdfecaa3eae84
0f5ed720b36bf6d0474bfdea0fe97ce2f4c28296
eadd127040367bb43fe787cece1d4e624cb6933c31e20b8b73611a79bdd3b15b
GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BwPPaA7%2FuFqd3LbWs6J241h6f0yFLd1K0YmW%2Fvk3PpA%2FB%2B0zqsXCdTrZWuh45qC81r8PkQrz6v3ELRp3C%2FAMUf3PSOs1HjltAVXGruvAFN%2FSZ4kEMd%2BAjqyv12zhLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba089981c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
200 OK 457 B URL HTTP/1.1 surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (1087), with no line terminators
Hash 1fa25d83bb5be8564841713f48e94332
dc5921fc9171ae8f69a52e1f00ea1c43ae3ea8d2
da9e1e7235fb597df5fc429718a771bc8431810ea07f7d2c40dba0b56ccd8cf7
GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VPeLlbMv35V4VFenBR9RRYGmDAqKnJXzHdBf3stdlqgSUu2BauRSj8rkydtLzH5vk8N0FCdRHEPfa6kP89VgWTfcl0UiVJA8IUNkWSqbutWut1SBZKxVeoRGy9BXuw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba08fbeb4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
200 OK 743 B URL HTTP/1.1 surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash b146105040f6faa62806b35ad455d121
14aa49ed4f29b666221a8de3fd17f04455f12b15
05f4d51649be6878352af6843f9a5ffc14bb96ca7a02db21a35a14f6a150b004
GET /wp-includes/js/wp-embed.min.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3510
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=33xGmp3b4ecAEhL22Nc4eglgfhmjgcB%2FJODEaOhC%2FoWtmH1VItJtRixssBgTpIdHVhBLv%2FFRowuqppANjUdJq2FnPJ0%2FU%2FecN3qE%2FvZDCZtZziQ7kLA0XsVWMSaN3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba08c6bb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2021/09/SureFap.org-Bulma-x-Beerus-A-Gods-Debt-Portuguese-Color-page00-Cover-29041587-lq-150x150.jpg
200 OK 5.9 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Bulma-x-Beerus-A-Gods-Debt-Portuguese-Color-page00-Cover-29041587-lq-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 150x150, components 3\012- data
Hash 04bebfeda6ae708895735febe4972ca0
15930cee5470eb52bdfaef7ae4e3f04810e10a06
8ab6dc1f6eedc5e09c4482d73aea2208421bc782d5fbe7f3c4ca095d750ec464
GET /wp-content/uploads/2021/09/SureFap.org-Bulma-x-Beerus-A-Gods-Debt-Portuguese-Color-page00-Cover-29041587-lq-150x150.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 5944
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 20:03:55 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Usu1%2BBGna2l7LX9mXOFf2u58V9wy3Tg3Q9Quvccl1LmRB2SumwGo1LDzVs%2BgaskZkxpjk3iGyc7Xb7eGPkRUt0fhXwqvw3C%2FrtUr%2BQnjE0R2XpBH5gI5WsdPyguZw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba00971b500-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/04/Bulma-x-Beerus-A-Gods-Debt-English-Color-page00-Cover-Gotofap.tk-84823876-150x150.jpg
200 OK 5.9 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/04/Bulma-x-Beerus-A-Gods-Debt-English-Color-page00-Cover-Gotofap.tk-84823876-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 150x150, components 3\012- data
Hash d2a957f5c8abc5be1ac70b7d6fed0031
3670f26a6422dc0786781a00f9896af929cd255c
d41f19a0bb7fa7dc828a7632e414cc33e559056a272be40825326ae51974fa54
GET /wp-content/uploads/2020/04/Bulma-x-Beerus-A-Gods-Debt-English-Color-page00-Cover-Gotofap.tk-84823876-150x150.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 5942
Connection: keep-alive
Last-Modified: Fri, 10 Apr 2020 10:35:09 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=40rw94IDugj%2BauhgfBNDpVHvgO%2F8RdFcHnGIQuLqcJ%2BWLZ3gPvAuM86DWlnJE9FaZXenkKKGZezdPblSb6ap0Wfl4iHKXmWUhg4QMh3wdoejfpnhEKwKbCrCPo5r%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba00c3bb4f7-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 794630798ece5fdc7622c5736cfc8c4c
b88d8c63c8c85072202fb76e4106789df8394ff3
aa8225bea6518ce7a35b1dcdd5ae62b217b5720d9d9143f9ae4360e8614c0c18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
200 OK 8.6 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 269x170, components 3\012- data
Hash dc9802a6d8bb38c758f2e602de516de3
60809f2f96869416259893a43c91fe392f3a3a4d
789981c56beb944e93e129833632dd5b53e97012360fbf0f7b4e77c399996c05
GET /wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 8613
Connection: keep-alive
Last-Modified: Sun, 09 Oct 2022 20:09:59 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tIcgaLQWiqs1FDc%2BOFuS6JksihhPQfbv2l%2F7iWV78qFF1p%2BcdaGdQyfBigSXxuErkuGEGiBuC5ZsCgQ3J01CO%2FAilSmftP46ZZPwx%2Bay7LTEdhtlMaY2gtaIr4jwDA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba149db1c06-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/7892-featured-269x170.png
200 OK 39 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/7892-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash df37bfdd76e60448a109bcac32457921
146ada8302aa9649b64793b6222ea5deed19ac40
5bd6b016ef643f76009a92adc50675dbb079111bb41cd3eaf123eac264aee1ad
GET /wp-content/uploads/wordpress-popular-posts/7892-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/png
Content-Length: 38920
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 15:04:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o5VEVqPkAz%2BSsJMPN9742dUzKbvLIeyiEoNUN7HoMqy%2FwdzEkBFqRD0dedmHQpNm%2FzCWx43yY177gjRTNzcFN8y5LHKcGIkhkc46%2F9Sou2vaiurN8sLY0U0ajGYgQA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba14cd8b4f7-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/821-featured-269x170.jpg
200 OK 9.7 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/821-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 269x170, components 3\012- data
Hash fa161b9807da60f21596184c305a45d7
c9fb93e39bd9c4ee53eff5c5ab053ff0f4c3099a
9d83a3a8960ffc4bf7575b484635c269139d0d81ad60cf131dfecdc780256be7
GET /wp-content/uploads/wordpress-popular-posts/821-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 9694
Connection: keep-alive
Last-Modified: Mon, 20 Apr 2020 14:48:53 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DumYJZGB5HkhLgn%2Bt3qwI2sLILiM%2BvwWGdBvwgrUk3pVufv48Tiym7hkoN%2FoFN%2FjiLyyG8BxgYgWHbVYdd6X8ONnliG5cBlKorvVrX4COc8K2ppCl9vvv%2FIAgmtXuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba14a08b500-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
200 OK 270 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3\012- data
Size 270 kB (269711 bytes)
Hash d30a4392660ba150ffcb590ecf3b959f
917018a795e409303eecc5e560c2cc4db2785978
5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa
GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 269711
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4JHxmZ8Ike1USGajw6aL6V1USd25fRYHSJ8Df6E6HSKjlHb4Vyg6fk5HzW4AH6TuDr4g1FpFjYTrB%2BGGjXoX41Gt18nwow9cD17ajtBXDou2yxjmS4Wy9LCU7cKntA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba18ce9b4f7-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 794630798ece5fdc7622c5736cfc8c4c
b88d8c63c8c85072202fb76e4106789df8394ff3
aa8225bea6518ce7a35b1dcdd5ae62b217b5720d9d9143f9ae4360e8614c0c18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
surefap.org/wp-content/uploads/2021/09/SureFap.org-Gohan-Best-Years-Android-18s-Life-Debt-English-page00-Cover-49712650-1414x2000-150x150.jpg
200 OK 8.0 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Gohan-Best-Years-Android-18s-Life-Debt-English-page00-Cover-49712650-1414x2000-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 150x150, components 3\012- data
Hash e436ed1d48384c4782025b33c1af1b70
997a21b617bc711fcc3b8280498481017d4cea18
0a2b878809d7ce2dffdd53caabfae75dd1da6b7f2be24d8edffe5702dec1ed50
GET /wp-content/uploads/2021/09/SureFap.org-Gohan-Best-Years-Android-18s-Life-Debt-English-page00-Cover-49712650-1414x2000-150x150.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 8009
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 19:34:35 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FAmLHRchbm504LUbQ3%2BitwavAhPPs%2BdQFEdA9XH76E%2Fhjg%2BjXSN9rCcMqAN2HyyHBGIyoJPIJe8nWT27RKcvbISmRw9TgMkh0KltlQWX62BjxAWcpqmvouRe%2FnY3gg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba14858b4f1-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Jessica-Rubs-Mans-Balls-Between-Her-BIG-Boobs-Sucks-His-Dick-page0123698751-lq-150x150.png
