firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 03:09:25 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: clA7O1_o2D2cczME8Rqi5zl8QVuq23GdQl4em9WxRQqH8LSjxiJ_lQ==
Age: 3504
surefap.org/publisher/okunev
104.21.92.107301 Moved Permanently 0 B URL HTTP/1.1 surefap.org/publisher/okunev
IP 104.21.92.107:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /publisher/okunev HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77; path=/
Location: http://surefap.org/publisher/okunev/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=To1WDf9KzTyMASY6QPoKP%2BHaOY4xDYFJXkjU%2FoFxLs02ciMLVHUF92VBMeeO29IpMgiswEnlZuyItOVrfC3d4Mr6zrl3fZSZxDhI3XZEl2xsuf%2FsbCAqP9UsG1%2FF2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74a64204a9eeb500-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17069
Expires: Wed, 14 Sep 2022 08:52:18 GMT
Date: Wed, 14 Sep 2022 04:07:49 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Mk1PVUQvowBcRTeFp5qprpabrxg0qk6QRtJY6SHQAy7GpQ3heQUL9Q==
age: 84755
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
104.21.92.107200 OK 626 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
IP 104.21.92.107:0
File type ASCII text, with CRLF line terminators
Hash 10cbc450720b6e3661dc14177f6095bb
6898cb7b1725a4224a6e7fc6cfcf8dc634065608
2ee55a9a2b2f25dfbad0725e2b44a5ea758516c8589f2f0c2fe8c946287407af
GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mFVrsRLfc5nI47yRQEvkINBrPeUls%2FloG2UjkfXv52DGuST1Vqt4BNnpApaLi1K2v5S2ifki9YVOrgxaDNx0XdRvNVZYABsIqczGwNBRVHJPj0Ufm2pqju5PTW33wA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642070cbeb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
104.21.92.107200 OK 1.6 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
IP 104.21.92.107:0
File type ASCII text, with CRLF line terminators
Hash 3fcb0d88088f0e55c490573d9283c88a
6cfae6065bab40117fd241c536630c1c934c033c
1f91f493e9731afedede6c0626959993538cf13569434c5d0639273886b04075
GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NdOX2YxcS97iObbM0VZtYCCm%2BttHK77b9T2Qp2hkfu93UPcal2xKeohAltKbzExVspFowjtfSZgaes2kRaT5UVg9xOmnS9AwFpvokHr0rcL8KFEE3Vpbxg24%2FYRvbw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642070aabb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/publisher/okunev/
104.21.92.107200 OK 23 kB URL HTTP/1.1 surefap.org/publisher/okunev/
IP 104.21.92.107:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1779), with CRLF, LF line terminators
Hash 2e334523d757e87e8d720ee0091d64cd
0d40d1773ff982db2b31c150c23eff99837bb0a7
aa0615f30504cec3f487a25acdee26674ae27f4e59b5ceae6ba19a4002a452c7
Analyzer Verdict Alert fortinet Malware
GET /publisher/okunev/ HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://surefap.org/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LlcE2a9ljvzyhN1BA%2FsEC6xMRuLGHvBfzSROi%2FqtW0vo6QOArptPK16PthF3aZZuqKssMUkz%2BzjRT8CKiH8sPjV06pNRXFcU9X7yxaKFNn5CVlYm9bsR9dDg1gC%2FQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74a64205cabfb500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/style.css
104.21.92.107200 OK 6.7 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/style.css
IP 104.21.92.107:0
Hash 8754f3c381e72b8d256a0f26b09663e1
3c89aea4ebfadeb9791f9fe7fbe37d57952b3899
f70001c43657a392df622ad888a4cb3a62b4599fac8c6bfba3dd1a365be05646
GET /wp-content/themes/FinanceDesk/style.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 13 Feb 2021 23:55:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9JBLYdc8izEbWr%2FzAVX3ZEIECC%2FaorE%2B8woFk08G6cJY3Mt1HOVo18aybh9sbYf6qyUvaDBNGhefnUti0QdQA5oiIw84W1oQugxNSXgautIMpaAvn3Hp3WvQUk8wew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642070bc8b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
104.21.92.107200 OK 4.3 kB URL HTTP/1.1 surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
IP 104.21.92.107:0
File type ASCII text, with very long lines (25658), with no line terminators
Hash acceec62f949a07f1d1e07d4e88c0b76
b19d22f7b838357798be6a17ad9f30b4f114c41e
bbed1144be64bc962ce6ae0e94a8176e566ce7b3bfea999419de8da948b97219
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wgPw8Tv06apPi0wqQvJV6TkkEFKRHMe7r3kr8Wukdlxx%2B7XmBLGXqCebc48DE0Ei%2BNG4QGI2Hj79zNMZVgw3Btf5PcL7VtCv3kaRUWlS0jUg%2BbHaqa6olBi99peNuw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642070ff30afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
104.21.92.107200 OK 433 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
IP 104.21.92.107:0
Hash c459cce9b7bfe8874065f27071c0fa5d
9c48040bd8aed19832c1c6093ddb4d4adef71bda
6b41fda0c20e0aa799c788122491afb3ac541bbe574f4e492d13168a8b2d42ad
GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ctjzwW9IWh327WmgfR9DbMFr%2B4ZR8gLs%2FuhIBqk3SvLHmxwvjQowx5U1SxsE7WmNlgz84Brxw1aK3NCq%2FA5qFft685upNa6Uq9z%2FpEF9nMcFWMcAYZP6E8xy2hJAfA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642071cd0b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
104.21.92.107200 OK 464 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
IP 104.21.92.107:0
Hash e4a982df8ef82dfca6e739af2f2c70c9
0ec97ae743cb03849eee9c6f1c0539eec7c737ac
c9f369c77f62349d1a42f1e9ed7b3bd82c29ac23a13cda519eb9cb79689271a9
GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0p0D3bAOheLMismz6Kd88E3R1vZDuGkChax5og10LJ%2FDGvL52YK8SMlOSv%2FvZU3YCpEgneI3X1RJpcpBpWxsGvrCD12ss1%2F%2BhcOir1211Z7B4gd%2BpXBdQRmv9ZAb%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642071b80b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
104.21.92.107200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
IP 104.21.92.107:0
File type ASCII text, with very long lines (10082)
Hash ec17f8a80c23d0b8fc814fcbdb52653e
512c64d495ed700b16d5ccd79a753dd8cfd118e4
883e795f544da6c4b3b39643b9c84aa49d86f0bdeb511de4a790f63152fd89e8
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dkb7uTjlsqVt1ohbr3upCAG%2BIu1ijgb8Y7ULzuLdGR36VTqQCWHVxcCmOB5Km%2BroUwHmBl1ncsXDuUAreIEsnAqXjDhnBsR84atZWObt%2BFSHC9UDKm5%2BfVlRJab0nw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642071bd7b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
104.21.92.107200 OK 489 B URL HTTP/1.1 surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
IP 104.21.92.107:0
File type ASCII text, with CRLF line terminators
Hash c8ad5eb64f1140cbe2df28519b376aa2
2782b2ec1b9dd5f9a25eec3b2f7f53de9a3b83c0
766695e386f4d4860ded979bf96717fa000ba7a1da95d900a48f5ddbeff95344
GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P2cwl%2FB5CRPjcbee4%2BvrXfpHL%2Beo6sWOMtqjn8gUrReYAgVCmW1j8iKct5ky6WcssufWIghxvwpXOmJ5KoCAozj3%2BmY9pTvFR4%2Bw0MtjAmeM4c6RQEkNsF4%2Ba0LSvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642071ab7b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
104.21.92.107200 OK 521 B URL HTTP/1.1 surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
IP 104.21.92.107:0
Hash 2291cad033de47da5bf45d44d3fb1c09
ef8ed11bba4cd1b1f649bbd3d64f79f1702e0851
a67c9a95aebe4a4dd8839404fdd77a4ee64f7a65e5859a1dd2255379ddf80235
GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gy1DtWWcJEkiEPYXlHeZkV0pdk8ew15tv2BmDL0o%2B4NbOqPa1nYawJNdJ2bNhjPjgdjuB3DTJnzIhH1xNTqZ7gc07zaIes%2BrkLwgBZpsAizLeYGYv5TJwje0iQHfBg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a64207089fb51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
104.21.92.107200 OK 1.5 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
IP 104.21.92.107:0
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5aogT2hjnUF5Fyc7lIJdFijkrVeMEcWWmI%2FhxFpVHtFGxYhLXWL5nPXl4wY2S9XUjAJa0lUhHR08k7AGN3CEBOrmNFzcwxsKPv13DtjsmXS2iMf1a9HAv0ZK%2F0Wbdg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642072b85b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
