r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2827
Expires: Sat, 03 Dec 2022 20:34:11 GMT
Date: Sat, 03 Dec 2022 19:47:04 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4556
Cache-Control: max-age=144004
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:04 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:47:08 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8952
Expires: Sat, 03 Dec 2022 22:16:16 GMT
Date: Sat, 03 Dec 2022 19:47:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 19:20:00 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1624
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gwkWHJtrQOPZMgHIEEEzbYypRrrymajRUq4NOyhIfkr9M1pndviNvwWaNptNXSPVJA+Vk2tfY0A=
x-amz-request-id: DQ24ZVNZ8E2BPFAC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 19:46:41 GMT
age: 23
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 19:47:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 19:08:58 GMT
cache-control: public,max-age=3600
age: 2287
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash acf6eb7378c174be552afb8cfb80b8d2
1023af75093eed8cf8bd0fcca669ffa027b693f7
3f6e653b0f9b6abe61d79bea5d4eaec1a3e6c2d43775f458db6ba375c62d1629
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3F6E653B0F9B6ABE61D79BEA5D4EAEC1A3E6C2D43775F458DB6BA375C62D1629"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21588
Expires: Sun, 04 Dec 2022 01:46:53 GMT
Date: Sat, 03 Dec 2022 19:47:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4493
Cache-Control: max-age=138879
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:05 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 10:21:44 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.166.172.24101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.166.172.24:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rKrKZ4JnCC9cQCrTAlapsQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7Uy07NLyTOGuQa7m3siaURhTrsI=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
160.251.151.42200 OK 15 kB URL HTTP/2 ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
IP 160.251.151.42:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15669), with CRLF, LF line terminators
Hash a42a83b47c9574fcbc86a538f66813d9
8bc6429923c32a728ecdc590c0909583696c4b61
e218119db233e4213c26853a91e2d371a537963b2245d85a6f2d1acbe71e0c9d
GET /sexy-amber-midthunder-from-legion-photos/?lang=ko HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-pingback: https://ce.swpra.com/xmlrpc.php
link: <https://ce.swpra.com/wp-json/>; rel="https://api.w.org/", <https://ce.swpra.com/wp-json/wp/v2/posts/4039>; rel="alternate"; type="application/json", <https://ce.swpra.com/?p=4039>; rel=shortlink
strict-transport-security: max-age=31536000
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 14563
content-type: text/html; charset=UTF-8
date: Sat, 03 Dec 2022 19:47:05 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3942
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:47:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3942
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:47:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3942
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:47:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3942
Expires: Sat, 03 Dec 2022 20:52:49 GMT
Date: Sat, 03 Dec 2022 19:47:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 67783
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e74254b3fdce7d6b84a71a7aff43789
65c8b4abf957f9b54d99d0f78559e639adb29efb
f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -AurmlKwF0QgfsWBsV3ZN9ZyDhw1Zo82zUqrpkBbvbCfh0j7evV2Tg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 11:01:04 GMT
age: 31563
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 53099
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash 75e530564b12ceb52eb5294e8933e95e
0ac20f6e9013fa34f4b0d33a864f0dd0d25aac6e
5115b2f7cdf272d4948013e6fa3b48bda4d000a1b449d628945b925bdc367c58
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:47:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 07 Dec 2022 17:32:50 GMT
ETag: "0ac20f6e9013fa34f4b0d33a864f0dd0d25aac6e"
Last-Modified: Sat, 03 Dec 2022 17:32:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773ecff03f6db50f-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3abdcce275bb9723b4ac1d0c38cc8891
91f0d888c38db0899f106b652e3dcac062648099
ff411fc0d5abaf519d6600961ec51ad71ad9a02e23cc02ad818e27f0324b3d1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7657
x-amzn-requestid: c0dbd862-41cf-4fa8-ab6b-256763c63fbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1Fo6IAMF9EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-554ffbc83fd70c557437120f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V_7_ohQr9ENIjOvdvy65ZpJqg2OI9gzRdiuxCTJzl4qwXe2Nmu_tAQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:49:27 GMT
etag: "91f0d888c38db0899f106b652e3dcac062648099"
content-type: image/jpeg
age: 79060
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 78961
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcb89ca25035b2bbb71ae5dd175fcd40
544428cdad754b1bb7be3cd46a79bf078fd5b450
36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:53:20 GMT
age: 57227
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.11
160.251.151.42200 OK 7.9 kB URL HTTP/2 ce.swpra.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.11
IP 160.251.151.42:0
File type ASCII text, with very long lines (27100)
Hash cc421ea7bd44a8d71de0cce7456713f8
6644acaa564e4ce2e231c4606f09bbca92374d29
e55c9ab4d75acebeafb3e1e517667ef6a4aa237f217cd6929d9091166526a18e