200 OK 6.3 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Jessica-Rubs-Mans-Balls-Between-Her-BIG-Boobs-Sucks-His-Dick-page0123698751-lq-150x150.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 150x150, components 3\012- data
Hash 9028c8c20e2d6280e42d166dfc64d363
3bd451de9fd306fb6039e1830e530b18e76ea15b
735a96f073a4b3bf20eb428f2870e864ee836bf033b882a21b1987c7a4a38255
GET /wp-content/uploads/2020/12/SureFap.org-Jessica-Rubs-Mans-Balls-Between-Her-BIG-Boobs-Sucks-His-Dick-page0123698751-lq-150x150.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/png
Content-Length: 6344
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 13:53:49 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aTewXyo3gP5KO31sy6IhyLVPPOq8OfVdCMMOePr4cr5vbFIZzU8GQerVJ30tLQJgV%2FJGrWyI3NY%2BP0gq8OgHy2HYWX2%2BP5ZVJhfw6xYb5SAIWWgRCSYJyoR9fWRsKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba14cd7b4f7-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/11/24/ecd4762cdddeeebabcd2e27526096c5d.md.jpg
200 OK 21 kB URL HTTP/2 4tymode.win/images/2020/11/24/ecd4762cdddeeebabcd2e27526096c5d.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a80598d359e96422ddd11f4318a14bf4
dba029dade0e15d320520f20b8f40c1593912505
1519eed6945bf357c94dee83cfc458af81cab90c7353ccaf5c61a8e87ef55210
GET /images/2020/11/24/ecd4762cdddeeebabcd2e27526096c5d.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:42 GMT
accept-ranges: bytes
content-length: 20732
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-admin/admin-ajax.php
200 OK 67 B URL HTTP/1.1 surefap.org/wp-admin/admin-ajax.php
IP
File type ASCII text, with no line terminators
Hash 9d8239f32d810052fbec2635a22af3ca
127611a371cebbfe2170a2b16a0cc6c8e11866ff
20c4970706c20662538c9d3c50ecb5a980c51bac533bc93b1ca03feb5cf21c78
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 54
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Pragma: no-cache
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ARCvQhK%2F7Zcgz7g9eP9TW%2FZGGMTXv5eDcbEKXEYRMuJD8Ip4PtOMv%2BTJYHnYp6HbBup8TPc35ClbRnU3VYtEVnL75Yw9e8kAcx12ihKvBIXPCB9mhBB3zgHhHQrt%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 780f4ba17a1bb500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/11/24/1ebcff9fc5d1eef5c9eabf8a65ca42eb.md.jpg
200 OK 21 kB URL HTTP/2 4tymode.win/images/2020/11/24/1ebcff9fc5d1eef5c9eabf8a65ca42eb.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 5b35b4742e0269593c84bcd5144530b9
7a1ef26c346689a4b1234349f103951c2baa758e
c3abc724a5148b021889047775b19ddfd22c3234cfbeb45f0fad2764601c8c96
GET /images/2020/11/24/1ebcff9fc5d1eef5c9eabf8a65ca42eb.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:43 GMT
accept-ranges: bytes
content-length: 21086
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/4ab81568f727f90537fc19b803e735e8.md.jpg
200 OK 22 kB URL HTTP/2 4tymode.win/images/2020/11/24/4ab81568f727f90537fc19b803e735e8.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 25e1d2117be10ad329802c5438d0bb55
4c8cabf7ad6635ce2e4b0efe276755a4e11a5ee3
1175d036e836334ce43c42c7e6dd2f0ec5d2f03876ad079736d98d056dd27285
GET /images/2020/11/24/4ab81568f727f90537fc19b803e735e8.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:43 GMT
accept-ranges: bytes
content-length: 21697
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/c3b3aa9ad68a456c60e6acf7326b0985.md.jpg
200 OK 21 kB URL HTTP/2 4tymode.win/images/2020/11/24/c3b3aa9ad68a456c60e6acf7326b0985.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 0fd1de6bd2e4e7545736ab9dc800aa7d
6db837f610ded8537bdfb0aa75a9a1ce80b39fff
659a3d0bc916ea0aa799025a3cc28c088e76925f3f769d7e48ddeb1712ca4016
GET /images/2020/11/24/c3b3aa9ad68a456c60e6acf7326b0985.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:44 GMT
accept-ranges: bytes
content-length: 21344
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/379aa7e5361ba339718e5266a258b0cf.md.jpg
200 OK 24 kB URL HTTP/2 4tymode.win/images/2020/11/24/379aa7e5361ba339718e5266a258b0cf.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 3338e90421386b3e608277c533e8379b
2a037de920bce1505e8c3536202454dad99bad22
9d5a610f9f84c0db19799e63067bb06475d3cc1ee48223ae257093bde9e67cef
GET /images/2020/11/24/379aa7e5361ba339718e5266a258b0cf.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:42 GMT
accept-ranges: bytes
content-length: 24531
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/6119d20cc4919f541e8ac432912fbd1d.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/6119d20cc4919f541e8ac432912fbd1d.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 543275824b04f3817768d2cbe6a7dd4c
73a354e818cc54cfc5052faf480c1478ef720833
c1835af155f1784102b514420f13184a16f00b5391faf2d038ead7d8179b2c9f
GET /images/2020/11/24/6119d20cc4919f541e8ac432912fbd1d.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:43 GMT
accept-ranges: bytes
content-length: 24643
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2020/12/SureFap.org-Jessica-Rabbit-In-Originale-Sim-Russian-page00-Cover89716325-lq-150x150.jpg
200 OK 5.6 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Jessica-Rabbit-In-Originale-Sim-Russian-page00-Cover89716325-lq-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 150x150, components 3\012- data
Hash afd0ec2a664f12ca06a82a7378498405
10919d19f2eac9de162ab61a2b33870dc88bcd65
b285c182ef8ac399c86eb657226a27dc6f7dbba35a1db60fe9cc0a4e3ca8684a
GET /wp-content/uploads/2020/12/SureFap.org-Jessica-Rabbit-In-Originale-Sim-Russian-page00-Cover89716325-lq-150x150.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 5565
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:41:13 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YW2iJDdJj2paEvdlGuyNLwVoyCAaUsk402eg32fUM0JB1s5%2FYA1tLovje%2B4kQfgezDFrnhw8hO9qvYwiWhcBHs6c%2F4OTaJSaY6M5fI2mA8COZHzczGMOvd7SYuey7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba159e11c06-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/11/24/c5edb1d7ae42dc4b3dc267b4fb495b4d.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/c5edb1d7ae42dc4b3dc267b4fb495b4d.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a5a6f354ba278a3e52ece57cd8e9a8e5
dddbe49eac076a1c96e09052130d62372864b84f
59ebef5a8e302793162dddd9add176437ebf1200bb6374bb77ff9784ae50cc32
GET /images/2020/11/24/c5edb1d7ae42dc4b3dc267b4fb495b4d.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:44 GMT
accept-ranges: bytes
content-length: 25186
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/80dbc9ca8ce58063af53f34c8e4f4234.md.jpg
200 OK 26 kB URL HTTP/2 4tymode.win/images/2020/11/24/80dbc9ca8ce58063af53f34c8e4f4234.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 1e792511d87660dbe3677e69fd20b286
d374a8673d5580762d2b91a55283c6a7c2f3734f
3a40fa9e7c8622905a6ece6756921e9d56aecdaf9b686c88435b0c2bc412a313
GET /images/2020/11/24/80dbc9ca8ce58063af53f34c8e4f4234.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:44 GMT
accept-ranges: bytes
content-length: 26479
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
a.labadena.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 0 B URL HTTP/1.1 a.labadena.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=AvGLIE3KxZfdYgomkOKW; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
a.labadena.com/api/spots/352013?p=1&s1=%subid1%&kw=
200 OK 0 B URL HTTP/1.1 a.labadena.com/api/spots/352013?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/352013?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=C2XDIVxl3pOigZi03pl1; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
a.labadena.com/api/spots/303160?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.labadena.com/api/spots/303160?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash a56dc88578d2076b08cb07fa63dfb822
12536da87b0d3a223c0b87b873a7a23a543d641e
1dc98ad5f70e45c35f71b9e9992d6dd1ff75641c71b4295163caca56cda52009
GET /api/spots/303160?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=zLJW8s04QfuNnIU9ect8; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
200 OK 121 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
IP
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash f395c59b99ad9effdd18186e3416b83f
31fa705e99763fd0d6183cf20c99e99605a8987f
9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632
GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/png