104.21.92.107200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 104.21.92.107:0
File type ASCII text, with very long lines (9959)
Hash 2f89b08855471c7476435ce0bec33ba7
970533f152623df03b5fc6fb793b21889e4e0349
d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DR9u45j60i2uW84tdKFPQqwYXfdr1P7ZMqOWljqZzsX%2FzPJ3UNBhML9HCvBxpOOUGdUFzx1yi7hqWMaywnMETDDe6hS%2Fh%2BngIya0tRxnEyH5GUY7aADmNGasPBvaJA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642072cd6b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
104.21.92.107200 OK 831 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
IP 104.21.92.107:0
Hash e9dddc3f35ae0107e1cf0cf680a251a7
26e702e6ed363dbd7508cdfaebfb3c37b51e966b
3c114642de150576617c3e8c9a5ca94d0f351e0d653a069bb269c444fdf80bfd
GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uFFKjWQPEB%2FFFda9Dn0iVeATLYEbe%2FhjPErn1knC7zwWnmwWOvGi7e47wBuPZgSPlEJzhkfU5fwhmluSX5iwyMyK3%2FgddhwH4zpS5pl0jYxIV1MNhs7vJ%2BxHytT6Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642072bdcb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
104.21.92.107200 OK 34 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP 104.21.92.107:0
File type ASCII text, with very long lines (31997)
Hash 9805483db0b3d5fd0639186799348f34
eb28f7ec752038cbd9425c66b54c339ad1236695
9dca4af372f7b1d8d1af5a3c18ed6a827e4f8f358e8404b64fa7a2ff961b5c60
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yvq3jr%2BCHDpO4EAu8m7PHUw0t2xNoCUAU%2FsgPF1ACGQIrJZrGkTA6C3a%2Fn%2Fcg4wm1Lid%2FsEW3gFL9LH4z2pOFUxZvHB4FuZfDFox%2Bq6MQ%2Btlfuc2Oh8BFoUTiaVF8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642071ff50afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
104.21.92.107200 OK 743 B URL HTTP/1.1 surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
IP 104.21.92.107:0
File type ASCII text, with very long lines (1391), with no line terminators
Hash b146105040f6faa62806b35ad455d121
14aa49ed4f29b666221a8de3fd17f04455f12b15
05f4d51649be6878352af6843f9a5ffc14bb96ca7a02db21a35a14f6a150b004
GET /wp-includes/js/wp-embed.min.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpvwmJg1YEnH74qx08ZWofRQ%2FltqEZu4MI0SYlIu7yPJ269yc7s7fwdfXZIw2Kkv1bxbPO7DHZdMi53Miy00WBTDAkMWSqZ5TJkQfeaAgsv45rZEb%2FZtvIrO1%2BG%2FwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a64207dd2fb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
104.21.92.107200 OK 457 B URL HTTP/1.1 surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
IP 104.21.92.107:0
File type ASCII text, with very long lines (1087), with no line terminators
Hash 1fa25d83bb5be8564841713f48e94332
dc5921fc9171ae8f69a52e1f00ea1c43ae3ea8d2
da9e1e7235fb597df5fc429718a771bc8431810ea07f7d2c40dba0b56ccd8cf7
GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YLlQyMxA%2BL8BS5K8VcPxaht6lQXi1sNEzFLfJw42WEBev%2BPfsVPtgW%2B9jOXczpfYKoj3jlsEaVaxeNwN18oTOB%2Fq%2Fn4n66ZKiE2CPdUagtlHeQKrxxjAQcyqXLZrDg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a64207dc55b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
104.21.92.107200 OK 748 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
IP 104.21.92.107:0
File type ASCII text, with very long lines (516)
Hash a916ec8951d8cb10ee6fdfecaa3eae84
0f5ed720b36bf6d0474bfdea0fe97ce2f4c28296
eadd127040367bb43fe787cece1d4e624cb6933c31e20b8b73611a79bdd3b15b
GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZE5WNhpv%2FN2hqnzfGZwmDUxDpH9Nf20on4528yBeAeatrOvbu1h%2BEEqIxzlKi3sRSg6XWiffDDR7Il7jy4Jj8lXXz%2FevlhuSxHvfuylkyTTAGut8LYUA%2FK0nJm%2FMEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a64207d8410afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/ljekdimdzcz.php
104.21.92.107200 OK 11 kB URL HTTP/1.1 surefap.org/ljekdimdzcz.php
IP 104.21.92.107:0
File type ASCII text, with very long lines (10335)
Hash d4694067e6a66c7bce6b9b83d68759d8
4d8b6990cf69435e7ded860c28c50de21656a185
9ca0029d170f2006ae5ff84017a15b24b01863365eab5c0c3a30ac38db149a50
GET /ljekdimdzcz.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=120
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xsYvXfOSbPiwSu5P1k63USG3%2FxM6gnGPf2yvZItuMuD9RTyQELQFOUKGbRBiNBi%2FKkFuzitpu83nJ1br3yKh3ahbZuxV56vlwzld0q3auLyRN%2B%2Bq%2BqfIE5xsJCEq9w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74a642072abeb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nefree.com/images/2021/09/19/131066e050b6a4ebf4017bf4ce041ed6.md.jpg
104.21.45.92200 OK 31 kB URL HTTP/2 nefree.com/images/2021/09/19/131066e050b6a4ebf4017bf4ce041ed6.md.jpg
IP 104.21.45.92:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x346, components 3\012- data
Hash 0767b975c7be0c80cdbe416363e3f28d
948a199f4d0d965e4a5536cf4bd415f681100ac3
b2efe104da1eb246b8dc3e791e803086f1139e86299ed57ed536015580e6eee3
GET /images/2021/09/19/131066e050b6a4ebf4017bf4ce041ed6.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:49 GMT
content-type: image/jpeg
content-length: 30800
last-modified: Sun, 19 Sep 2021 13:42:53 GMT
etag: "61473e5d-7850"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sqc31wfauKOHoYuABNnzGhW%2F2PwUuRNQv3%2FMQezARvtZ6z84a%2BFOeLgUx4GWsM7IN%2FnTNaaAOldf5RBaoeHAK840ATXd%2BgTINIif6%2BqGI4IVffKtcK8Xy2IKg4Ww"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a64207ac40b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.o333o.com/asg_embed.js
205.185.216.10200 OK 34 kB URL HTTP/1.1 cdn.o333o.com/asg_embed.js
IP 205.185.216.10:0
File type Unicode text, UTF-8 text, with very long lines (37787), with NEL line terminators
Hash d8fdc76a5dd33ac3190ab73914c02bea
7f1fc36aae54753d2812c23e5fec79d6479cd4f5
0b2961675123d94e9b55ff2587fc3a28d65a4e41d6d5a46e9fc92e7d5b71f9d3
GET /asg_embed.js HTTP/1.1
Host: cdn.o333o.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 34388
Content-Type: application/javascript
Last-Modified: Mon, 12 Sep 2022 15:23:48 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "631f4f04-8654"
Cache-Control: max-age=315360000, public
X-HW: 1663128469.dop203.sk1.t,1663128469.cds239.sk1.c
Access-Control-Allow-Origin: *
nefree.com/images/2021/09/19/ed81e62a6f6c3829fdc45d9692447a97.md.jpg
104.21.45.92200 OK 35 kB URL HTTP/2 nefree.com/images/2021/09/19/ed81e62a6f6c3829fdc45d9692447a97.md.jpg
IP 104.21.45.92:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x350, components 3\012- data
Hash fdfafead7675930e57e30cc611ed0b6f
108f685313d1644954d615b7969422655a577c3a
df6e8376784414cd51d594393ac8c3bca13b8edf70b9f7f5fbfcf4c964fc61e8
GET /images/2021/09/19/ed81e62a6f6c3829fdc45d9692447a97.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:49 GMT
content-type: image/jpeg
content-length: 34646
last-modified: Sun, 19 Sep 2021 13:42:53 GMT
etag: "61473e5d-8756"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=svUeTAAyMtUJ525iWD23VigfJ5BtbHiUiYbUGDOvTMDBxd4lf6LI3rLcQy9X7CggCn5msXUl0IULZ3g%2BWBdoX7ZC3wz5wd15S6hsIU7H8oFqSnw30XZLvpPe3E5L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a64207ac3fb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2020/12/SureFap.org-Independent-Reven-page00151247089-281x400.jpg
104.21.92.107200 OK 25 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Independent-Reven-page00151247089-281x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 281x400, components 3\012- data
Hash 93412e29bb6a2cb6090cf284ceb64d71
ed05160b9838686d19c8c85fdc68bdb7bc8fe421
754452e52cf4f3103051bce8ada82cd4d2f0b1502ad1b2ebb4439fc8b41fff06
GET /wp-content/uploads/2020/12/SureFap.org-Independent-Reven-page00151247089-281x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: image/jpeg
Content-Length: 25103