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.5.11 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Thu, 27 Aug 2020 18:00:38 GMT
etag: "d293-5addfb6b23d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7907
content-type: text/css
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/wp-content/themes/twentytwelve/style.css?ver=20190507
160.251.151.42200 OK 8.4 kB URL HTTP/2 ce.swpra.com/wp-content/themes/twentytwelve/style.css?ver=20190507
IP 160.251.151.42:0
File type ASCII text, with very long lines (492), with CRLF line terminators
Hash 54e486f148c64f42068a00c9f85710cf
5bbfcfea8855bcb9045942db3e85428503d642dc
ce2ad800074f86c1b65e24947d703f999ad617091308970056b2ff33adae04a4
GET /wp-content/themes/twentytwelve/style.css?ver=20190507 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Fri, 04 Dec 2020 12:42:37 GMT
etag: "9ae2-5b5a2cfb67025-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8355
content-type: text/css
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/wp-content/themes/twentytwelve/css/blocks.css?ver=20190406
160.251.151.42200 OK 1.9 kB URL HTTP/2 ce.swpra.com/wp-content/themes/twentytwelve/css/blocks.css?ver=20190406
IP 160.251.151.42:0
File type ASCII text, with CRLF line terminators
Hash 3d93d119330bb58393c0917cdcc05f1c
7bd2575b834829736e2e52d32d0a14a7107820d0
5a8168d91bd82461bca20dcf4af78d8cdd1b2b016f957f9e5c7a8eae10438f73
GET /wp-content/themes/twentytwelve/css/blocks.css?ver=20190406 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Fri, 04 Dec 2020 12:42:37 GMT
etag: "2af4-5b5a2cfb64145-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1890
content-type: text/css
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.11
160.251.151.42200 OK 4.7 kB URL HTTP/2 ce.swpra.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.11
IP 160.251.151.42:0
File type ASCII text, with very long lines (11272)
Hash 80712bcce465dea429e6ff1e5c35bbc1
daff29755ee729dbeb0d30c93570f1fc9b673972
f444c094422ff2d56c4f52a022881e68e1f07d567e0fb3969f80259452995f8f
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.5.11 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Thu, 15 Apr 2021 03:36:15 GMT
etag: "3795-5bffa90ccc0e5-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4662
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:07 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/js/comment-reply.min.js?ver=5.5.11
160.251.151.42200 OK 1.3 kB URL HTTP/2 ce.swpra.com/wp-includes/js/comment-reply.min.js?ver=5.5.11
IP 160.251.151.42:0
File type ASCII text, with very long lines (2949)
Hash 1cf4c3e8e70de8171ff6d4530d1fec31
e45846b00f185fb3e3d16b61d6073c961c2dcf50
bcb5aef7cf39483421bc74866fb39786953559ff5fa9e9d003743b33702d64b7
GET /wp-includes/js/comment-reply.min.js?ver=5.5.11 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Thu, 15 Apr 2021 03:36:15 GMT
etag: "ba8-5bffa90ccd085-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1346
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:07 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext&display=fallback
142.250.74.106200 OK 1.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext&display=fallback
IP 142.250.74.106:0
File type ASCII text, with CRLF, LF line terminators
Hash 15c26cb3481f188b13703bbf394c4aa1
bdeb89d9dada25fd6be40b984c0fd959947f6c80
75d9862c0b2e357f4df4662e3588ad9a33d4c63b159aeca20209aa10dbb6225c
GET /css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext&display=fallback HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 19:47:06 GMT
date: Sat, 03 Dec 2022 19:47:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/css/dist/block-library/theme.min.css?ver=5.5.11
160.251.151.42200 OK 729 B URL HTTP/2 ce.swpra.com/wp-includes/css/dist/block-library/theme.min.css?ver=5.5.11
IP 160.251.151.42:0
File type ASCII text, with very long lines (2218), with no line terminators
Hash 1c594ff3d841fb2905c8d41ac7a1e453
5f96285b7a75449dc5d32bdfc44ed15997a16b1f
7c1f38e4bf49405241edc00e50cdb4d0609b162b31c9cc0cbb1ebd74ebb5367a
GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.5.11 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Tue, 07 Jul 2020 14:43:35 GMT
etag: "8aa-5a9db041573c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 729
content-type: text/css
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/js/wp-embed.min.js?ver=5.5.11
160.251.151.42200 OK 765 B URL HTTP/2 ce.swpra.com/wp-includes/js/wp-embed.min.js?ver=5.5.11
IP 160.251.151.42:0
File type ASCII text, with very long lines (1391)
Hash fe875afb236ee8f0d50040fe58d848d4
e6b1b67093b429c95d5b9db07a7eba39e02cf0e5
328a6a072b91134f2802ae25e070f38ff156ceee2c6ec6a6253ae4b27af73b49
GET /wp-includes/js/wp-embed.min.js?ver=5.5.11 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Thu, 15 Apr 2021 03:36:15 GMT
etag: "592-5bffa90ccd085-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 765
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:07 GMT
server: Apache
X-Firefox-Spdy: h2
r.ivyrc.com/t.js
185.199.109.153200 OK 814 B IP 185.199.109.153:0
Hash f77681edede6d999662bd35e081ab3a7
7930758f8a772500e182e0081d440bf12679480c
0b1862c99d2e8330d860c9f6962325267a601f6f7de9c57733a37346731da72a
GET /t.js HTTP/1.1
Host: r.ivyrc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
last-modified: Wed, 28 Sep 2022 22:04:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6334c4ff-96c"
expires: Thu, 01 Dec 2022 03:46:17 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: E1D6:727E:1251BBC:12E4F3A:63882131
accept-ranges: bytes