Content-Length: 121
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oq%2Bcc1Jns6fTl9ZmRIS5UEWei%2FJ5tWfTvKFuXXO3FIIGTfDB07z8Do11XrhKwhRreBWxETLEXdCNnnNq7QNvK3s7W8LRbTtReQxkmCqgLCo86Pd7iVRA6QI4NsdWBw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba22a121c06-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 107c7b24cc9711281977c9e9094da7af
18e6f30a0dbc072380e414236b2a8296e7a7f6f6
c8a97836b9b198c55753dd8e72c0ae03fe473f02f098deb2c4145b677d19be08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.labadena.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.labadena.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 5382313dd577d96b8310fe5d59fbb32e
44298d86e514586b2e471caa38c41d212cc08301
feeb5bca8cfb7fd73657dee71b1ae17e199ada38e3911df167e271a6574a75b5
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=eOcKlI0C56NbHYPkYBbz; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://surefap.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Dec 2022 21:18:07 GMT
expires: Tue, 26 Dec 2023 21:18:07 GMT
cache-control: public, max-age=31536000
age: 193444
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/7a882d72b83f03de142c1f39917310db.md.jpg
200 OK 22 kB URL HTTP/2 4tymode.win/images/2020/11/24/7a882d72b83f03de142c1f39917310db.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 9f8e3df973ff1f97bda21ae259dd095e
e5d96b54e95026ad87156ccba60486f07f526b97
a54cab9d29610f7a9f419de48e97aef4b0f9340b312acb6793ea3bc61ab7fbde
GET /images/2020/11/24/7a882d72b83f03de142c1f39917310db.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:47 GMT
accept-ranges: bytes
content-length: 21923
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/84763f60da454167b6466920ba002459.md.jpg
200 OK 23 kB URL HTTP/2 4tymode.win/images/2020/11/24/84763f60da454167b6466920ba002459.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash d1d5528bbbfbff71231fdbf802b4be31
7426f58b72fd48ed8f7cc9069d11e04cc55a193c
f54b3631797ec37e72b117add1cba06c2dcd2473ace576b835becddca74306af
GET /images/2020/11/24/84763f60da454167b6466920ba002459.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:47 GMT
accept-ranges: bytes
content-length: 23428
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/79b62fd1ccfcbfcdaf435a03d84c93ef.md.jpg
200 OK 23 kB URL HTTP/2 4tymode.win/images/2020/11/24/79b62fd1ccfcbfcdaf435a03d84c93ef.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 855276b018b4cc0577c7e1f924f03d7c
03caaad82ffdccf7f4f435d1acb5114cc6bc4dae
d5e77c3f099068900c79d26f8b6ce47f609227ea4ddaf315ce1477b202c873ff
GET /images/2020/11/24/79b62fd1ccfcbfcdaf435a03d84c93ef.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:45 GMT
accept-ranges: bytes
content-length: 23420
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/d8049cbc31e368e27471bdfdf11f16ef.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/d8049cbc31e368e27471bdfdf11f16ef.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash c835850f51d47d407f19400f34b0778b
12d21ecfcd1619615e5c33615b3bbd4f0522c7b1
b6a5605786768af17c81d9f946ee313744e825d0f652a17672d10ed985ccdb41
GET /images/2020/11/24/d8049cbc31e368e27471bdfdf11f16ef.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:48 GMT
accept-ranges: bytes
content-length: 25023
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/46b98e10bec653d04670e7367a7f4039.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/46b98e10bec653d04670e7367a7f4039.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash adfe4b6d5630921d55f0cb5566429ec4
38188e3536621ce77d7f82e6bba78dd1c29ce81f
ddcca8d5f2c925f167667e9066aaa957ca53ce4ec30a4f2c9b1fafbc41dec90d
GET /images/2020/11/24/46b98e10bec653d04670e7367a7f4039.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:47 GMT
accept-ranges: bytes
content-length: 25436
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/dd26d0100e90c8072ba45cf22ab94d81.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/dd26d0100e90c8072ba45cf22ab94d81.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 13248372d99cd8b782b78709db0d3790
b814e7362969c08500b84b01bc2bd7a8c89e99c4
ad95f5c00331c9833ff2aa6dd9bc5167a9a7b2c7f5f78d686931f65680f332d1
GET /images/2020/11/24/dd26d0100e90c8072ba45cf22ab94d81.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:45 GMT
accept-ranges: bytes
content-length: 24637
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/91e27c50a2ff26f018a26ecee917bf6d.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/91e27c50a2ff26f018a26ecee917bf6d.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 7fca3f25ba9d8ede9fe06cb0fe874a1a
97011559cdecfb0b4e3e4db1ab6011c5e7682f9e
bb9be2b46663736a555085229508853ed4d5e2912cab1d005fdac32676221f75
GET /images/2020/11/24/91e27c50a2ff26f018a26ecee917bf6d.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:48 GMT
accept-ranges: bytes
content-length: 25065
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/19786748f838ea1ff74194e6eaa0ec29.md.jpg
200 OK 25 kB URL HTTP/2 4tymode.win/images/2020/11/24/19786748f838ea1ff74194e6eaa0ec29.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 15df167c3a80b22724f59229e645a8e2
6886d604119e1a74c36f8e4aa21fa1d14c65e265
31b3c7ba463e976aa8b070f2d3f20149f17cc15246892312fd1197347d061693
GET /images/2020/11/24/19786748f838ea1ff74194e6eaa0ec29.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:46 GMT
accept-ranges: bytes
content-length: 24828
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/3e0fa20d1ab17e0da651aa0cfecf53f2.md.jpg
200 OK 27 kB URL HTTP/2 4tymode.win/images/2020/11/24/3e0fa20d1ab17e0da651aa0cfecf53f2.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 23b5cc9bce12b7a7538c255eb058d83a
deb2ffa35da777121fe11402f47c8940b3e0677e
3208b70952aca4529d53226acb097f8af95c9071ac488582c8bab7d32b0141a3
GET /images/2020/11/24/3e0fa20d1ab17e0da651aa0cfecf53f2.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:49 GMT
accept-ranges: bytes
content-length: 27033
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/43d25c20b744b3bf5d7aa9cfff6738de.md.jpg
200 OK 27 kB URL HTTP/2 4tymode.win/images/2020/11/24/43d25c20b744b3bf5d7aa9cfff6738de.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 643853b64b919beae722a5bdaa7c07de
28a53146640405fea53e297d99585e983b0951e4
0e4ca1d8f4ebfc1cb34d9588375e45df43dffb637fa9244c161874151b0d88a0
GET /images/2020/11/24/43d25c20b744b3bf5d7aa9cfff6738de.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:45 GMT
accept-ranges: bytes
content-length: 26916
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/3eb04cb7e789912da90068886533e347.md.jpg
200 OK 26 kB URL HTTP/2 4tymode.win/images/2020/11/24/3eb04cb7e789912da90068886533e347.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash c9d883e3fa17537c27946a1937679888
13f2b4b83e1940915a8321eb2832937e3ee171c2
8afc0c861a7c7bf2573cac44086903dcc08876bbd482e7f876e592828153ea83
GET /images/2020/11/24/3eb04cb7e789912da90068886533e347.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:42 GMT
accept-ranges: bytes
content-length: 26296
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/a74f4f7f7eade63b2489886e655f75c9.md.jpg
200 OK 27 kB URL HTTP/2 4tymode.win/images/2020/11/24/a74f4f7f7eade63b2489886e655f75c9.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 109428f8125a0c36b61c483fc1ddc823
309c93cf1eaba62a3e336469cbec200b63928fc6
0eea0ece2ae79542e8c94c5f4ad2593708e358e2c76c0bba17ec93841fa39eac
GET /images/2020/11/24/a74f4f7f7eade63b2489886e655f75c9.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:46 GMT
accept-ranges: bytes
content-length: 27384
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/11/24/6e09b43806a5e5825f627909fffea390.md.jpg
200 OK 27 kB URL HTTP/2 4tymode.win/images/2020/11/24/6e09b43806a5e5825f627909fffea390.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 8af068049361a7f46664f43bb8e571af
ce95d08bd029cf884561bc8dc03ba28a4d749d06
742403eab391d70a07ae2951a5feb639a807cb7e7584dd9ea0446252617601d7
GET /images/2020/11/24/6e09b43806a5e5825f627909fffea390.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Nov 2020 15:09:46 GMT
accept-ranges: bytes
content-length: 27377
content-type: image/jpeg
date: Thu, 29 Dec 2022 03:02:11 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2017/04/surefap.org--Rogers-Debt-0162851491_1866794300.jpg