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:06:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LOmW5K2Kh12IDkObFC0%2F2aYSQYVUcoZvIAFZyoqDPMuL0LnBHjAZpFGSOf6XZNaOQ4hSnIcRghPk9wsaQ2JsXASkDapcCeaVnWUzOmgLP86lZgl7JkpDCzKAJMIQdw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642086922b51b-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2020/12/10/516689aabae12ed0597ff030d7e80c65.md.jpg
104.21.45.92200 OK 27 kB URL HTTP/2 nefree.com/images/2020/12/10/516689aabae12ed0597ff030d7e80c65.md.jpg
IP 104.21.45.92:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x333, components 3\012- data
Hash 082c09c7e9ab127757ddb45dddc7bc14
47e47727dbb60f7d730026bae4aa0f5c8978dcda
84347f97df81abc971029f08c5a2488a1087abc601669d00618b95ce63e832e5
GET /images/2020/12/10/516689aabae12ed0597ff030d7e80c65.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:49 GMT
content-type: image/jpeg
content-length: 26990
last-modified: Thu, 10 Dec 2020 20:46:28 GMT
etag: "5fd28924-696e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ggG%2FIx98SHp8O%2F18TQDz5oUB3G6pizJxe6j7n8prIDR5%2BIOu2GAJqC4WcMdCEwbAAWV20IxG%2FvI7MK5KFKF%2F7jiR%2BWRLZvpsEhqKcr5qKWXVUPPpK95BwU1cnoj%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a64207ac3db4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash f6ad797db412f7261f5b56743a4bea11
4e71dffd02477dc025c3b6d043e43f577522243d
12aa137bc5955fe15181b149ed1dc4da30079f184287205994b77111981b6e70
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AA137BC5955FE15181B149ED1DC4DA30079F184287205994B77111981B6E70"
Last-Modified: Mon, 12 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 14 Sep 2022 10:07:49 GMT
Date: Wed, 14 Sep 2022 04:07:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash f6ad797db412f7261f5b56743a4bea11
4e71dffd02477dc025c3b6d043e43f577522243d
12aa137bc5955fe15181b149ed1dc4da30079f184287205994b77111981b6e70
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AA137BC5955FE15181B149ED1DC4DA30079F184287205994B77111981B6E70"
Last-Modified: Mon, 12 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 14 Sep 2022 10:07:49 GMT
Date: Wed, 14 Sep 2022 04:07:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash f6ad797db412f7261f5b56743a4bea11
4e71dffd02477dc025c3b6d043e43f577522243d
12aa137bc5955fe15181b149ed1dc4da30079f184287205994b77111981b6e70
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AA137BC5955FE15181B149ED1DC4DA30079F184287205994B77111981B6E70"
Last-Modified: Mon, 12 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21543
Expires: Wed, 14 Sep 2022 10:06:52 GMT
Date: Wed, 14 Sep 2022 04:07:49 GMT
Connection: keep-alive
surefap.org/wp-content/uploads/2020/12/SureFap.org-Long-Day-Part.2-page0170369852-283x400.jpg
104.21.92.107200 OK 28 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Long-Day-Part.2-page0170369852-283x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 283x400, components 3\012- data
Hash c87135a4796b0a56aa0d6972152e627b
dcd2b3e335b65229fd0a42686041a6af43c94ce2
b705ec959597d79d4a35fccb42035eddf624b4deff520ece38584bf6c5785a6d
GET /wp-content/uploads/2020/12/SureFap.org-Long-Day-Part.2-page0170369852-283x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: image/jpeg
Content-Length: 27686
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:10:35 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zB0c%2FD%2B3YC1kVmLmltpkO5rH37wjo9MbsFpGy8iN9E7N56QzzzzaL2gz5HLAwIn3QOC1%2Bcmd3kCncVWgCojQXCEtxPM10n8kccd%2FNHKEEMkNjYhpp2OF0gLAzaY33g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642086b5ab50c-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-X-Men-Files-3-Mutant-Weaknesses-DS-page00-Cover90713845-300x400.jpg
104.21.92.107200 OK 21 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-X-Men-Files-3-Mutant-Weaknesses-DS-page00-Cover90713845-300x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x400, components 3\012- data
Hash 5c474303e4744baa954644dfa7d31faf
69b215dba0a1698ba486d17d8087ee32f83e8721
a341ec76d82cbeef7cbcec42f878a3934e3344a570a1ac7c5c78e54567d38850
GET /wp-content/uploads/2020/12/SureFap.org-X-Men-Files-3-Mutant-Weaknesses-DS-page00-Cover90713845-300x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: image/jpeg
Content-Length: 21180
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:13:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qXTPpOL5hgDlTIdw9fs3FE6Burl3tNZPuHKNhnQAlobQU1iLt5kHDyepCRaNR79VRnTmmo06EK6EhYdARw29ldHyUrxmrE4LlaYC2S1fxbceT2mBhr0eWgX%2B5Q5FIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642086cc7b4f7-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Jinx-and-Starfire-and-Beast-Boy-page00181607529-285x400.jpg
104.21.92.107200 OK 23 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Jinx-and-Starfire-and-Beast-Boy-page00181607529-285x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 285x400, components 3\012- data
Hash 7aad24c5c14696401ffd8b3e15ad3028
4735a5d4a85dc52d40df0908360d2d0db0e07086
d5382ae7564e415570bc6cf80467a9d6cfd8b89d42e166244d09d4121e329d1c
GET /wp-content/uploads/2020/12/SureFap.org-Jinx-and-Starfire-and-Beast-Boy-page00181607529-285x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: image/jpeg
Content-Length: 22663
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 13:56:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gdis%2B5DgMrIhHHAe14WbP0Mxc2Ylnf7bGE7Kj9YrBS48KvnD%2FFsOsmi2dK4SMIZBF1GG2%2BGRuWhmurGKboES069eExU5v%2FglL2r8bT5pkVjCz4V2re33R2XNhepy%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a64208686f0afa-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2021/09/19/e57845e31cf768ac4ee019db29792372.md.jpg
104.21.45.92200 OK 30 kB URL HTTP/2 nefree.com/images/2021/09/19/e57845e31cf768ac4ee019db29792372.md.jpg
IP 104.21.45.92:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x348, components 3\012- data
Hash 64355bd257914726c6c555a5ca204ec9
caaff0c421414e4c10ce1130d0f79da703b7dd6f
18febcbcaeb816faf005c27f117d725a2f5c0de68fb6e7ed6a7210e9c0e61947
GET /images/2021/09/19/e57845e31cf768ac4ee019db29792372.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:49 GMT
content-type: image/jpeg
content-length: 29842
last-modified: Sun, 19 Sep 2021 13:42:54 GMT
etag: "61473e5e-7492"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=49wro5wV1H7rKFUYN0sOlcvuxO5XjDKtUF12mMoiMmbYS%2BONNPkq2Kf2u3%2FUPYXkFgHdQdTEooPQFT%2BKsBVpGDSkbWVaixk55mU36Fu2buCYa32nwpjrA04gqZ73"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a64207ac43b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2021/09/SureFap.org-Kitten-Tranny-English-page01-05831769-lq-289x400.jpg
104.21.92.107200 OK 23 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Kitten-Tranny-English-page01-05831769-lq-289x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 289x400, components 3\012- data
Hash 116d4f6b0ff2ab885a5c0461b9441ca3
c00be2126403e0e251a2bd893579e7cd0a3c7699
a966c985e2cd2d32fca9904086dd9402fbcca0a05b8996f0a076d1938f90afaf
GET /wp-content/uploads/2021/09/SureFap.org-Kitten-Tranny-English-page01-05831769-lq-289x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:49 GMT
Content-Type: image/jpeg
Content-Length: 22902
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 19:34:41 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lUB%2F%2Fzt5gCY7MgqvXYiQvXpSux5FVuSfG5PIfmPsQLyV41ktwNe18ZY5yeXcekEdxqnXoerGsn93cxrOi4UtqBg90y6YOSvOzYqJ73qyzv5DuZV6G45veD8aZKTDsA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642086c0db500-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/12/11/922d6aab2480cecbc9c6be74617b2f1a.md.jpg
142.132.131.203200 OK 42 kB URL HTTP/2 4tymode.win/images/2020/12/11/922d6aab2480cecbc9c6be74617b2f1a.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x424, components 3\012- data
Hash c0dedcf5eba2626837c85f5ce50733b2
401486317dd812be9d6e1891cb66ced9cb2fa8c9