date: Sat, 03 Dec 2022 19:47:07 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1663-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670096827.243263,VS0,VE104
vary: Accept-Encoding
x-fastly-request-id: 80ca2b6883d0dcaadc5deb4bbf971280735cb6f8
content-length: 814
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
160.251.151.42200 OK 34 kB URL HTTP/2 ce.swpra.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP 160.251.151.42:0
File type ASCII text, with very long lines (31997)
Hash acf54950dfb2d6981e941d733b377591
340de686aecd9e6246a32c71e7de63ed69229ceb
d97f66caea5260bc71609f0da43ac0d937ecc09253910e5dda4c9fe4dbde20fc
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Fri, 17 May 2019 04:25:54 GMT
etag: "17a69-5890dc7401880-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 33776
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/red.js
160.251.151.42200 OK 390 B IP 160.251.151.42:0
Hash 601a829a57d1f1f0a5b36866aed4ee83
850afdc6e05ec6466d52daf6b6163db91d285ff2
8ac63c0525205331e853eb52c108a17022e07db7c458dedb8af55a9ecff50759
GET /red.js HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Sun, 06 Dec 2020 11:40:00 GMT
etag: "272-5b5ca2b70451e-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 390
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:07 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash 75e530564b12ceb52eb5294e8933e95e
0ac20f6e9013fa34f4b0d33a864f0dd0d25aac6e
5115b2f7cdf272d4948013e6fa3b48bda4d000a1b449d628945b925bdc367c58
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:47:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 07 Dec 2022 17:32:50 GMT
ETag: "0ac20f6e9013fa34f4b0d33a864f0dd0d25aac6e"
Last-Modified: Sat, 03 Dec 2022 17:32:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773ecff7faa8b50f-OSL
ce.swpra.com/wp-content/plugins/transposh-translation-filter-for-wordpress/js/transposh.js?ver=1.0.7.1
160.251.151.42200 OK 1.7 kB URL HTTP/2 ce.swpra.com/wp-content/plugins/transposh-translation-filter-for-wordpress/js/transposh.js?ver=1.0.7.1
IP 160.251.151.42:0
File type ASCII text, with very long lines (4020)
Hash 5a0c8c7fd132e0c512d0615298791eab
b78ed27a1fb0b5a7d187f38b2c1b4f9f2ed997ac
1bcc949b10819a37aec6a63e12ede2c541f55020bc0bfb1c0a3d86e4253c25c6
GET /wp-content/plugins/transposh-translation-filter-for-wordpress/js/transposh.js?ver=1.0.7.1 HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Thu, 18 Mar 2021 11:30:30 GMT
etag: "fda-5bdcded4b87b4-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1661
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ce.swpra.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:41 GMT
expires: Tue, 28 Nov 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 435267
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 19:47:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ce.swpra.com/ikshvushxe.php
160.251.151.42200 OK 152 kB URL HTTP/2 ce.swpra.com/ikshvushxe.php
IP 160.251.151.42:0
Size 152 kB (152304 bytes)
Hash c0ba8c06fc85c994a5dc2c30118dbe38
484d597aee73962d45e2a412899f7a6dded9e2ad
ec5c5aa76f9df282cbb3202b86bb6f0821526cbc8ad3030fd4e0bcdad26e9699
GET /ikshvushxe.php HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=120
strict-transport-security: max-age=31536000
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:06 GMT
server: Apache
X-Firefox-Spdy: h2
thefappening.pro/wp-content/uploads/2017/02/Amber-Midthunder-Selfie-TheFappening.Pro-2.jpg
104.27.206.87200 OK 302 kB URL HTTP/2 thefappening.pro/wp-content/uploads/2017/02/Amber-Midthunder-Selfie-TheFappening.Pro-2.jpg
IP 104.27.206.87:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1134x1134, components 3\012- data
Size 302 kB (302015 bytes)
Hash ef168de3704838c5dabce620b3cb5aae
c865efa6be2d3c9d5efb4271b0f1d017264dbd34
e72db3779ddfcce5ceb9cbc2e1d474fe58ea5e8c03691d9020e17357e3e06bdc
GET /wp-content/uploads/2017/02/Amber-Midthunder-Selfie-TheFappening.Pro-2.jpg HTTP/1.1
Host: thefappening.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:09 GMT
content-type: image/jpeg
content-length: 302015
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "60c1b768-49bbf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Thu, 10 Jun 2021 06:55:36 GMT
cf-cache-status: HIT
age: 90944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AFP8H1mk3lS7d2mDh7CUc%2FAjoMZ3W0I3w5EUfMmRKxGMF8mQFBpnavKLgJepP1k3QObvXxxqP0k72YDnZs6hqc89lUo9VS04V0%2BNXxIq0eJK5TFYarOIZ5auucWYtqPgBKo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ecffd9aa2b523-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash f1dacaaa678dfa6d22420a8b46047d44
8b80f47f01cc0714a47ff3d734b6bce89756ec26
6533e522fdc5ac5af0079b6c4599cee64810a54671c9e4c49f8a79597b57926e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:47:09 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:34:07 GMT
Expires: Fri, 09 Dec 2022 18:34:06 GMT
Etag: "8b80f47f01cc0714a47ff3d734b6bce89756ec26"
Cache-Control: max-age=513416,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773ecffd6bbd0b41-OSL
ce.swpra.com/favicon.ico
160.251.151.42302 Found 0 B IP 160.251.151.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Cookie: first_visit=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
link: <https://ce.swpra.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
strict-transport-security: max-age=31536000
location: https://ce.swpra.com/wp-includes/images/w-logo-blue-white-bg.png
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 03 Dec 2022 19:47:09 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83f0934ee1b0a7ce3f8a8f6b7a046914
7079332b1bfa08f4b93e9a3e2ba749e8aec94e25