200 OK 1.3 MB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/04/surefap.org--Rogers-Debt-0162851491_1866794300.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2000, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2000], progressive, precision 8, 1500x1500, components 3\012- data
Size 1.3 MB (1252396 bytes)
Hash 89cf3834a60ac893ec19b303db2c0902
9b1ca24b5008cf800af630b35a4a6b21f9437bb5
265c9b8a7be5d65f3b52900ce886009c0b2c2cb40800d81f24e98293870d4efb
GET /wp-content/uploads/2017/04/surefap.org--Rogers-Debt-0162851491_1866794300.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/jpeg
Content-Length: 1252396
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ip%2BWn7m74Xs8CAz98ZoPHTpN1J%2FJd%2BcULObEN3PeNiPd6UW8gyB8RaQnNnS6s8QYk82wjwCUfS1yfdeK2LJQ0qrgQQHoeuHdEqXUfodWb40TXXgMrCZGEnb0DKizQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba00a8a0afe-OSL
alt-svc: h2=":443"; ma=60
go.eabids.com/loadeactrl.go?pid=82407&spaceid=2135757&ctrlid=5089
200 OK 43 kB URL HTTP/1.1 go.eabids.com/loadeactrl.go?pid=82407&spaceid=2135757&ctrlid=5089
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7889bcf8d4b60d6f791194bc878ec7ed
1a44c028ff46153a5eb420d370bcfc9b7c208a28
68bf7549eb4c4bb8dfe284a0cdff7e19db116639488b3ec0d7d11a3aca9b58dc
GET /loadeactrl.go?pid=82407&spaceid=2135757&ctrlid=5089 HTTP/1.1
Host: go.eabids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Content-Length: 42879
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token,X-CSRFToken, Authorization
Expires: Mon, 03 Jul 2001 06:00:00 GMT
Last-Modified: Thu, 29 12 2022 03:02:11 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
X-Backend-Server: nl2-web-201
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 358948a0ec900509e53396438fadea91
c47bd41c2dfd3879ca398829ac3438fce227dd96
d4cc3dfa1061aedf2533cf134f9d584568bc41a25090fb7ce77c5cdbec6c37e6
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OMut01f32IcZajVoFzPZ6bLs7IYIohkWdj4VRfTxBljKCvVkl4RQ11TxN2MOFEorYElk4ZYf8HHXLgY6CQ3epn8zkEZKhxVfLZlf24Dyuz8XlAY2Ec3%2FZXZaMzT2SA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba2da421c06-OSL
alt-svc: h2=":443"; ma=60
surefap.org/favicon.ico
200 OK 2.4 kB IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash e4cb9c2ef4866c61686ea529cca5864c
51b1a32b077611d3f312c177cca13717e1d4c7aa
fed799214bbf9fecbb850e4a9013982864d232b335954ae57ef807b559821225
GET /favicon.ico HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/
Cookie: PHPSESSID=7dpv9b6jb6sdjrfqkrf2593at1
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:37:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3509
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0vQvpU1oNJ8yv1TWVRKDOxKQB8fob6I%2BallmSkRsMW9E5LKvH0PCq5SNNsJorpRTEf1pPW6Kuam9F1N4bF9ZVqEK0lP0EgYShBnPE7U8pWVyZ9wMK7BmbaJbRSVQgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba30bb50afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 107c7b24cc9711281977c9e9094da7af
18e6f30a0dbc072380e414236b2a8296e7a7f6f6
c8a97836b9b198c55753dd8e72c0ae03fe473f02f098deb2c4145b677d19be08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adserver.juicyads.com/js/jads.js
200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP
File type ASCII text, with very long lines (3769), with no line terminators
Hash 65b1efdf55163b144c5018b8772765ad
509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 21 Nov 2022 05:24:20 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"637b0b84-eb9"
Content-Encoding: gzip
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 302 Moved Temporarily
Date: Thu, 29 Dec 2022 03:02:11 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784
Content-Length: 32
Expires: Tue, 28 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a76f9a6cacbb107da9d8d0b989936128
35f6bf4cf5d983f4f8edcb3e0db58cee5f2b552e
0a0ab2ab5964131b0bca0c63cc6ce85704e5d61b30c00555dbec6f399af6fedd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 29 Dec 2022 02:41:11 GMT
expires: Thu, 29 Dec 2022 04:41:11 GMT
cache-control: public, max-age=7200
age: 1260
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b88672d1c8958638387a1518b61435e4
aebc7fa9caab7977c3eda811ef87461d750702fb
833986b2e907d6975a904de07017e53df00ee3dd9ab23b6da1c96f3a4c684cc1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 07:08:32 GMT
Expires: Tue, 03 Jan 2023 07:08:31 GMT
Etag: "aebc7fa9caab7977c3eda811ef87461d750702fb"
Cache-Control: max-age=446179,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 780f4ba24a810b39-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 29 Dec 2022 02:33:30 GMT
age: 1721
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 7a3b6bfaf32bc9d3e1b788b1f26f9fbf
2aef98d586689efaec7f6d82f7c89c504cd3e0fe
7167d334107aac1db875f96b00de4c18484f6ee03da2b12734d3bfcc777db475
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 01 Jan 2023 22:45:20 GMT
ETag: "2aef98d586689efaec7f6d82f7c89c504cd3e0fe"
Last-Modified: Wed, 28 Dec 2022 22:45:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3568
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba3a9c9b4f9-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a76f9a6cacbb107da9d8d0b989936128
35f6bf4cf5d983f4f8edcb3e0db58cee5f2b552e
0a0ab2ab5964131b0bca0c63cc6ce85704e5d61b30c00555dbec6f399af6fedd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.eabids.com/eactrl.go
200 OK 1.5 kB IP
File type JSON data\012- , ASCII text, with very long lines (2658), with no line terminators
Hash aca9ce01ffb77115537e9bc572239fee
3bca6db179408a695998183225dd6d99c4c65268
0ca418af3dc4d8045ae6c5887276505d5d82505f3e6454c53f921ba7e53c4ac9
POST /eactrl.go HTTP/1.1
Host: go.eabids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 1030
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/json;charset=utf-8
Content-Length: 1509
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token,X-CSRFToken, Authorization
Expires: Mon, 03 Jul 2001 06:00:00 GMT
Last-Modified: Thu, 29 12 2022 03:02:11 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
X-Backend-Server: nl2-web-205
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.labadena.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.labadena.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
top-fwz1.mail.ru/js/code.js
200 OK 14 kB URL HTTP/1.1 top-fwz1.mail.ru/js/code.js
IP
File type ASCII text, with very long lines (729)
Hash e2e25d9473a05570c20838aca1c2c3ea
a8ac67a13111a4e61cf7eb9bb8850ef5ab1246d4
b75b8d2fe8eb0c9e8191c51f99eb62b37c944f36118aacb5237e4bde65c60e11
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Nov 2022 16:42:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIE:1672282931:0:::; path=/; expires=Sat, 30-Dec-23 03:02:11 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"637e4d62-85c6"
Expires: Thu, 29 Dec 2022 04:02:11 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip
a.labadena.com/api/click/7460375471632028095?c=90
200 OK 0 B URL HTTP/1.1 a.labadena.com/api/click/7460375471632028095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/7460375471632028095?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.labadena.com/api/spots/303160?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
ocsp.digicert.com/
200 OK 471 B IP
Hash 125553386d49a0b56facb82deab9bd9f
1a7480b79f4aada477fb5919794f6efd6d44921e
6f3f4223d3c994dd4754df67a11298d736e16f888f301ad2838d0b4db1ac01d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5927
Cache-Control: max-age=114203
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 03:02:11 GMT
Etag: "63ac0727-1d7"
Expires: Fri, 30 Dec 2022 10:45:34 GMT
Last-Modified: Wed, 28 Dec 2022 09:06:47 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
a.labadena.com/api/click/4554007996556470095?c=90
200 OK 0 B URL HTTP/1.1 a.labadena.com/api/click/4554007996556470095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/4554007996556470095?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.labadena.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
mc.yandex.ru/metrika/tag.js
200 OK 77 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash d0b3830c739999a50dd290d60b05f833
59e6790ee0933e040f9578f640097fbef4949f5b