2d737b9b7a3466110b7c54fd5c2c0ad3e71c9556b1d7bafddb669c4a772f0f1a
GET /images/2020/12/11/922d6aab2480cecbc9c6be74617b2f1a.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 22:25:49 GMT
accept-ranges: bytes
content-length: 41591
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/12/50f6ad04e29c9ffa7e634edb3c49b0ec.md.jpg
142.132.131.203200 OK 46 kB URL HTTP/2 4tymode.win/images/2020/12/12/50f6ad04e29c9ffa7e634edb3c49b0ec.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x425, components 3\012- data
Hash 2287b7430f96a707752de2f701177528
72ff1034c0daad8ef5a0077ca47925603e7fc8bf
589967beedcb7d50bf0985e2fba48b3f2dead227b3553fbd9a62aac8e11ea96a
GET /images/2020/12/12/50f6ad04e29c9ffa7e634edb3c49b0ec.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 16:27:05 GMT
accept-ranges: bytes
content-length: 45798
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4tymode.win/images/2020/12/11/4130c600b66af3cdbdf133c2f9a62982.md.jpg
142.132.131.203200 OK 48 kB URL HTTP/2 4tymode.win/images/2020/12/11/4130c600b66af3cdbdf133c2f9a62982.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x427, components 3\012- data
Hash 80d83537504e8bfcff5cfdd88be97145
4e8cc35e326d563cd3aae10061ef64611969289c
97c1e96e7da46ac2dd26e20d26aee40b967bba50fd4f82b6edab31c5dd52f3f0
GET /images/2020/12/11/4130c600b66af3cdbdf133c2f9a62982.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:35:13 GMT
accept-ranges: bytes
content-length: 47762
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/94a469c80ec61c02f1e7249826864b4f.md.jpg
142.132.131.203200 OK 47 kB URL HTTP/2 4tymode.win/images/2020/12/11/94a469c80ec61c02f1e7249826864b4f.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x424, components 3\012- data
Hash 6efe7de99ba3d4aa0d3dbb528e970e53
9f3dbda65e4503130bc128d906f07766adae2ed8
8ee7f088cfd2a87489bd31646d39304e666396ed6898b967da5a9184953c63fb
GET /images/2020/12/11/94a469c80ec61c02f1e7249826864b4f.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 22:25:48 GMT
accept-ranges: bytes
content-length: 46809
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/f26451c6a9bf00bafa0355159dd99a79.md.jpg
142.132.131.203200 OK 47 kB URL HTTP/2 4tymode.win/images/2020/12/11/f26451c6a9bf00bafa0355159dd99a79.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x427, components 3\012- data
Hash d08ca3465756dfec0f8121de8d47413d
65a2df56f18817c09131ccf7201473f9394f715d
1f7376129b17ee8b9bda205d92515f6ecfd52d6addd63235edfb595acfe8945e
GET /images/2020/12/11/f26451c6a9bf00bafa0355159dd99a79.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:35:14 GMT
accept-ranges: bytes
content-length: 47046
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/12/c1719547f4a35df94664b7d6da95dcf2.md.jpg
142.132.131.203200 OK 39 kB URL HTTP/2 4tymode.win/images/2020/12/12/c1719547f4a35df94664b7d6da95dcf2.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x425, components 3\012- data
Hash 88b17e5fecc29b80e435d21fa8821686
341f8ac7d7fd7529bc811b5c1147514c9739884f
daaf7a508e2af6ba56c98d7ba628d1681a5f2fae79943f218978fbf05a3abc71
GET /images/2020/12/12/c1719547f4a35df94664b7d6da95dcf2.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 16:27:05 GMT
accept-ranges: bytes
content-length: 39423
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/12/1c2a40ecdedd9d771ff45595fcca8037.md.jpg
142.132.131.203200 OK 43 kB URL HTTP/2 4tymode.win/images/2020/12/12/1c2a40ecdedd9d771ff45595fcca8037.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x425, components 3\012- data
Hash a3e28b026fdfc0cecd03b945c0e66eb6
b5be25ac55ce35e38d104559f9e730c9969018db
f7653f9bac0116be7d9707de00b510c5a7cb405afb3ef8210b82af094da884e5
GET /images/2020/12/12/1c2a40ecdedd9d771ff45595fcca8037.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 16:27:05 GMT
accept-ranges: bytes
content-length: 42823
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/dc1a01ae0804c5f36c00a113abc0b048.md.jpg
142.132.131.203200 OK 45 kB URL HTTP/2 4tymode.win/images/2020/12/11/dc1a01ae0804c5f36c00a113abc0b048.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x427, components 3\012- data
Hash b8ebd5db424b29c4375791d8d43a427b
c244e0ad59958623299d7782c194147ae13ad2ab
3349d75df188efa4e07b88e2aaae812232912748c5e60a549aa6d33ff8627d5e
GET /images/2020/12/11/dc1a01ae0804c5f36c00a113abc0b048.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:35:14 GMT
accept-ranges: bytes
content-length: 45414
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/1daefd28b6d3c468f3feaf0168a469ea.md.jpg
142.132.131.203200 OK 48 kB URL HTTP/2 4tymode.win/images/2020/12/11/1daefd28b6d3c468f3feaf0168a469ea.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x429, components 3\012- data
Hash cb22aa2e13b642c9bd21ba77f3cd9df2
56a5cc4022d8d31fd29de73772da1e3e01927351
ddbdd2d301238f745a9ed2f9e115961bd6a5f4f7ec30061215e0d543be8e4fa7
GET /images/2020/12/11/1daefd28b6d3c468f3feaf0168a469ea.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:55:23 GMT
accept-ranges: bytes
content-length: 48464
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/48e061bff5087fba07b7a1f27abe7fdd.md.jpg
142.132.131.203200 OK 50 kB URL HTTP/2 4tymode.win/images/2020/12/11/48e061bff5087fba07b7a1f27abe7fdd.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x424, components 3\012- data
Hash b4a2140bbb1016589343cb453e5ac46f
9ea5ae6e9670d17392d404ed95fca98c907b0ce1
3c196f2592e16ea6bd21ac04f61bbbfa039b730a81be30068cb94f8d758f51af
GET /images/2020/12/11/48e061bff5087fba07b7a1f27abe7fdd.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 22:25:48 GMT
accept-ranges: bytes
content-length: 49476
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/25f2702215026a36e7f3ce9749da408c.md.jpg
142.132.131.203200 OK 57 kB URL HTTP/2 4tymode.win/images/2020/12/11/25f2702215026a36e7f3ce9749da408c.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x427, components 3\012- data
Hash 028028f3a2eee16a21e132157cc9e62f
a4a517723a033d3e03d1623bba9a5745bde81c68
bf189e99625234245197e34a7ff4bd3e474a7552bb2085e5b2841611e78a793c
GET /images/2020/12/11/25f2702215026a36e7f3ce9749da408c.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:55:24 GMT
accept-ranges: bytes
content-length: 56925
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/8e799881430ce342ac491f05613629e6.md.jpg
142.132.131.203200 OK 58 kB URL HTTP/2 4tymode.win/images/2020/12/11/8e799881430ce342ac491f05613629e6.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x428, components 3\012- data
Hash 56573f3c5f4dc9ee05ea5527f3201fc7
e1042543902c93b3cb55c8ec44e1e9e0b8358bd3
4918499375cb341fb5268c1aafbacb34432a4337653c48b91fff6d6a19ef22ed
GET /images/2020/12/11/8e799881430ce342ac491f05613629e6.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:55:24 GMT
accept-ranges: bytes
content-length: 57622
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2021/09/SureFap.org-Role-Playing-French-page01-13960784-286x400.jpg
104.21.92.107200 OK 34 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Role-Playing-French-page01-13960784-286x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 286x400, components 3\012- data
Hash 546ed87265f3bfa57fa25aa49b2327fc
8f6c7d0a0a0ca5931d8ddbaeeb2a1b0f29f2d013
e34bb25c1cd3c22692a2f5c358d11f861277e932eb63934b6a0e054b5b4ba6d4
GET /wp-content/uploads/2021/09/SureFap.org-Role-Playing-French-page01-13960784-286x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/jpeg
Content-Length: 34403
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 19:45:35 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2MDEUZMmbEx7eAIqCWQzyWgOg6DEbQRom2WwJLZbAAEDMSpdLA51%2BHfNZPDCFkhFN6ULCoB95EAYF6hqXUDwDBlQp2rVYH0EtGRZBKwR25IBsy0DW3YrMfbnxz%2FOXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642088d8bb511-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2020/12/10/9e00f8bf3d9ae1fcd2ef20d0d860ace4.md.jpg