067eb6b152b165daab0825fd3f7b7b8ecbe288c6453982131d4904be0c0516d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "067EB6B152B165DAAB0825FD3F7B7B8ECBE288C6453982131D4904BE0C0516D7"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10678
Expires: Sat, 03 Dec 2022 22:45:07 GMT
Date: Sat, 03 Dec 2022 19:47:09 GMT
Connection: keep-alive
ce.swpra.com/iris-mittenaere-sexy-and-fappening-miss-universe/
160.251.151.42200 OK 11 kB URL HTTP/2 ce.swpra.com/iris-mittenaere-sexy-and-fappening-miss-universe/
IP 160.251.151.42:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (27994), with CRLF, LF line terminators
Hash e3f48e4349da3cc64f07caa22fc34439
90e6ab31acc258679004e29108936a27d1c36444
73cf3a809cbc5b2cb3b3f5675dda0914785cb437a52b52b56743e799650fa6e1
GET /iris-mittenaere-sexy-and-fappening-miss-universe/ HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Cookie: first_visit=true; sc_is_visitor_unique=rx12440873.1670096827.343E003C88EF4F6E8BB9FB136D7180A9.1.1.1.1.1.1.1.1.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-pingback: https://ce.swpra.com/xmlrpc.php
link: <https://ce.swpra.com/wp-json/>; rel="https://api.w.org/", <https://ce.swpra.com/wp-json/wp/v2/posts/4042>; rel="alternate"; type="application/json", <https://ce.swpra.com/?p=4042>; rel=shortlink
strict-transport-security: max-age=31536000
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 10825
content-type: text/html; charset=UTF-8
date: Sat, 03 Dec 2022 19:47:09 GMT
server: Apache
X-Firefox-Spdy: h2
ce.swpra.com/wp-includes/images/w-logo-blue-white-bg.png
160.251.151.42200 OK 4.1 kB URL HTTP/2 ce.swpra.com/wp-includes/images/w-logo-blue-white-bg.png
IP 160.251.151.42:0
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Connection: keep-alive
Cookie: first_visit=true; sc_is_visitor_unique=rx12440873.1670096827.343E003C88EF4F6E8BB9FB136D7180A9.1.1.1.1.1.1.1.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=31536000
last-modified: Thu, 21 May 2020 09:10:12 GMT
etag: "1017-5a624e1454500"
accept-ranges: bytes
content-length: 4119
content-type: image/png
date: Sat, 03 Dec 2022 19:47:09 GMT
server: Apache
X-Firefox-Spdy: h2
d.pssy.xyz/d/?resource=bundler&nada=1&widgets=2023563:5,2023557:5,2023567:3,2023566:2,2185534:2,2023556:2,2185535:2,2023571:1,2023569:1,2023553:1,2023633:1,2023570:1&isct=1670096800&rfrr=https://ce.swpra.com/paola-saulino-nude-the-fappening-over/?lang=it&iscs=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&width=625&reqc=1&ver=0cbf05525432a5ea.1670096800499&page=aHR0cHM6Ly9jZS5zd3ByYS5jb20vc2V4eS1hbWJlci1taWR0aHVuZGVyLWZyb20tbGVnaW9uLXBob3Rvcy8_bGFuZz1rbw==
23.235.244.226200 OK 48 kB URL HTTP/1.1 d.pssy.xyz/d/?resource=bundler&nada=1&widgets=2023563:5,2023557:5,2023567:3,2023566:2,2185534:2,2023556:2,2185535:2,2023571:1,2023569:1,2023553:1,2023633:1,2023570:1&isct=1670096800&rfrr=https://ce.swpra.com/paola-saulino-nude-the-fappening-over/?lang=it&iscs=Nzc4YWIwMjY0YTllZjMzYjVjZGI3MDIyZjI2YzNkNTgyMzZmMGI5ZTE0Mjk4ZWEzZDkyZWJlODBkNTJiNDAzMnwwfDV8MTYwLjI1MS4xNTEuNDJ8TW96aWxsYS81LjAgKExpbnV4OyBBbmRyb2lkIDYuMC4xOyBOZXh1cyA1WCBCdWlsZC9NTUIyOVApIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMDcuMC41MzA0LjExNSBNb2JpbGUgU2FmYXJpLzUzNy4zNiAoY29tcGF0aWJsZTsgR29vZ2xlYm90LzIuMTsgK2h0dHA6Ly93d3cuZ29vZ2xlLmNvbS9ib3QuaHRtbCl8MzQ3NjE5fDE2NzAwOTY4MDB8aWJhSFIwY0hNNkx5OWpaUzV6ZDNCeVlTNWpiMjB2Y0dGdmJHRXRjMkYxYkdsdWJ5MXVkV1JsTFhSb1pTMW1ZWEJ3Wlc1cGJtY3RiM1psY2k4L2JHRnVaejFwZEE9PQ==&width=625&reqc=1&ver=0cbf05525432a5ea.1670096800499&page=aHR0cHM6Ly9jZS5zd3ByYS5jb20vc2V4eS1hbWJlci1taWR0aHVuZGVyLWZyb20tbGVnaW9uLXBob3Rvcy8_bGFuZz1rbw==
IP 23.235.244.226:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 600457eec650429f243f98a1d99e3753
aabb6396df391f977bda09c39c018b84f815c8b9
2da1e3847107021a57a660f397afc1fb63653982d8f2d25d47923945fbdb9145
GET /d/?resource=bundler&nada=1&widgets=2023563:5,2023557:5,2023567:3,2023566:2,2185534:2,2023556:2,2185535:2,2023571:1,2023569:1,2023553:1,2023633:1,2023570:1&isct=1670096800&rfrr=https://ce.swpra.com/paola-saulino-nude-the-fappening-over/?lang=it&iscs=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&width=625&reqc=1&ver=0cbf05525432a5ea.1670096800499&page=aHR0cHM6Ly9jZS5zd3ByYS5jb20vc2V4eS1hbWJlci1taWR0aHVuZGVyLWZyb20tbGVnaW9uLXBob3Rvcy8_bGFuZz1rbw== HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ce.swpra.com
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 19:47:10 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
ETag: W/"21f54-ClqIfxs7UU/cbJGjTgAlob7Bk5c"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ce.swpra.com
Content-Encoding: gzip
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 888a917455127ef6c8162b0fb2f33203
90203f01a2434d75a9e6d317e77ced0185a67366
b00dc4609783473697cba472d842e9869e9bce63612d05e29a49aaf942601a8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B00DC4609783473697CBA472D842E9869E9BCE63612D05E29A49AAF942601A8D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14104
Expires: Sat, 03 Dec 2022 23:42:14 GMT
Date: Sat, 03 Dec 2022 19:47:10 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 888a917455127ef6c8162b0fb2f33203
90203f01a2434d75a9e6d317e77ced0185a67366
b00dc4609783473697cba472d842e9869e9bce63612d05e29a49aaf942601a8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B00DC4609783473697CBA472D842E9869E9BCE63612D05E29A49AAF942601A8D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14104
Expires: Sat, 03 Dec 2022 23:42:14 GMT
Date: Sat, 03 Dec 2022 19:47:10 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 888a917455127ef6c8162b0fb2f33203
90203f01a2434d75a9e6d317e77ced0185a67366