8a194f61d3c9a4fddeaf73ffdb8d144168250aee298ae4e9f5d98d8c35af33c7
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 76614
date: Thu, 29 Dec 2022 03:02:11 GMT
access-control-allow-origin: *
etag: "63933377-12b46"
expires: Thu, 29 Dec 2022 04:02:11 GMT
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784
200 OK 1.5 kB URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash 518b86a3c5583ec073cefb2278713d4f
400fdf844c3222cb48d1ea48d3cfb0ddc78c7797
599dd1c526274b4b8ae7591c5d51bd2f7aa5809e4915554cc8c6f3c0b4591715
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;0.039830994963296784 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: image/gif
Content-Length: 1544
Connection: keep-alive
Expires: Tue, 28 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 8d2cf94c09efbf1d7935d02a742ded3e
2cd8f68b3db6ea228c49794857a65f536c182cd4
54111aee1d53029caec74224e0b1ae13c72bc5b5c09958a482fa114704a96280
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:12 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Mon, 02 Jan 2023 00:00:00 GMT
ETag: "2cd8f68b3db6ea228c49794857a65f536c182cd4"
Last-Modified: Thu, 29 Dec 2022 00:00:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2419
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba5ab49b4f9-OSL
informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
200 OK 1.6 kB URL HTTP/2 informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
IP
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash 959095f9539d83d4d079baa88bc3f2de
6a45323a168b9ce70613f8e5542b0219cab36f6c
949b4e34c184c77555c61b781ad5a46a30b5459b3c57d7a8ffa53c884aa122e0
GET /informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews HTTP/1.1
Host: informer.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 1561
last-modified: Thu, 29-Dec-2022 03:02:12 GMT
content-type: image/png
pragma: no-cache
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:12 GMT
X-Firefox-Spdy: h2
stenadewy.pro/aSWTZ-y.PV3WBX1Yc_2ahbacbd2-5flgShWiQ_9kNlDmEn2-NpjqUr2sN_yuZv6wbx2-5zlASBWCQ_9ENFDGEH2-NJjKUL2MN_wO?iframeId=ekaops
200 OK 0 B URL HTTP/2 stenadewy.pro/aSWTZ-y.PV3WBX1Yc_2ahbacbd2-5flgShWiQ_9kNlDmEn2-NpjqUr2sN_yuZv6wbx2-5zlASBWCQ_9ENFDGEH2-NJjKUL2MN_wO?iframeId=ekaops
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aSWTZ-y.PV3WBX1Yc_2ahbacbd2-5flgShWiQ_9kNlDmEn2-NpjqUr2sN_yuZv6wbx2-5zlASBWCQ_9ENFDGEH2-NJjKUL2MN_wO?iframeId=ekaops HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.labadena.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=499390
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=499390
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (366), with CRLF, LF line terminators
Hash c84c6bb2fb8742b480c5f503756a51f2
5867c08b13de9fa534751bdf52c6f2a8d7f43fa3
27e08b62e5e1b53ab6bd8c7171bf32fe10fa5a2dc5dbbb91e144ca1edb61ed8d
GET /adshow.php?adzone=499390 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=860effb4e1a5296dd16a615060363db7; expires=Fri, 29-Dec-2023 03:02:11 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YTowOnt9; expires=Sun, 01-Jan-2023 03:02:11 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 01-Jan-2023 03:02:11 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
mc.yandex.ru/watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29mtb%280%29rqnt%281%29aw%281%29pe%281%29efid%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29mtb%280%29rqnt%281%29aw%281%29pe%281%29efid%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash e341ba9410f95343a7344e3944bd2f0f
7b63e5ef400f0d784fdf0f62913714f1edae1940
34d549e8a39c7a17966ed8a7c6e3313901dfde7fcffa679fd62f50550504ac01
GET /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29mtb%280%29rqnt%281%29aw%281%29pe%281%29efid%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Thu, 29 Dec 2022 03:02:12 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:12 GMT
last-modified: Thu, 29-Dec-2022 03:02:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:12 GMT
access-control-allow-origin: *
etag: "63933377-2b"
expires: Thu, 29 Dec 2022 04:02:12 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +qIkUHpRBySRUbdysYICGg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: M0hYl2mYB4icS2M8xJ3dTPeNBm4=
top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362
set-cookie: FTID=1RMYgQ0tkIIE:1672282932:2787143:::; path=/; expires=Sat, 30-Dec-23 03:02:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=498259
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=498259
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (405), with CRLF, LF line terminators
Hash 0132603f52a7494d551b93e319e2c7bb
273ad8774045eb6d4dfe0521d7678160a9c082bd
9884f4276e75e5e7c85aaad239d4aeb6c4e2a73858f46f7ddd96daa466404e46
GET /adshow.php?adzone=498259 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=860effb4e1a5296dd16a615060363db7; expires=Fri, 29-Dec-2023 03:02:11 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps8605=1; expires=Fri, 30-Dec-2022 03:02:11 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjg4NDM5OTtpOjE2NzI1NDIxMzE7fQ%3D%3D; expires=Sun, 01-Jan-2023 03:02:11 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 01-Jan-2023 03:02:11 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
200 OK 284 kB URL HTTP/2 ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 284 kB (284264 bytes)
Hash 94eeda124cd4fd45a6ca4a7f0d672cc0
2c614d114dd89373a06a8823c4973f97b6120736
4a28e5c786dab8824c53af0d6543b86f58527139584fd50e41b97a5e917dfcc7
GET /ads/user161341/ad1266795-1658474854.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 03:02:12 GMT
etag: "1658474854"
cache-control: max-age=17728151
content-length: 284264
content-type: image/gif
last-modified: Fri, 22 Jul 2022 07:27:34 GMT
accept-ranges: bytes
x-sp-metadata: HS256.CMSitJ0GEocBCiRlMDlmMzllNS1kZjA2LTQ3OWUtOGViNC0yMjk1ZTRkNjdkOGEQ8LqN8Z697wIaBgi0hrSdBiIMOTEuOTAuNDIuMTU0KOymAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkOWYwMDIwZTItNGNlMy00ZTgyLWI4ZmMtNWVmMWZkM2I2MTAxGOisESIYCAISFGNkczI2MS5zazEuaHdjZG4ubmV0.c1FKTtJ+75akWt4syAmU6RZMrREpKmvyRLXO5FEAjyA=
x-hw: 1672282932.dop018.sk1.t,1672282932.cds259.sk1.hn,1672282932.cds261.sk1.c
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1672282926834%3A1672282926855%3A1%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga;visible=true;_=0.8979670906520362 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1672282932:2787143:::; path=/; expires=Sat, 30-Dec-23 03:02:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ads.juicyads.me/network/user47819/8605-1583019937-0419205001583019937.gif
200 OK 1.1 MB URL HTTP/1.1 ads.juicyads.me/network/user47819/8605-1583019937-0419205001583019937.gif
IP
File type GIF image data, version 89a, 160 x 600\012- data
Size 1.1 MB (1056226 bytes)
Hash d539f7b68039f13ef2bf52cf1b2de5f9
fb9b7897fd77443aa15246cfbb440283402d475d
00abbe0f8a345185a8222edc20b9e97a76bfcbba268f280508e3df79fd685ff9
GET /network/user47819/8605-1583019937-0419205001583019937.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:12 GMT
Connection: Keep-Alive
ETag: "1583019937"
Cache-Control: max-age=21165516
Content-Length: 1056226
Content-Type: image/gif
Last-Modified: Sat, 29 Feb 2020 23:45:37 GMT
Accept-Ranges: bytes
X-HW: 1672282932.dop014.sk1.t,1672282932.cds227.sk1.c
stenadewy.pro/a.W_ZuyvPw3xB-1zcA2BhCa_bE2F5GlHS-WJQK9LNMD_EO2PNQjRU-3TNUSVZW6_bY2Z5albS-WdQe9fNgD_Ei2jNkjlU-3nNoQp?iframeId=iqjgit
200 OK 379 kB URL HTTP/2 stenadewy.pro/a.W_ZuyvPw3xB-1zcA2BhCa_bE2F5GlHS-WJQK9LNMD_EO2PNQjRU-3TNUSVZW6_bY2Z5albS-WdQe9fNgD_Ei2jNkjlU-3nNoQp?iframeId=iqjgit
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (629)
Size 379 kB (378816 bytes)
Hash 3622a8453b43736ab535150574959244
4717c374ccf8de17b8d7251938dab5b90092e8c5
2bd726d6555817359622d9e66939753b69a1805edd8b698fd9c140562442b853
GET /a.W_ZuyvPw3xB-1zcA2BhCa_bE2F5GlHS-WJQK9LNMD_EO2PNQjRU-3TNUSVZW6_bY2Z5albS-WdQe9fNgD_Ei2jNkjlU-3nNoQp?iframeId=iqjgit HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.labadena.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Thu, 29 Dec 2022 03:02:12 GMT