104.21.45.92200 OK 33 kB URL HTTP/2 nefree.com/images/2020/12/10/9e00f8bf3d9ae1fcd2ef20d0d860ace4.md.jpg
IP 104.21.45.92:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x355, components 3\012- data
Hash d409dca28a1b17d20607dd222f774469
8a5549f49c281cf3329b2ac1a6e907c0e6202f6c
bcc664810c1f73cacf1e1e3679f94a1f0a853e57f60670c574559d19d2b87c9b
GET /images/2020/12/10/9e00f8bf3d9ae1fcd2ef20d0d860ace4.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: image/jpeg
content-length: 33072
last-modified: Thu, 10 Dec 2020 20:46:27 GMT
etag: "5fd28923-8130"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XMDrm3PCGatkexe6Kvvf%2Fh0VLEGTDAjC%2B39%2BF9dOAs0fPHx1wgK9dyt%2F6RYRFtn%2BjlMLkzvYrj2aXjdfJ0YgIn%2FLu2VHSdtY7ZVqQqI0i7aWTJRhIjOslsxuZLjQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a64207ac45b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4tymode.win/images/2020/10/28/0fdc5a7edf067907c8b9b7715728115f.md.jpg
142.132.131.203200 OK 92 kB URL HTTP/2 4tymode.win/images/2020/10/28/0fdc5a7edf067907c8b9b7715728115f.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 500x698, components 3\012- data
Hash 07254207137e2f4b19511b92793dba9a
9fbdc450d2d7fa264c5b0dfd41f1acf6c8be9b5a
625a613e974f2a2b47315c014c92e74dc0aa7b6cac1ae13f39c463e231f6190c
GET /images/2020/10/28/0fdc5a7edf067907c8b9b7715728115f.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Oct 2020 15:03:46 GMT
accept-ranges: bytes
content-length: 92487
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
135.181.208.216200 OK 3.6 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 6382ff667ef988ab25ced87aebf4a389
f6e64a0f2cdeae22d16f4951d5d45bf780acbb19
d3d7ee854bfdc12f8f307d11b463bbc62898de50254d9b1d950002bec823048a
GET /api/spots/303160?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=N36RmnBgffdUQugUd77v; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
135.181.208.216200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash bd1de96aea00fa12648e8f30ab37d33d
87a0212a1d0ea8badfeb004aeef17876fea6c986
b1d64e727853e197860f7285172700f2e26178ef5ee6ed46694b75489e33a42a
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=I3BySeCr7loukQrgrcAy; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
4tymode.win/images/2020/10/28/f54520dcf127025c009ee2942c8260d6.md.jpg
142.132.131.203200 OK 96 kB URL HTTP/2 4tymode.win/images/2020/10/28/f54520dcf127025c009ee2942c8260d6.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 500x698, components 3\012- data
Hash fe05d6ff1a88618f968ae78e292bcab3
f93674bcdffbf2a47cb0d6f0bc27b15c59d11c90
cd13e80ee5438518deaa854d7de561241ddb1bf3f7d0c7d02aad3f3d86a84007
GET /images/2020/10/28/f54520dcf127025c009ee2942c8260d6.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Oct 2020 15:03:45 GMT
accept-ranges: bytes
content-length: 95984
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
104.21.92.107200 OK 270 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3\012- data
Size 270 kB (269711 bytes)
Hash d30a4392660ba150ffcb590ecf3b959f
917018a795e409303eecc5e560c2cc4db2785978
5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa
GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/jpeg
Content-Length: 269711
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gm7cQwALtG1QwPXmyxMhcNugMflJPA1CON308Tn6vIpjOygb9KIPiBUjTAkSCrwQIyJbsYXk8o7ThHTnJKWOxjxn57jkpNdVzCjsGQRmdLDPRfSaFHsfAlBW07LTTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642099dc5b4f7-OSL
alt-svc: h2=":443"; ma=60
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
135.181.208.216200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 94ff66944ef9288af17811a11d42c8a5
4c559a6c1bc83aa12481509a0730b68489059dcb
c931a3c9cd63e092b93b4de98b2dad03db1621598da57e4ce8d332cc77349656
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=djs8l5AmcgvUEPSKFCup; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
ayazik.win/wp-content/uploads/2020/12/medium/6QTQyw0b5a559312-med.jpg
79.137.52.116200 OK 15 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/6QTQyw0b5a559312-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 214x300, components 3\012- data
Hash 9a4c4234c2cd1af16c01bd34cfdffcc5
aefe7765a9bc5fa06dec5b705e35d2fcc32fbcac
67bcbac412160b3655e595e2215e5cc39d6c3f523c3da1ca7a2316e1a337601c
GET /wp-content/uploads/2020/12/medium/6QTQyw0b5a559312-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 21:18:17 GMT
accept-ranges: bytes
content-length: 15110
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/e3Smo6Yc4F236177-med.jpg
79.137.52.116200 OK 18 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/e3Smo6Yc4F236177-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x300, components 3\012- data
Hash f265402935f4493031cb5a1aa3a41216
7813239376351e4a0113ab56c037c72ca757e951
28b35e033284534776a112b39ef6871e0fd70b8fc355d37822bc08c82ec2f485
GET /wp-content/uploads/2020/12/medium/e3Smo6Yc4F236177-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 07:02:06 GMT
accept-ranges: bytes
content-length: 17735
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
nefree.com/images/2020/12/10/4e00feaa070d331961436d381a0ca990.md.jpg
104.21.45.92200 OK 43 kB URL HTTP/2 nefree.com/images/2020/12/10/4e00feaa070d331961436d381a0ca990.md.jpg
IP 104.21.45.92:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x357, components 3\012- data
Hash 79539915fd20b8c471f8f1524a778be4
e2f5634165a2f0292c8605a89af371bac30fd14a
60c8611811e44c20f2d1b37f755dd9024d9f01e56bdd047d6e0b6c8e1971d99c
GET /images/2020/12/10/4e00feaa070d331961436d381a0ca990.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: image/jpeg
content-length: 43199
last-modified: Thu, 10 Dec 2020 20:46:29 GMT
etag: "5fd28925-a8bf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=42cegjUaKLkXp3ElgT4ey0lH%2FgIeWfG%2FB%2BEbLwY%2F44HzGSPsm29%2FFg6H%2F3DbCabQZWT8lvhmtBhf1HDQaJgV8VlWa6QHT4iCT3ITbc%2BZlYT3DL9czuPpaExd2G0y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a64207ac46b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/TIGq5nrKXr290534-med.jpg
79.137.52.116200 OK 19 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/TIGq5nrKXr290534-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 211x300, components 3\012- data
Hash b130e23cf700a3a6f74948a53de6b02b
271c9de619952b32ef9f6fb82b452f049db826a0
b1669575a5811a2aa0cf64105724514d054044d1547d40ff6550474679a6d629
GET /wp-content/uploads/2020/12/medium/TIGq5nrKXr290534-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 07:02:07 GMT
accept-ranges: bytes
content-length: 19103
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2020/12/SureFap.org-StarFire-Vs-See-More-page0169123584-280x400.jpg
104.21.92.107200 OK 24 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-StarFire-Vs-See-More-page0169123584-280x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 280x400, components 3\012- data
Hash 2c0ad1c479283e5bffc7278c56aaacc3
95f5570cfa11399362a3e81411ee683872418091
d37e1c8711b4a53fde8c599cc227dae77988938e5a472682270fba901cf2aa72
GET /wp-content/uploads/2020/12/SureFap.org-StarFire-Vs-See-More-page0169123584-280x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/jpeg
Content-Length: 24152
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:30:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bs37R30M%2FpsHKwMhCxMghPv5xxiFZVPt8o3wh%2FA9vSxfYhVy3XPOZv%2FzBVGtDoR4xZblfab9dMizmF%2BQMhj2Jl9zYl74Hf4e4ewMWUKGX7FeRdlZ2MaOToyWD5mRaw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642094bd0b50c-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-X-Men-Files-1-A-Typical-Day-of-Heroes-page00126089735-lq-281x400.jpg