b00dc4609783473697cba472d842e9869e9bce63612d05e29a49aaf942601a8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B00DC4609783473697CBA472D842E9869E9BCE63612D05E29A49AAF942601A8D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14104
Expires: Sat, 03 Dec 2022 23:42:14 GMT
Date: Sat, 03 Dec 2022 19:47:10 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 888a917455127ef6c8162b0fb2f33203
90203f01a2434d75a9e6d317e77ced0185a67366
b00dc4609783473697cba472d842e9869e9bce63612d05e29a49aaf942601a8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B00DC4609783473697CBA472D842E9869E9BCE63612D05E29A49AAF942601A8D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14104
Expires: Sat, 03 Dec 2022 23:42:14 GMT
Date: Sat, 03 Dec 2022 19:47:10 GMT
Connection: keep-alive
s.pssy.xyz/prbanners/2019/03/29/AT2KCG2PvnqCUADXYM3ousvhwWFvrp.jpeg
172.67.206.135200 OK 19 kB URL HTTP/2 s.pssy.xyz/prbanners/2019/03/29/AT2KCG2PvnqCUADXYM3ousvhwWFvrp.jpeg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 468x60, components 3\012- data
Hash a202cd3273928251aded09d856ca014e
3fb1a4f517b0bee974be511f56299e9e7bf22705
0b6331c1bcb1e732fcaf425eea781c50ab58c50544894fb33c078da019a9055a
GET /prbanners/2019/03/29/AT2KCG2PvnqCUADXYM3ousvhwWFvrp.jpeg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/jpeg
content-length: 18916
last-modified: Fri, 29 Mar 2019 12:44:01 GMT
etag: "5c9e1311-49e4"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6440
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=20rHr1qqIn%2BeW3cKv%2BvmI6FFkZO9mMXB1TpME1sEf605YMNBshXMSD4gziTBpw92OBR6Oq0igyto7vBqgaM5qpUsLN87JA8BG0gV8BNMJx8FRzzgGlWcpbbyJSBO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007dffdb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prbanners/2022/01/28/tHpqnuDxrWEJU6cLuMZQDQAE19jWSw.gif
172.67.206.135200 OK 95 kB URL HTTP/2 s.pssy.xyz/prbanners/2022/01/28/tHpqnuDxrWEJU6cLuMZQDQAE19jWSw.gif
IP 172.67.206.135:0
File type GIF image data, version 89a, 300 x 250\012- data
Hash 13893040a054700cd2f90a835d34fb8d
1d68cba192ebc4d05fe5b75ebe4edf964482f610
5ef533db2a636414b90fd6e40e6e15a7c61db134362e45d3fe68428b7660d180
GET /prbanners/2022/01/28/tHpqnuDxrWEJU6cLuMZQDQAE19jWSw.gif HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/gif
content-length: 95256
last-modified: Sat, 29 Jan 2022 03:58:50 GMT
etag: "61f4bb7a-17418"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4698
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d91HBZZhAGee%2FcwZpEZIuLlyjZqEmVs7wCSAMjRS%2FrkrJYGRkYnap2tVCzGnuKw9ojYcLjvKIEDCPOyeHOCfm7FoTByETAnU%2FUcq65rFkFuHtcBDdzedYO8SWkOT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007d804b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prbanners/2019/03/29/KtMS3Ui41xw9NUALEtNKcp7wnR2h2F.jpeg
172.67.206.135200 OK 36 kB URL HTTP/2 s.pssy.xyz/prbanners/2019/03/29/KtMS3Ui41xw9NUALEtNKcp7wnR2h2F.jpeg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 728x90, components 3\012- data
Hash fc5e89b16857dbaa50e987265c179fe9
a2c6121aa02473d8117eea7d117ebfedc32f32ef
1a7a2938b7667a1b90b41eb7c35c9630034cb624c2446240be504477bf068469
GET /prbanners/2019/03/29/KtMS3Ui41xw9NUALEtNKcp7wnR2h2F.jpeg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/jpeg
content-length: 35890
last-modified: Fri, 29 Mar 2019 12:44:01 GMT
etag: "5c9e1311-8c32"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2075
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8BU6ATnE%2BFqiGhdvhh%2FtiNuj430MGlJI8HklXDhwrpRWwkt7q0O1grSrh8Z09gQBTXtlgxYQme%2BjukojKxYSsafJhdk0X2hM8GOKqnC0CWN3tqSgu12WQ0ZUErKm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007e822b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1144692/240x180.jpg
172.67.206.135200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1144692/240x180.jpg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash 75db6cabdd2ff4c7176e192fc09c51e7
6410b776a15b23b18118b34b1781d98c02941ff7
5e4ad9400ee9a9264b2540cd00c28a8eac4f0404f5bd35d4cfe69ecba73576e8
GET /prplugs/0/1144692/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/jpeg
content-length: 16750
last-modified: Tue, 27 Oct 2020 12:06:57 GMT
etag: "5f980d61-416e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2942
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pc4KpYoFeCgaOjJgS3zYR7ht6ihXhYNWFQ4B3hoF%2BMPjQjhtM0WRjDzuNNiTIyeWwp1lEqj%2B8b7qoA8wFssxZO8FdaIvRFIa5sC6f8bZq086afajwYW58GQq%2BhVl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007d806b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prbanners/2020/10/27/7Bx5ZetVuGPHZ8ZoWgFb6hRGchSTkF.gif
172.67.206.135200 OK 108 kB URL HTTP/2 s.pssy.xyz/prbanners/2020/10/27/7Bx5ZetVuGPHZ8ZoWgFb6hRGchSTkF.gif
IP 172.67.206.135:0
File type GIF image data, version 89a, 300 x 250\012- data
Size 108 kB (108009 bytes)
Hash c11785c5143d4af27eebe1933376db9b
4c95c860f792d06715d53a8b4fa0513b5df1c8cb
7b356d86b3589271e0d160bf9b35f771fc113635ab14067ab0d72825aed2fa2d
GET /prbanners/2020/10/27/7Bx5ZetVuGPHZ8ZoWgFb6hRGchSTkF.gif HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/gif
content-length: 108009
last-modified: Tue, 27 Oct 2020 12:00:57 GMT
etag: "5f980bf9-1a5e9"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4715
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QxCilcYTsX7HNv6edDqDswzWIZncezOeK892keX7DarpZWZ6aufuCmWnZbYTsPp0AFUEA5487VRy8Z0wpv5SiwT2p0lOwg5WuSXHF%2B2tD%2F25oOw5%2FUHUQReIG5uG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007e827b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1144995/240x180.jpg
172.67.206.135200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1144995/240x180.jpg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash a1aa410843a28e7914a130617de3426e