set-cookie: kadCCap=132751:1:1672212538;218693:1:1669515516;212269:1:1667199062;79610:1:1669272875;223454:1:1671925401;219652:1:1669330335;222513:1:1671568408;199455:1:1668245056;219047:1:1667194435;222775:1:1671023864;220790:1:1668460505;222582:1:1669973958;219484:1:1667715065;220335:1:1670435916;222555:1:1671433227;218665:1:1671785908;215297:1:1671843330;194136:1:1672141107;221398:1:1671685351;223255:1:1670393482;221352:1:1670163762; max-age=1703818932; path=/
kadACap=444785:1:1671894608;419295:1:1671966680;451147:1:1672040492;410252:1:1671810803;346329:1:1670226206;442019:1:1671848563;453839:1:1671706144;190964:1:1669272875;424441:1:1671003875;451139:1:1671706534;407100:1:1668246232;453850:1:1671627132;445506:1:1669286676;419299:1:1670986713;419291:1:1671680457;410254:1:1671377581;458498:1:1671734530;446714:1:1671329420;346327:1:1672217129;458045:1:1670528140;445735:1:1669286676;446716:1:1672031762;424443:1:1671737502;456883:1:1671781891;419321:1:1670561943;458041:1:1670526590;446498:1:1671420411;444748:1:1669841678;445081:1:1671894608;419323:1:1671691498;445788:1:1669918420;450649:1:1671968855;419303:1:1670918283;445499:1:1670164226;441369:1:1671297690;453831:1:1670649751;449523:1:1670210030;272913:1:1670219562;451724:1:1669565807;446013:1:1668228435;446718:1:1671773578;419297:1:1670740668;419293:1:1671780919;398832:1:1672025828;446531:1:1669270846;383700:1:1672147523;419301:1:1671721008;401659:1:1671089756;424445:1:1671725871; max-age=1703818932; path=/
kadCSCap=132751:1:1672212538; path=/
kadASCap=346327:1:1672217129; path=/
kadRPixJ=bnVsbA==; max-age=1703818932; path=/
kadUnP3=CAEQ/uqznQYaDQjzwZkBEAEYqYSwnQYaDQivp/4BEAEY/uqznQYaDQip+5gCEAEYuuCvnQYiCggBEAEY/uqznQYqDAjD6QwQARj+6rOdBioMCIy9EhABGKmEsJ0GKgwIyLMoEAEYuuCvnQY=; max-age=1703818932; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/metrika_match.html
200 OK 696 B URL HTTP/2 mc.yandex.ru/metrika/metrika_match.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (540)
Hash 784e2d6c9868e5d3aca06efb9fc6bdd2
9496aba69de55c6b74b1494d0479772a28a7f29c
cf75bbfd28015ee0303483f2224ef09129135c7487ddb6537f999b6095619698
GET /metrika/metrika_match.html HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 696
date: Thu, 29 Dec 2022 03:02:12 GMT
access-control-allow-origin: *
etag: "63933377-2b8"
expires: Thu, 29 Dec 2022 04:02:12 GMT
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-encoding: br
content-type: text/html
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;nt=0/1/1672282925429///-5/392/392/392/392/392/392//410/478/536/510/1086/1141/1161/2006/2006/;ni=;lvid=1672282926834%3A1672282927438%3A2%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga-ym;visible=true;_=0.7863412825791979;e=RT/load;et=1672282927437
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;nt=0/1/1672282925429///-5/392/392/392/392/392/392//410/478/536/510/1086/1141/1161/2006/2006/;ni=;lvid=1672282926834%3A1672282927438%3A2%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga-ym;visible=true;_=0.7863412825791979;e=RT/load;et=1672282927437
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;nt=0/1/1672282925429///-5/392/392/392/392/392/392//410/478/536/510/1086/1141/1161/2006/2006/;ni=;lvid=1672282926834%3A1672282927438%3A2%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga-ym;visible=true;_=0.7863412825791979;e=RT/load;et=1672282927437 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1672282932:2787143:::; path=/; expires=Sat, 30-Dec-23 03:02:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
stenadewy.pro/aeWf1.wgc_miVjzkcl2-lnvobpjq9_hsZtEulvk-PxTyQzyAN_TCgD3EMFS-ZHpIZJnKJ_hMbNWOVPJ-ZRDS1TpUc_WWpXnYaZX-QbmccdHeV_zgahFipjv-blmmVnJoZ_Dq0r0sMtT-Yv2wNxTyc_1AJBnCpDv-bFmGVHJIZ_DK0L0MMNT-YP2QNRTSc_1U
200 OK 0 B URL HTTP/2 stenadewy.pro/aeWf1.wgc_miVjzkcl2-lnvobpjq9_hsZtEulvk-PxTyQzyAN_TCgD3EMFS-ZHpIZJnKJ_hMbNWOVPJ-ZRDS1TpUc_WWpXnYaZX-QbmccdHeV_zgahFipjv-blmmVnJoZ_Dq0r0sMtT-Yv2wNxTyc_1AJBnCpDv-bFmGVHJIZ_DK0L0MMNT-YP2QNRTSc_1U
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aeWf1.wgc_miVjzkcl2-lnvobpjq9_hsZtEulvk-PxTyQzyAN_TCgD3EMFS-ZHpIZJnKJ_hMbNWOVPJ-ZRDS1TpUc_WWpXnYaZX-QbmccdHeV_zgahFipjv-blmmVnJoZ_Dq0r0sMtT-Yv2wNxTyc_1AJBnCpDv-bFmGVHJIZ_DK0L0MMNT-YP2QNRTSc_1U HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.labadena.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-type: application/javascript
content-length: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Thu, 29 Dec 2022 03:02:12 GMT
set-cookie: kadCCap=219484:1:1667715065;215297:1:1671843330;221398:1:1671685351;223255:1:1670393482;218693:1:1669515516;79610:1:1669272875;223454:1:1671925401;222582:1:1669973958;222555:1:1671433227;218665:1:1671785908;212269:1:1667199062;222775:1:1671023864;220790:1:1668460505;219047:1:1667194435;194136:1:1672141107;221352:1:1670163762;132751:1:1672212538;222513:1:1671568408;199455:1:1668245056;219652:1:1669330335;220335:1:1670435916; max-age=1703818932; path=/
kadACap=450649:1:1671968855;453831:1:1670649751;444785:1:1671894608;419295:1:1671966680;442019:1:1671848563;419291:1:1671680457;458498:1:1671734530;458041:1:1670526590;419301:1:1671721008;445735:1:1669286676;451724:1:1669565807;419293:1:1671780919;190964:1:1669272875;458045:1:1670528140;419321:1:1670561943;444748:1:1669841678;445081:1:1671894608;272913:1:1670219562;424441:1:1671003875;407100:1:1668246232;445506:1:1669286676;424445:1:1671725871;419297:1:1670740668;401659:1:1671089756;451147:1:1672040492;410252:1:1671810803;453839:1:1671706144;410254:1:1671377581;446714:1:1671329420;419323:1:1671691498;398832:1:1672025828;456883:1:1671781891;446498:1:1671420411;445788:1:1669918420;441369:1:1671297690;449523:1:1670210030;446718:1:1671773578;453850:1:1671627132;346327:1:1672217129;446716:1:1672031762;424443:1:1671737502;445499:1:1670164226;446013:1:1668228435;346329:1:1670226206;451139:1:1671706534;419299:1:1670986713;419303:1:1670918283;446531:1:1669270846;383700:1:1672147523; max-age=1703818932; path=/
kadCSCap=132751:1:1672212538; path=/
kadASCap=346327:1:1672217129; path=/
kadRPixJ=bnVsbA==; max-age=1703818932; path=/
kadUnP3=CAIQ/uqznQYaDQip+5gCEAEYuuCvnQYaDQjzwZkBEAEYqYSwnQYaDQivp/4BEAIY/uqznQYiCggBEAIY/uqznQYqDAjD6QwQAhj+6rOdBioMCIy9EhABGKmEsJ0GKgwIyLMoEAEYuuCvnQY=; max-age=1703818932; path=/
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash aa01a240233187b357119ad2826b712f
fee7adb548cc1838e22ed34a1f5bdb6cc6393778
32454013372a335977d70835b27c2aa0dfe58ccfc43f8c685fb0b779d228cae1
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 02 Jan 2023 00:19:09 GMT
ETag: "fee7adb548cc1838e22ed34a1f5bdb6cc6393778"
Last-Modified: Thu, 29 Dec 2022 00:19:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1804
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba92cc2b4f9-OSL
fonts.googleapis.com/css?family=Oswald
200 OK 510 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald
IP
Hash 5dcbb402842a27d03557ea2a4c85b8d0
5166bbdd5fda0870c63d342b7123453b00affd43
41aa04ea68af5f02a206386f7c1aef26693984b272974fdf171a2e9fa075fe16
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Dec 2022 03:02:11 GMT
date: Thu, 29 Dec 2022 03:02:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14319
Expires: Thu, 29 Dec 2022 07:00:52 GMT
Date: Thu, 29 Dec 2022 03:02:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14319
Expires: Thu, 29 Dec 2022 07:00:52 GMT
Date: Thu, 29 Dec 2022 03:02:13 GMT
Connection: keep-alive
a.labadena.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2C3d-graphics%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno&s1=%25subid1%25
200 OK 874 B URL HTTP/2 a.labadena.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2C3d-graphics%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno&s1=%25subid1%25
IP
ASN #24940 Hetzner Online GmbH
Hash 62e06fdf69f1dea9348aaf669e7c5be5
68aeabe6b35b23e20eb7b0b72d6d851fbf17c346
9b4d2ce69c9309b2453bd3a8a2253b8fc1a2eb4e700624cfabe66465e23fb41f
GET /api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2C3d-graphics%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno&s1=%25subid1%25 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:12 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=R5qNt9R8xpSNUrp3uyVx; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14319
Expires: Thu, 29 Dec 2022 07:00:52 GMT