104.21.92.107200 OK 33 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-X-Men-Files-1-A-Typical-Day-of-Heroes-page00126089735-lq-281x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 281x400, components 3\012- data
Hash fa0adfa30b5f7344a1d3e5ee49e23dc5
dd00536b2b9ff4e19f913a36dfb780d5de14ad2f
f147460557d6ddb08da9f8aa4ba5b6a6916e58b9a41eb7d3f64cf31720902002
GET /wp-content/uploads/2020/12/SureFap.org-X-Men-Files-1-A-Typical-Day-of-Heroes-page00126089735-lq-281x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/jpeg
Content-Length: 32821
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:23:02 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N3M%2BEXf9fIT4WbGo1HUiBjrlXih0J8RdsAS4aYVjVmk%2Fk57Svg%2B1HGGA7j5XJF8S5ZDeKTyDK1ZpNA2yi2Xv%2Fs%2Bv2GM2QMMDarF5lw3E%2Fqnkq7Tu9h2KhKJCILXcEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420969b0b51b-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
surefap.org/wp-content/uploads/2020/12/SureFap.org-Harry-Therd-Round-page0131902674-282x400.jpg
104.21.92.107200 OK 24 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Harry-Therd-Round-page0131902674-282x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 282x400, components 3\012- data
Hash 4f2d84e5e817c84fc4656585bee3060d
480d8886ed0b8d4bca0da609751e7a3b1c04ca3c
edd9dbb5dfdfa63d709b27a7c800599cac6d51d39b20166d0a3fa255d27d9d17
GET /wp-content/uploads/2020/12/SureFap.org-Harry-Therd-Round-page0131902674-282x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/jpeg
Content-Length: 23594
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:35:41 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7oiUMUE%2FX5d4TTWDKIwB9tIEqEqML8locb7%2F9bQDw2MZNIHWPOzHe2s4kD0dVQaauSMCTebVHW5LN6U4zOuJ55iybNV2qIDgi%2ByPFnihdvT9Yy6AkZxjVot5%2BtBLxg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420948bf0afa-OSL
alt-svc: h2=":443"; ma=60
ayazik.win/wp-content/uploads/2020/12/medium/iIXYgIanRb747933-med.jpg
79.137.52.116200 OK 16 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/iIXYgIanRb747933-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 212x300, components 3\012- data
Hash 22a5fb1462a059f4b9404fdb8cd2ed70
54f54f03c2d96706aef4ae0636cbdcdd7c2e45b9
d4714502c79556d48ae21e69cc37751ebd0f037e9caef071029afd3c01dc2257
GET /wp-content/uploads/2020/12/medium/iIXYgIanRb747933-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 14:54:34 GMT
accept-ranges: bytes
content-length: 16115
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/O22MhkmOZI543456-med.jpg
79.137.52.116200 OK 18 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/O22MhkmOZI543456-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 214x300, components 3\012- data
Hash 4e7b2746c38a088825bbe399fbb4be60
4b4c3dfe77b5479fcd2663e552e28975cb5a9bc6
ac3789bc8cc1a70c69447aabfabb291946d08f6afcb76081226fcb47b959b850
GET /wp-content/uploads/2020/12/medium/O22MhkmOZI543456-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 21:18:17 GMT
accept-ranges: bytes
content-length: 18060
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/tX6tLr0Hqj648235-med.jpg
79.137.52.116200 OK 17 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/tX6tLr0Hqj648235-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x300, components 3\012- data
Hash 676578b547aa52686122906f01ca7441
469ee962c5bc4216136ff38bd601b68b4aeb0705
fd3153c0100b709eac3b51cf6cee5738d2dcee55a97248dcd5f54aaf7311afd2
GET /wp-content/uploads/2020/12/medium/tX6tLr0Hqj648235-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 07:02:07 GMT
accept-ranges: bytes
content-length: 17328
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/C9unIBNVu3247335-med.jpg
79.137.52.116200 OK 17 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/C9unIBNVu3247335-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 212x300, components 3\012- data
Hash ab0a38b8a85c6fd78f030822da74f094
c12c86fc5149df1582f5e3e661bfc841781b9386
f8fae5adcb43172cecd3be139254da3ca0c7fa66723bcea160ddc6e89cb8721e
GET /wp-content/uploads/2020/12/medium/C9unIBNVu3247335-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 14:54:34 GMT
accept-ranges: bytes
content-length: 17121
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/qNjLURLG8e560577-med.jpg
79.137.52.116200 OK 20 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/qNjLURLG8e560577-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x300, components 3\012- data
Hash 42c26e79960cb0aba6322fd4c21605af
42e4d324d760a5069aea9dbb7b8232ba9b397f1c
99eac98d8cd88dee3a692f48ba820f9531ed77892e8d0c72c50383932ce4cef0
GET /wp-content/uploads/2020/12/medium/qNjLURLG8e560577-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Dec 2020 14:54:34 GMT
accept-ranges: bytes
content-length: 19990
cache-control: public
expires: Wed, 14 Sep 2022 05:07:49 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/yRJ2M1B9p0433471-med.jpg
79.137.52.116200 OK 22 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/yRJ2M1B9p0433471-med.jpg
IP 79.137.52.116:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 214x300, components 3\012- data
Hash 354d8b55d319778060e608b8595365ab
08cac0e4cbff5c0ac892a822850affbd7a864e28
c5c756e042530465bcc3e4a1bbfad75204fc5278abc2db9598dba48f2deda0ab
GET /wp-content/uploads/2020/12/medium/yRJ2M1B9p0433471-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 21:18:17 GMT
accept-ranges: bytes
content-length: 21620
cache-control: public
expires: Wed, 14 Sep 2022 05:07:50 GMT
vary: User-Agent
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:50 GMT
server: Apache
X-Firefox-Spdy: h2
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
188.72.219.36301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP 188.72.219.36:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
188.72.219.36301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP 188.72.219.36:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
188.72.219.36301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP 188.72.219.36:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
142.250.74.163200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://surefap.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 21:09:41 GMT
expires: Tue, 12 Sep 2023 21:09:41 GMT
cache-control: public, max-age=31536000
age: 111489
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2020/12/SureFap.org-Harry-Second-Round-page0167340982-300x400.jpg
104.21.92.107200 OK 29 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Harry-Second-Round-page0167340982-300x400.jpg
IP 104.21.92.107:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x400, components 3\012- data
Hash e06f3e3e34e968b28a8b65a91c777fd7
cf1cc91c53e11c1be95283420a35c5d5790643f2
180e218a3f63ce987a500e38010e33309000df5bf0cc0e2bad2706fdbde0c1be
GET /wp-content/uploads/2020/12/SureFap.org-Harry-Second-Round-page0167340982-300x400.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/jpeg
Content-Length: 28972
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:44:28 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JXz6l%2BwEfVI6K0q0h7os0%2FANyP706jtgwFNlXHuKXvU2ZhXOqUYysP2r1uApIHZRzmkaRXIUjGTu31Df%2FoKkFflDCXMa3tQ6Na115PQvOKZWDZ9bbKpvCOQVDEoyaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a64209be17b511-OSL
alt-svc: h2=":443"; ma=60
a.shukriya90.com/api/click/8472792956728444095?c=90
135.181.208.216200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/8472792956728444095?c=90
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/8472792956728444095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
a.shukriya90.com/api/click/3942406068590701095?c=90