5c4af4c8fc666a29e5b824b9946c3e1ac8fa0df8
75009adc08f8e54aa012cf62ae380a0bcec4af0631c7744bab8566a4d6eea7f1
GET /prplugs/0/1144995/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/jpeg
content-length: 16677
last-modified: Wed, 04 Nov 2020 14:45:53 GMT
etag: "5fa2bea1-4125"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 5114
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kl7fraz4xbXfZN0m8jDRJleJ%2F2xLkvzeE8SenVZUdV%2BYyhlbLh3bXFPpsN5PRo5NC%2FW%2B05ukccNlAX29dWRZLrmWHULEHN9SaqgUI2bZVB4aVMAbFcn2tjDYfqVw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007e833b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1231955/240x180.jpg
172.67.206.135200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1231955/240x180.jpg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash c242785a04ae604ffdbb86feca36dcef
d450d53bbd3a45015a7e347cc7d52ba4e0ff966f
115dce0d6d48dfa63452218c855bee945098fa3f2e833a0b7152ae14de9bad59
GET /prplugs/0/1231955/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/jpeg
content-length: 16910
last-modified: Fri, 02 Dec 2022 21:35:47 GMT
etag: "638a6fb3-420e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1723
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o9sGtfbWXVq5aALWgQEcB2VJeD6D0PFpxVjHDg0OUee0oH5fSugMtD61KU3QAtBTpkynf3inyYWwvAswFJuttBj0nuVokBirIhUIQFSweKQuiume1PjxO%2FrAGAqb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007dfffb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prbanners/2022/11/30/YsrWiWSA5XCPfeGP1X7VnQ5fNbFFvh.gif
172.67.206.135200 OK 5.5 MB URL HTTP/2 s.pssy.xyz/prbanners/2022/11/30/YsrWiWSA5XCPfeGP1X7VnQ5fNbFFvh.gif
IP 172.67.206.135:0
File type GIF image data, version 89a, 300 x 250\012- data
Size 5.5 MB (5541956 bytes)
Hash 2633edc5f0a54b572bd645877e8b6fa7
ebb975faa680b86a0c77f31bbad110c1142dd3c0
763a3185225d8899c20b659b5d13ce921730cd643ebf8ca622258159b4dbe3e7
GET /prbanners/2022/11/30/YsrWiWSA5XCPfeGP1X7VnQ5fNbFFvh.gif HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:10 GMT
content-type: image/gif
content-length: 5541956
last-modified: Wed, 30 Nov 2022 15:18:46 GMT
etag: "63877456-549044"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3783
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xel2QbOsZ4%2BYyub%2B1xyjvBHqT7X95JuLXm%2F3DfkjZOz%2B1ZQ%2FkAHCeEj9SN0OrkO3n%2B0iLWWWGYMkaeVPD0gPTZ9uNADQVNyGWsXgy2LQAXL%2FpK3gPpgQhbM9x5c8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007d802b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
secure.statcounter.com/counter/counter.js
104.20.218.77200 OK 16 kB URL HTTP/2 secure.statcounter.com/counter/counter.js
IP 104.20.218.77:0
File type ASCII text, with very long lines (43632), with no line terminators
Hash 2354b1eca5f5eb0de13e35088bdb4b20
d9e6e9fa59cd993071528fe1e3facdc67bbee305
5ec2d3873fc255f22a02d91c02b27a9f782ef7b84834500e409a43ce125e0d90
GET /counter/counter.js HTTP/1.1
Host: secure.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:09 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 18:49:39 GMT
etag: W/"6388f743-aa70"
expires: Sun, 04 Dec 2022 06:33:16 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 4432
server: cloudflare
cf-ray: 773ecffead36b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
d.pssy.xyz/t.php
23.235.244.226200 OK 20 B IP 23.235.244.226:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 19:47:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=9ed2e201-2337-4cf1-a905-2b0f00e44adf; expires=Sun, 03-Dec-2023 19:47:10 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
s.pssy.xyz/prplugs/0/1207188/240x180.jpg
172.67.206.135200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1207188/240x180.jpg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash a1aa410843a28e7914a130617de3426e
5c4af4c8fc666a29e5b824b9946c3e1ac8fa0df8
75009adc08f8e54aa012cf62ae380a0bcec4af0631c7744bab8566a4d6eea7f1
GET /prplugs/0/1207188/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:11 GMT
content-type: image/jpeg
content-length: 16677
last-modified: Sat, 16 Apr 2022 08:50:24 GMT
etag: "625a8350-4125"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ISDDaYvq6X2PmgYac7Oe8NMBfPjCHhbF93MrRwycdYPr3hN8QeB22dGHxl1MVxNflxMDsdfZZoPsF5yqRIuyl8ukSdAnvT9lc5koVNYKahsAbIem6Cvho81XdvU5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007d800b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prnotifications/2020/12/14/A3Ve2TX8HisMbfhKfYSQw78z6V8Ud2.png
172.67.206.135200 OK 121 kB URL HTTP/2 s.pssy.xyz/prnotifications/2020/12/14/A3Ve2TX8HisMbfhKfYSQw78z6V8Ud2.png
IP 172.67.206.135:0
File type PNG image data, 910 x 455, 8-bit/color RGBA, non-interlaced\012- data
Size 121 kB (121073 bytes)
Hash 7fc7340ed4a648f040c4f2d0daaf91d9
39060822e9b0ea5408cd9b36dc9711d706e05d78
e9938eca31168b40e1b09cb06b6075b8387584d5e56dc8502ab400293afc3611
GET /prnotifications/2020/12/14/A3Ve2TX8HisMbfhKfYSQw78z6V8Ud2.png HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:11 GMT
content-type: image/png
content-length: 121073
last-modified: Mon, 14 Dec 2020 14:08:29 GMT
etag: "5fd771dd-1d8f1"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EnNou%2FWG40jpNYZw2hr%2BqpaW8suOgW2pPu7PX732qqUlPLiZcdJYycQmFaMc%2BOWOTHlFr3dP1IDAc6D0BkSP7EUzv%2BJHAY2uA0%2F0jh1%2BUFR9kn9BSDriy%2BiOazUE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007e826b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 888a917455127ef6c8162b0fb2f33203
90203f01a2434d75a9e6d317e77ced0185a67366