Date: Thu, 29 Dec 2022 03:02:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14319
Expires: Thu, 29 Dec 2022 07:00:52 GMT
Date: Thu, 29 Dec 2022 03:02:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff495beea-cff9-4016-a188-b0f4b2547a59.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff495beea-cff9-4016-a188-b0f4b2547a59.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9592ede9af5f26a2748ba2e1e649ee1
7c99d49f3f6f9d1808bf7f7f17c1c3507838951e
e9b2526f714d4d123b80fca340737b450a3c09058d8f7c7b3b180e3509eb8d27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff495beea-cff9-4016-a188-b0f4b2547a59.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: f433f7ae-20f5-4446-a7ce-4b88ec6d19ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4GQxFceoAMF5GQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acb737-509b4ce327ed792719fd2c58;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 21:37:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUpx0k9Eg5cG4EGjzp91A274liLuvkmgX7siRALfLiRNIvRmFCI7-g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 21:42:24 GMT
age: 19189
etag: "7c99d49f3f6f9d1808bf7f7f17c1c3507838951e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43aa3e2c-b453-45cc-9c0b-eb1d920eacf1.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43aa3e2c-b453-45cc-9c0b-eb1d920eacf1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c0527fed1c04188af2963f337e4611da
44e20435887ecf7b36c239570d75ccfb77d5bb95
f241afd263d965f409b41e1d8059c5401b23312548799c519d7aef17d5b66f13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43aa3e2c-b453-45cc-9c0b-eb1d920eacf1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8259
x-amzn-requestid: 691c625d-7834-41b8-a238-462cafe5c60e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dyjGXGNmoAMF8zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa7ef5-2117438f1820e2c3773a90c4;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 05:13:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U7oHbs9lrczNYUsIglipBZm3CB9STpdgLiT5VjRdzSM3ijFXE22_oA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 21:48:03 GMT
age: 18850
etag: "44e20435887ecf7b36c239570d75ccfb77d5bb95"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc13649-6a41-40db-8d11-e2627932c821.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc13649-6a41-40db-8d11-e2627932c821.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9dbe1f89bbc715a85f596171692d340
4295dceef5f9089943704f8d0a309e801fd96dd7
cbb7fffdae6a1496d1f28be52b54ae0ea71b6db808ada2ff05f6f9a373454f88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc13649-6a41-40db-8d11-e2627932c821.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8400
x-amzn-requestid: 00c2f1ce-a9f7-4a18-bf2d-77ca800e38fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: doXwgHftIAMFxWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a66ccf-5854c7133ff12e4f06c4f483;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 03:06:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T2NKozUvj37A1yxEs0YNA469y6ZtYdphs_4cxgo-0iRtJeyuhIvfEg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 09:21:22 GMT
age: 63651
etag: "4295dceef5f9089943704f8d0a309e801fd96dd7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 244b2a2a5b176fb3117248a872e2a37a
f451963e96d330a8dcd28ebcf5e63791e90b75ba
c01075e3836684e57b87d1feaf148e5c0dc35e273b8519c342c90e44dfc1e54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12054
x-amzn-requestid: c24868ab-bcf2-4f9c-b7a3-83df6a1fb11a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: do5InGjRIAMFWtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a6a236-539fdd2919bdc153159156ef;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 06:54:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WQ2TnGkAeLlisFSiN2rI45ImsUR0xjSsEI0pMXBFzl8dMoeVb4EnRw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 09:10:02 GMT
age: 64331
etag: "f451963e96d330a8dcd28ebcf5e63791e90b75ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4adb7268aa0a520dcee9f1d936d16dd
9364105419c6662123999ed11912de21ad32f6ba
6d593122db8b8514db4d3d0d0e6d037f57d39e5aab9a9f493fed359eb4b73b2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8505
x-amzn-requestid: de8ce29e-7947-4c4f-95f5-14efae45cfda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4p9MGW9IAMFqdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acf054-5cf23dcf7bdbd784373222a9;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 01:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kEM8R4PYVJN8BQXhr9w-osn4-pAjeVnOtinJu1yfvjc5sTEL6LqTeQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 01:51:39 GMT
age: 4234
etag: "9364105419c6662123999ed11912de21ad32f6ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f065733-5f7b-4113-9f70-8e9738de50f7.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f065733-5f7b-4113-9f70-8e9738de50f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db302f2c47edbbb185af9e4a96741d52
c616108fda3390ebd7f67926ba3e35a73b47135c
cc9e4fdb361624bb32511b195d4a1677e241502ba013b8f8a114ebb4956019ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f065733-5f7b-4113-9f70-8e9738de50f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6955
x-amzn-requestid: 59f34964-3642-4190-9edb-c2a1de006606
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhyXGHe0oAMFfSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3ca93-4acf45f93b24aebd33be5de1;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L4fg8oLUw2_pKOZNCh2YZi3_asUguQHaCtpPeCrUIYyVoAiwQlNqGg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 21:42:23 GMT
age: 19190
etag: "c616108fda3390ebd7f67926ba3e35a73b47135c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b04589e859d9acccdd6ac6658400794b
2dfbdb6e1a8b1909d0d6f1459e0cab760c7472d6
8d3b7fa10edabfa381d9ffad1bbc3a9579ce77ca320eeb91ceb5bf778720579c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8D3B7FA10EDABFA381D9FFAD1BBC3A9579CE77CA320EEB91CEB5BF778720579C"
Last-Modified: Tue, 27 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10061
Expires: Thu, 29 Dec 2022 05:49:54 GMT
Date: Thu, 29 Dec 2022 03:02:13 GMT
Connection: keep-alive
d.pssy.xyz/t.php
200 OK 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Dec 2022 03:02:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=45d45ed7-770a-43b9-b1d1-e9c7585b0fe8; expires=Fri, 29-Dec-2023 03:02:14 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=396685987&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282930%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030210%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282930&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=396685987&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282930%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030210%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282930&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=396685987&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282930%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030210%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282930&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 135092
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:15 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:15 GMT
last-modified: Thu, 29-Dec-2022 03:02:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=352561847&wv-type=3&browser-info=we%3A1%3Aet%3A1672282931%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030210%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282931&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=352561847&wv-type=3&browser-info=we%3A1%3Aet%3A1672282931%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030210%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282931&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=352561847&wv-type=3&browser-info=we%3A1%3Aet%3A1672282931%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030210%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282931&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:15 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:15 GMT