135.181.208.216200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/3942406068590701095?c=90
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/3942406068590701095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
a.shukriya90.com/api/click/3131775328525028095?c=90
135.181.208.216200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/3131775328525028095?c=90
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/3131775328525028095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4tymode.win/images/2020/10/28/c6995e0179b939aeeabf4032ca561352.md.jpg
142.132.131.203200 OK 329 B URL HTTP/2 4tymode.win/images/2020/10/28/c6995e0179b939aeeabf4032ca561352.md.jpg
IP 142.132.131.203:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /images/2020/10/28/c6995e0179b939aeeabf4032ca561352.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Oct 2020 15:03:45 GMT
accept-ranges: bytes
content-length: 118505
content-type: image/jpeg
date: Wed, 14 Sep 2022 04:07:49 GMT
server: Apache
X-Firefox-Spdy: h2
stenadewy.pro/a.W-ZLyMPN3OB_1QcR2ShTa-bV2W5XlYS_WaQb9cNdD-Ef1gOhTiU_ykMlimZn6-bp2q5rlsS_WuQv9wNxD-Ez1AOBTCU_yEMFgG?iframeId=vqeoia
188.72.219.36200 OK 0 B URL HTTP/2 stenadewy.pro/a.W-ZLyMPN3OB_1QcR2ShTa-bV2W5XlYS_WaQb9cNdD-Ef1gOhTiU_ykMlimZn6-bp2q5rlsS_WuQv9wNxD-Ez1AOBTCU_yEMFgG?iframeId=vqeoia
IP 188.72.219.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a.W-ZLyMPN3OB_1QcR2ShTa-bV2W5XlYS_WaQb9cNdD-Ef1gOhTiU_ykMlimZn6-bp2q5rlsS_WuQv9wNxD-Ez1AOBTCU_yEMFgG?iframeId=vqeoia HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
188.72.219.36200 OK 5.3 kB URL HTTP/2 stenadewy.pro/aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn
IP 188.72.219.36:0
File type ASCII text, with very long lines (2401)
Hash 7f58ec70666470af697b4a8828d93686
3134c1b1a5bda88a913f31cd34aedfd96c47af04
c3d51c011af04fd1041e6394b492dc3210ec681909e06dfe0a66c12e35b17d08
GET /aMWOZRyKQ.2r9BklZKTC9f6XbS2/5GlGS/WiQR9yNZDaES2-N/j/UV3/N/SwZsw_d/XbNmoMWCmg9nuVZKUtl/kNPLTwQ/xxNAjnYV1CNjzeUn HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
192.243.61.227200 OK 9.8 kB URL HTTP/1.1 www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26937), with no line terminators
Hash 8b3e5bfb8c37c7933d1b1ade18460532
858b87dd635a1dc8a1ec1258230e9cb47a785bd9
8f09b22d90eb6fbde7a7cd8db5585991e8f831cd4f7f889c6ec34ee8108657b5
Analyzer Verdict Alert quad9 Sinkholed
GET /7a2fa356cc779900c863a51e810fbfce/invoke.js HTTP/1.1
Host: www.effectiveperformanceformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 146e0e41aba3e0924f9dc0081577611b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5190
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:50 GMT
Last-Modified: Wed, 14 Sep 2022 02:41:20 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
135.181.208.216200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/352013?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=D4RyJJTnUHjxRd2AH1dl; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
104.21.92.107200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
IP 104.21.92.107:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 358948a0ec900509e53396438fadea91
c47bd41c2dfd3879ca398829ac3438fce227dd96
d4cc3dfa1061aedf2533cf134f9d584568bc41a25090fb7ce77c5cdbec6c37e6
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hZOEXdUzAkeP9EVwdvacoEcxxoCSfLq8cM3SW6hWdllstM4GzOOyerUT6SwBkwA92HDQA%2Bo6bcfA2DvjIbYFn8xejUuZjaYDUAqxpYCYFwEpyP%2FP%2B2%2FDSs1glbvmaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420c8fbab4f7-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
104.21.92.107200 OK 121 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
IP 104.21.92.107:0
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash f395c59b99ad9effdd18186e3416b83f
31fa705e99763fd0d6183cf20c99e99605a8987f
9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632
GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/png
Content-Length: 121
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dvkAaGOWMT7shNZwmIOpxYCvK5%2BtSUJeKkPJ2J76PnSrOp%2B4Hg1J3SFIqnmz65y8L6yzefEkjuU%2FC2JLI0%2BJ0LCWbL6nhEYSxrkG2Z%2FnBZH8uzyjH4b4rmodyTBo3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420cd810b4f7-OSL
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 2fc3b5eb9085eca43e4d88936932d44c
e59ae2e54c872725e60eb6d333a716be9677fba3
199fc94cedc302abb9b72051981be93564893258027f7e821646766f0ce1fb9c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 04:07:50 GMT
Last-Modified: Wed, 14 Sep 2022 03:56:59 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EnOE2UkrGYeXXvQkTYJBSgjCYB-d5TEW4pk6_2yFAiHkr_0nOggtZw==
Age: 652
surefap.org/favicon.ico
104.21.92.107200 OK 2.4 kB IP 104.21.92.107:0
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash e4cb9c2ef4866c61686ea529cca5864c
51b1a32b077611d3f312c177cca13717e1d4c7aa
fed799214bbf9fecbb850e4a9013982864d232b335954ae57ef807b559821225
GET /favicon.ico HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/okunev/
Cookie: PHPSESSID=0t5edb27opij71b6vkjdvt4t77
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:37:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6821
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1jIQ7FL5acymw%2BG%2FPPvxf2xZwszVpTobhWZghjDMdjNzlVDpgJUCMhlj62Qi5qUfED7cid9Nh%2B5KIsCkhVACpF3zAulMUM6G%2FMuQ9DME%2BP%2BkmmJSWFyZBrolXi4pdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420d8872b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
simplewebanalysis.com/stats
52.59.153.168200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.59.153.168:0
File type ASCII text, with no line terminators
Hash 00cee978632899ca059147731fad4ae8
e9a9d752e04323a3aeb8dc3d9bdb8d35a17bd2b3
e41e709f19b823c12ba8c02ff80b35a3eaabcd228c1ff7de8c8d50cb868857f8
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
set-cookie: uid_id2=d57d935a-a3b8-4140-bc93-14e53854039f:3:1; expires=Sat, 11 Sep 2032 04:07:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
10945-2.s.cdn15.com/creatives/152327/199283/425871_ee9a7.gif
67.216.89.41200 OK 378 kB URL HTTP/2 10945-2.s.cdn15.com/creatives/152327/199283/425871_ee9a7.gif
IP 67.216.89.41:0
File type GIF image data, version 89a, 728 x 90\012- data
Size 378 kB (378033 bytes)
Hash 23256a77f1398a3bce4652655188358b
5f3a817f31f04c665ce41140b76da85558e3a3d1
b953fdc460f1f5f72863ac9083e2bed01e02b9ffba2d42edaf1dbb776f780afe
GET /creatives/152327/199283/425871_ee9a7.gif HTTP/1.1
Host: 10945-2.s.cdn15.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://stenadewy.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.0
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: image/gif
content-length: 378033
last-modified: Fri, 01 Apr 2022 16:46:46 GMT
etag: "23256a77f1398a3bce4652655188358b"
x-timestamp: 1648831605.67539
x-trans-id: txe9184ccb6e24484085e83-00631e8637
x-openstack-request-id: txe9184ccb6e24484085e83-00631e8637
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsrP7jnHS8YSuPjrkuTCVphpOep5ZtMQ/BuVATeWDB/wTfYfr6RO3mwsJAG8WiB2Xy4r9ZCzEX+KXj7FcuF7pXjs
x-served-from: l1
expires: Wed, 22 Feb 2023 08:52:14 GMT
cache-control: max-age=13927464
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
x-vhostid: 160, 21032
accept-ranges: bytes
X-Firefox-Spdy: h2
adserver.juicyads.com/js/jads.js
185.94.236.244200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP 185.94.236.244:0
File type ASCII text, with very long lines (3769), with no line terminators
Hash 65b1efdf55163b144c5018b8772765ad
509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eb9"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201
88.212.202.52302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201