b00dc4609783473697cba472d842e9869e9bce63612d05e29a49aaf942601a8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B00DC4609783473697CBA472D842E9869E9BCE63612D05E29A49AAF942601A8D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14103
Expires: Sat, 03 Dec 2022 23:42:14 GMT
Date: Sat, 03 Dec 2022 19:47:11 GMT
Connection: keep-alive
s.pssy.xyz/prnotifications/2020/12/14/3ExgWpQErhSdyBPXcB61HZQGPYrdTR.png
172.67.206.135200 OK 216 kB URL HTTP/2 s.pssy.xyz/prnotifications/2020/12/14/3ExgWpQErhSdyBPXcB61HZQGPYrdTR.png
IP 172.67.206.135:0
File type PNG image data, 639 x 639, 8-bit/color RGBA, non-interlaced\012- data
Size 216 kB (215641 bytes)
Hash 6978d92c9a18e2d9ed64fe28f7f3eec9
39da69704a785ea27708d09dd8f7016baef93f27
8e56667a9a9d6e58bb0b2da068bb98a68d265966dbd8c4f42e9758253fa1d62d
GET /prnotifications/2020/12/14/3ExgWpQErhSdyBPXcB61HZQGPYrdTR.png HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:11 GMT
content-type: image/png
content-length: 215641
last-modified: Mon, 14 Dec 2020 14:08:29 GMT
etag: "5fd771dd-34a59"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p%2BXWUr4mtx9ZUSinoNpKpVTwHwyEJvJ88AA65FWOio9XQLaNMB8nGAQlQZW%2BkwHfeoyIuJ3ucShsJqhNFZM4YQh%2Finvv7J2q24igawENVQc%2FLSmHKygYQzwMu4S1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773ed007e82bb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ps.popcash.net/go/1863/596460/
54.205.43.136200 OK 270 B URL HTTP/1.1 ps.popcash.net/go/1863/596460/
IP 54.205.43.136:0
File type HTML document, ASCII text
Hash c1e6827bdcaf4c321c2529e59597d64b
53b2cbb0aa24252ff2f95b618f642d7ef5e8b88b
b5a0bfb6cb7b22ec2c6235578ff6b0bce497691e4f8e19f2856c0c1ff90d1842
GET /go/1863/596460/ HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/html
Date: Sat, 03 Dec 2022 19:47:12 GMT
Server: nginx
Vary: Accept-Encoding
Content-Length: 270
Connection: keep-alive
ps.popcash.net/ad/ad?p=1863&w=596460&t=9c4e998e8d284735&r=&vw=1280&vh=0
54.205.43.136303 See Other 0 B URL HTTP/1.1 ps.popcash.net/ad/ad?p=1863&w=596460&t=9c4e998e8d284735&r=&vw=1280&vh=0
IP 54.205.43.136:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ad/ad?p=1863&w=596460&t=9c4e998e8d284735&r=&vw=1280&vh=0 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ps.popcash.net/go/1863/596460/
Upgrade-Insecure-Requests: 1
HTTP/1.1 303 See Other
Date: Sat, 03 Dec 2022 19:47:12 GMT
Location: http://dipaka-ead.com/zcvisitor/47ce5123-7343-11ed-ab86-123c98fd431b/6d6f2230-c93c-11e7-9820-0e06c6fba698?campaignid=577f4850-5dd5-11ed-9380-0a918cbcbb97#pc164159
Server: nginx
Content-Length: 0
Connection: keep-alive
dipaka-ead.com/zcvisitor/47ce5123-7343-11ed-ab86-123c98fd431b/6d6f2230-c93c-11e7-9820-0e06c6fba698?campaignid=577f4850-5dd5-11ed-9380-0a918cbcbb97
3.208.247.235302 0 B URL HTTP/1.1 dipaka-ead.com/zcvisitor/47ce5123-7343-11ed-ab86-123c98fd431b/6d6f2230-c93c-11e7-9820-0e06c6fba698?campaignid=577f4850-5dd5-11ed-9380-0a918cbcbb97
IP 3.208.247.235:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zcvisitor/47ce5123-7343-11ed-ab86-123c98fd431b/6d6f2230-c93c-11e7-9820-0e06c6fba698?campaignid=577f4850-5dd5-11ed-9380-0a918cbcbb97 HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Date: Sat, 03 Dec 2022 19:47:12 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Location: https://go.money616.xyz/X15?sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4
Server: HxJKWPgQ
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 462c2bf014f1f234f6787e1be30f895c
4156a63049bb7c4f7b7ce229877a8a5a52125f14
6ed98223da2f12622dd863a2368675691438f389fc7d644b2d6a4c3675d01d84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6ED98223DA2F12622DD863A2368675691438F389FC7D644B2D6A4C3675D01D84"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10750
Expires: Sat, 03 Dec 2022 22:46:23 GMT
Date: Sat, 03 Dec 2022 19:47:13 GMT
Connection: keep-alive
go.money616.xyz/X15?sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4
18.184.197.212200 OK 437 B URL HTTP/1.1 go.money616.xyz/X15?sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4
IP 18.184.197.212:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 486a9b527c82781597f096613d494705
58186ec12c1524a66368ae493936bb047d94df1a
f1fe5cfd3063b27115e51bc6030c2596ef855ef045bd8abae617d27c1f004c33
GET /X15?sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4 HTTP/1.1
Host: go.money616.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
connection: close
x-content-type-options: nosniff
content-type: text/html; charset=utf-8
x-powered-by: Short.io link shortener
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
content-length: 437
Date: Sat, 03 Dec 2022 19:47:13 GMT
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 16cb615e331396feb00ccac2a7b1f502
9b75e17e6414c596280259230943d3e1fced2355
7da386cb8d7f91a977bc3b1c8c8fa1e98a97c774a8f1c61cd06276ff1573ebf4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:47:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 10:25:05 GMT
Expires: Wed, 07 Dec 2022 10:25:04 GMT
Etag: "9b75e17e6414c596280259230943d3e1fced2355"
Cache-Control: max-age=311270,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773ed0173df50b41-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 16cb615e331396feb00ccac2a7b1f502
9b75e17e6414c596280259230943d3e1fced2355
7da386cb8d7f91a977bc3b1c8c8fa1e98a97c774a8f1c61cd06276ff1573ebf4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 19:47:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 10:25:05 GMT
Expires: Wed, 07 Dec 2022 10:25:04 GMT
Etag: "9b75e17e6414c596280259230943d3e1fced2355"
Cache-Control: max-age=311270,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773ed019afff0b41-OSL
ce.swpra.com/ikshvushxe.php?sw