last-modified: Thu, 29-Dec-2022 03:02:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=793745433&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282932%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030211%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282932&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=793745433&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282932%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030211%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282932&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=793745433&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282932%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030211%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282932&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 5730
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:16 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:16 GMT
last-modified: Thu, 29-Dec-2022 03:02:16 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=769147324&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282934%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030213%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282934&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=769147324&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282934%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030213%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282934&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=3&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=769147324&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282934%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030213%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282934&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 5733
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:18 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:18 GMT
last-modified: Thu, 29-Dec-2022 03:02:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1672282926834%3A1672282934698%3A3%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga-ym;visible=true;_=0.4123412236776788;e=RT/unload;et=1672282934697;pvt=8181;vtauto=7868
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1672282926834%3A1672282934698%3A3%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga-ym;visible=true;_=0.4123412236776788;e=RT/unload;et=1672282934697;pvt=8181;vtauto=7868
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/who-framed-roger-rabbit/who-framed-roger-rabbit-zafo-rogers-debt/;st=1672282926515;title=Who%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=8fab7ca7bd3ed481;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1672282926834%3A1672282934698%3A3%3A9d0213ee4e7162688644efc415fe89d5;opts=jst-ga-ym;visible=true;_=0.4123412236776788;e=RT/unload;et=1672282934697;pvt=8181;vtauto=7868 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:19 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1672282939:2787143:::; path=/; expires=Sat, 30-Dec-23 03:02:19 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=251024565&wv-type=3&browser-info=we%3A1%3Aet%3A1672282935%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030214%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282935&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=251024565&wv-type=3&browser-info=we%3A1%3Aet%3A1672282935%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030214%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282935&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=251024565&wv-type=3&browser-info=we%3A1%3Aet%3A1672282935%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030214%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282935&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:19 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:19 GMT
last-modified: Thu, 29-Dec-2022 03:02:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=4&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=420658019&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282935%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030214%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282935&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=4&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=420658019&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282935%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030214%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282935&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=4&wv-hit=35911150&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&rn=420658019&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1672282935%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221229030214%3Au%3A1672282927914112353%3Avf%3Awy278c4xrecmji309ne1z%3Ast%3A1672282935&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3525
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 29 Dec 2022 03:02:19 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:19 GMT
last-modified: Thu, 29-Dec-2022 03:02:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 0 B URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 03:02:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 01 Jan 2023 23:50:52 GMT
ETag: "a39b66cdfad25a4e54dce7e2bf482319e24e1e39"
Last-Modified: Wed, 28 Dec 2022 23:50:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1654
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 780f4ba49c190b59-OSL
mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)mtb(0)rqnt(1)aw(1)pe(1)efid(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)mtb(0)rqnt(1)aw(1)pe(1)efid(1)ti(2)
IP
GET /watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)mtb(0)rqnt(1)aw(1)pe(1)efid(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fwho-framed-roger-rabbit%2Fwho-framed-roger-rabbit-zafo-rogers-debt%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309ne1z%3Afp%3A989%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1598994212969%3Ahid%3A35911150%3Az%3A0%3Ai%3A20221229030207%3Aet%3A1672282927%3Ac%3A1%3Arn%3A244368377%3Arqn%3A1%3Au%3A1672282927914112353%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C67%2C0%2C392%2C397%2C1%2C609%2C19%2C%2C%2C%2C1142%3Aco%3A0%3Ans%3A1672282925429%3Arqnl%3A1%3Ast%3A1672282927%3At%3AWho%20Framed%20Roger%20Rabbit%20-%20%5BZafo%5D%20-%20Rogers%20Debt%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29mtb%280%29rqnt%281%29aw%281%29pe%281%29efid%281%29ti%282%29
date: Thu, 29 Dec 2022 03:02:12 GMT
access-control-allow-origin: http://surefap.org
set-cookie: yabs-sid=786922751672282932; Path=/; SameSite=None; Secure
i=1uglKO55JxWS4pmtP5qqmMTSy0PZi3BZVEaraQkP4er2TkMSCg8YYslV2hbLC2EeOXKCba+8/aGdfrhFysD9fnxOaC0=; Expires=Sun, 26-Dec-2032 03:02:11 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8557833481672282932; Expires=Fri, 29-Dec-2023 03:02:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8557833481672282932; Expires=Fri, 29-Dec-2023 03:02:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1703818932.yc.1672282932#1703818932.yrts.1672282932#1703818932.yrtsi.1672282932; Expires=Fri, 29-Dec-2023 03:02:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 29-Dec-2022 03:02:12 GMT
last-modified: Thu, 29-Dec-2022 03:02:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
a.labadena.com/api/settings/23307
200 OK 0 B URL HTTP/2 a.labadena.com/api/settings/23307
IP
ASN #24940 Hetzner Online GmbH
GET /api/settings/23307 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Origin: http://surefap.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:11 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
200 OK 0 B URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.labadena.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:11 GMT
content-type: application/javascript
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
200 OK 0 B URL HTTP/2 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.labadena.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 03:02:11 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
172.67.191.234
135.181.208.216
104.18.21.226
23.33.119.27
188.72.219.36
77.88.21.119
142.132.131.203
93.184.220.29