160.251.151.42200 OK 0 B URL HTTP/2 ce.swpra.com/ikshvushxe.php?sw
IP 160.251.151.42:0
GET /ikshvushxe.php?sw HTTP/1.1
Host: ce.swpra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/sexy-amber-midthunder-from-legion-photos/?lang=ko
Cookie: first_visit=true; sc_is_visitor_unique=rx12440873.1670096827.343E003C88EF4F6E8BB9FB136D7180A9.1.1.1.1.1.1.1.1.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=120
strict-transport-security: max-age=31536000
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Sat, 03 Dec 2022 19:47:11 GMT
server: Apache
X-Firefox-Spdy: h2
cache1.value-domain.com/xrea_header.js
104.20.133.129200 OK 0 B URL HTTP/2 cache1.value-domain.com/xrea_header.js
IP 104.20.133.129:0
GET /xrea_header.js HTTP/1.1
Host: cache1.value-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:08 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1775
etag: W/"625f7a11-6ef"
last-modified: Wed, 20 Apr 2022 03:12:17 GMT
cache-control: max-age=14400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 773ecff18aadb4ff-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=12440873&u1=343E003C88EF4F6E8BB9FB136D7180A9&java=1&security=64bf0417&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//ce.swpra.com/sexy-amber-midthunder-from-legion-photos/%3Flang%3Dko&t=Legion%20%EC%82%AC%EC%A7%84%EC%9D%98%20%EC%84%B9%EC%8B%9C%ED%95%9C%20Amber%20Midthunder&invisible=1&sc_rum_e_s=4557&sc_rum_e_e=4566&sc_rum_f_s=0&sc_rum_f_e=4548&get_config=true
104.20.218.77200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=12440873&u1=343E003C88EF4F6E8BB9FB136D7180A9&java=1&security=64bf0417&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//ce.swpra.com/sexy-amber-midthunder-from-legion-photos/%3Flang%3Dko&t=Legion%20%EC%82%AC%EC%A7%84%EC%9D%98%20%EC%84%B9%EC%8B%9C%ED%95%9C%20Amber%20Midthunder&invisible=1&sc_rum_e_s=4557&sc_rum_e_e=4566&sc_rum_f_s=0&sc_rum_f_e=4548&get_config=true
IP 104.20.218.77:0
GET /t.php?sc_project=12440873&u1=343E003C88EF4F6E8BB9FB136D7180A9&java=1&security=64bf0417&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//ce.swpra.com/sexy-amber-midthunder-from-legion-photos/%3Flang%3Dko&t=Legion%20%EC%82%AC%EC%A7%84%EC%9D%98%20%EC%84%B9%EC%8B%9C%ED%95%9C%20Amber%20Midthunder&invisible=1&sc_rum_e_s=4557&sc_rum_e_e=4566&sc_rum_f_s=0&sc_rum_f_e=4548&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ce.swpra.com
Connection: keep-alive
Referer: https://ce.swpra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 19:47:09 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12440873.1670096829.0; SameSite=None; Secure; Expires=Friday, 03-Dec-2027 03:47:09 +08; Path=/; Domain=.statcounter.com
is_visitor_unique=1670096829118534740; SameSite=None; Secure; Expires=Tuesday, 03-Dec-2024 03:47:09 +08; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://ce.swpra.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 773ecfff1dc0b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
adspredictiv.com/jump/next.php?r=6415938&sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4
35.190.38.40200 OK 0 B URL HTTP/2 adspredictiv.com/jump/next.php?r=6415938&sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4
IP 35.190.38.40:0
GET /jump/next.php?r=6415938&sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4 HTTP/1.1
Host: adspredictiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sat, 03 Dec 2022 19:47:13 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adspredictiv.com/jump/next.php?stamat=m%257CLSIja_o2aQdH8AH0dEdHP3xP.9b5%252C7H0PozvLiGV-YkDx825CHjXHsSctWIGDQyh13bePJRoJFh5gG09Ir7wss_Fh-r0Y5mrQmLZ09WSb0k4kFAZ0-V-lNowuMJUcNSqPYGCu9hHeEV8NN5djXbDk0Uk9SoOm&cbpage=https://adspredictiv.com/jump/next.php?r=6415938&sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4&cbur=0.9212134775675974&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=
35.190.38.40302 Found 0 B URL HTTP/2 adspredictiv.com/jump/next.php?stamat=m%257CLSIja_o2aQdH8AH0dEdHP3xP.9b5%252C7H0PozvLiGV-YkDx825CHjXHsSctWIGDQyh13bePJRoJFh5gG09Ir7wss_Fh-r0Y5mrQmLZ09WSb0k4kFAZ0-V-lNowuMJUcNSqPYGCu9hHeEV8NN5djXbDk0Uk9SoOm&cbpage=https://adspredictiv.com/jump/next.php?r=6415938&sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4&cbur=0.9212134775675974&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=
IP 35.190.38.40:0
GET /jump/next.php?stamat=m%257CLSIja_o2aQdH8AH0dEdHP3xP.9b5%252C7H0PozvLiGV-YkDx825CHjXHsSctWIGDQyh13bePJRoJFh5gG09Ir7wss_Fh-r0Y5mrQmLZ09WSb0k4kFAZ0-V-lNowuMJUcNSqPYGCu9hHeEV8NN5djXbDk0Uk9SoOm&cbpage=https://adspredictiv.com/jump/next.php?r=6415938&sub1=modena-bison&sub2=foxtrot-mat-qkhxp3le4&cbur=0.9212134775675974&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref= HTTP/1.1
Host: adspredictiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 03 Dec 2022 19:47:13 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
location: https://adspredictiv.com/script/i.php?stamat=m%257C%252C%252CQiMqd3f7tGU3B5-GH0dEdHP3xP.f85%252CV9AS1BeQ25EDpxt2FK4iLMpY3_VPIBS-TdNN6EjlPtcYtbcH70XT1al0S0WkLMJN5SeK6KbIAIdgV5yoWHsKcbudwqxTqxM_-Rxdev8xNVYLDMPZq_Bjzc06a7EwlvlJvwGGxFRynAhVUZ_vYyW03qLGLA02gArIr9nrEmNXvVYOf9MAHk5F_E840N6a3iGF_281xup_lq_ir9ODfCIp7COIczbd1WVPQ0nJDI_2Lu-V8MB_OMWbSndYrCv9xVbDPiSNTXWC9YP24ums4qyaZhSyfvkMABK_pq3lFlN1WqvmmzoUY1g-stkC32UxET5QMRDE1_Y1r_NQRetLwLJ9xpPvwDKz09AEzRNpfCzLz-P0iB2ia5_81MaZiKrsnx8o1Hybd-AEi90F2WaDOZ1QZ1xBgYRDLDhsk4YFsPu6WVnCRwUKg0JKZsPGd3_qXMAOGK8Sh5Q39J8Pi1ZJNU-DbfpOwmQf63ULTAvqSYMvhGObqN0QR9PEWvg2E7UQiz-dvGTxdk2XpZhq1HApRkFgmdmUt58mb84htkhwd1KLH55Adzs56jKm9jP_UyEAqnMr_bLMj0oYlmlxr_MrVq_l_Q%252C%252C
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2