IP 88.212.202.52:0
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 302 Moved Temporarily
Date: Wed, 14 Sep 2022 04:07:50 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201
Content-Length: 32
Expires: Mon, 13 Sep 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Wed, 14 Sep 2022 02:41:12 GMT
expires: Wed, 14 Sep 2022 04:41:12 GMT
cache-control: public, max-age=7200
age: 5198
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 99d99b7c07c6aebb1b31a4202613fa64
c571ef78d21b7bbaf2dd4b6883f3fc253a023d04
7a36580b20c0dafebe887a42b71ff48561bfae7b6c63f25df2c3b95db0f61f0a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 13:13:58 GMT
Expires: Tue, 20 Sep 2022 13:13:57 GMT
Etag: "c571ef78d21b7bbaf2dd4b6883f3fc253a023d04"
Cache-Control: max-age=550566,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a6420cefed0b06-OSL
top-fwz1.mail.ru/js/code.js
95.163.52.67200 OK 13 kB URL HTTP/1.1 top-fwz1.mail.ru/js/code.js
IP 95.163.52.67:0
File type ASCII text, with very long lines (763)
Hash 2f46653e88cfd12c1a6a8a22fdff6015
257ac398c7b908f2cc339488c4ca13395351acf7
6f89a07b283479f1370b8d1444cf35f223a092bc4d6e67090804e0c4b80ab832
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: application/javascript
Last-Modified: Tue, 13 Sep 2022 17:32:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIC:1663128470:0:::; path=/; expires=Fri, 15-Sep-23 04:07:50 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"6320beaf-7ecc"
Expires: Wed, 14 Sep 2022 05:07:50 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j96&a=1967879594&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&ul=en-us&de=UTF-8&dt=Publisher%20Okunev%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=1456726811&gjid=954233653&cid=1266163884.1663128457&tid=UA-68853511-3&_gid=1861249424.1663128457&_r=1&_slc=1&z=689029920
142.250.74.174200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=1967879594&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&ul=en-us&de=UTF-8&dt=Publisher%20Okunev%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=1456726811&gjid=954233653&cid=1266163884.1663128457&tid=UA-68853511-3&_gid=1861249424.1663128457&_r=1&_slc=1&z=689029920
IP 142.250.74.174:0
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j96&a=1967879594&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&ul=en-us&de=UTF-8&dt=Publisher%20Okunev%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAAC~&jid=1456726811&gjid=954233653&cid=1266163884.1663128457&tid=UA-68853511-3&_gid=1861249424.1663128457&_r=1&_slc=1&z=689029920 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://surefap.org
date: Wed, 14 Sep 2022 04:07:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.149.83.187101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.83.187:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nKgmMxtgrb/sP0atZ/t+Pg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6GwpRY8kj5pkCiqai0unQPSkKok=
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash d009c344dc7ed2bf6ac0d8cf6209696b
d4f85a81cab8834513a7857b0cbbb224fd3831e9
23e836160c88d424a9e5f0a07648b05b618418d3c51fdfd8cdd6d08657136327
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 18 Sep 2022 00:44:47 GMT
ETag: "d4f85a81cab8834513a7857b0cbbb224fd3831e9"
Last-Modified: Wed, 14 Sep 2022 00:44:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3458
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420e8cdcb4ff-OSL
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash d009c344dc7ed2bf6ac0d8cf6209696b
d4f85a81cab8834513a7857b0cbbb224fd3831e9
23e836160c88d424a9e5f0a07648b05b618418d3c51fdfd8cdd6d08657136327
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 18 Sep 2022 00:44:47 GMT
ETag: "d4f85a81cab8834513a7857b0cbbb224fd3831e9"
Last-Modified: Wed, 14 Sep 2022 00:44:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3458
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a6420e8dbeb4ee-OSL
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201
88.212.202.52200 OK 1.5 kB URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201
IP 88.212.202.52:0
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash 235368c0e62bc25c2f7e8185ab739a67
c093fb0a97bcaaa7f9fbe01911478a3ca9e324be
5ac63608a1800d12a2d62e581adb591760fbc565b440c11fe967f3972ea471c7
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/okunev/;0.9486301399276201 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 14 Sep 2022 04:07:50 GMT
Content-Type: image/gif
Content-Length: 1544
Connection: keep-alive
Expires: Mon, 13 Sep 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
87.250.250.119200 OK 1.6 kB URL HTTP/2 informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
IP 87.250.250.119:0
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d5036c6e920170bea8115fe6c56c5b4
d061de3cce80647fd429a9686d33f997b4c589a0
3075e8ce127330f14b029c183e28678397959663a276bb87df5e13cc415877e0
GET /informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews HTTP/1.1
Host: informer.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 1589
last-modified: Wed, 14-Sep-2022 04:07:50 GMT
content-type: image/png
pragma: no-cache
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:50 GMT
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 6fd5ae7ad0fcefeed8a038101b40f0ca
bdfbc60bdcfe987c3a8cffe2f4e9fdeb305f0e91
70720a10cd196d2388de3e26ea0fb3b7f33309d0c7241bdf6f8dab3d4760ff03
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6233
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:07:50 GMT
Last-Modified: Wed, 14 Sep 2022 02:23:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
stenadewy.pro/avW-1xwyc.mzVAz_cC2DlEvFb-jH9IhJZKE_lMkNPOTPQ-yRNSTTgU3_MWSXZYpZZ-nbJchdbeW_VgJhZiDj1-zlcmWndop_bqmrMsmtc-HvVwzxayF_pAvBbCmDV-JFZGDH0I0_MKTLYM2NN-TPcQ1RJSn_pUvVbWmXV-JZZaDb0c0_MeTfYg2hN-Tjck1l
188.72.219.36200 OK 0 B URL HTTP/2 stenadewy.pro/avW-1xwyc.mzVAz_cC2DlEvFb-jH9IhJZKE_lMkNPOTPQ-yRNSTTgU3_MWSXZYpZZ-nbJchdbeW_VgJhZiDj1-zlcmWndop_bqmrMsmtc-HvVwzxayF_pAvBbCmDV-JFZGDH0I0_MKTLYM2NN-TPcQ1RJSn_pUvVbWmXV-JZZaDb0c0_MeTfYg2hN-Tjck1l
IP 188.72.219.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /avW-1xwyc.mzVAz_cC2DlEvFb-jH9IhJZKE_lMkNPOTPQ-yRNSTTgU3_MWSXZYpZZ-nbJchdbeW_VgJhZiDj1-zlcmWndop_bqmrMsmtc-HvVwzxayF_pAvBbCmDV-JFZGDH0I0_MKTLYM2NN-TPcQ1RJSn_pUvVbWmXV-JZZaDb0c0_MeTfYg2hN-Tjck1l HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: application/javascript
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Wed, 14 Sep 2022 04:07:50 GMT
set-cookie: kadCCap=132751:1:1663115441;199507:1:1655888030;168401:1:1663017409;210565:1:1660883596;199455:1:1662011125;211845:1:1661388894;194136:1:1663118711;210190:1:1662153287;180343:1:1656296307; max-age=1694664470; path=/
kadACap=433660:1:1662623802;438036:1:1657029440;320483:1:1661342695;432801:1:1656295814;445389:1:1663053879;444410:1:1662620118;384014:1:1658355870;319611:1:1659066943;426142:1:1655888030;346327:1:1663012385;438050:1:1657036135;383700:1:1662671864;419295:1:1661224266;407186:1:1660140957;401659:1:1662418246;422197:1:1661937740;432805:1:1656295137;434768:1:1656274688;424441:1:1662472246;419321:1:1662477203;272913:1:1661284037;445933:1:1662662013;446120:1:1663010101;434524:1:1657107027;443580:1:1661935629;419299:1:1662523186;419291:1:1662829503;444360:1:1662446108;445475:1:1662616891;444565:1:1663112893;435966:1:1656602141;442673:1:1660504936;443007:1:1661388894;442019:1:1662461641;419293:1:1662883102;427172:1:1661328422;419303:1:1662804291;410252:1:1662915839;419323:1:1661776141;419297:1:1662889803;419301:1:1661170442; max-age=1694664470; path=/
kadCSCap=194136:1:1663118711;132751:1:1663115441; path=/
kadASCap=444565:1:1663112893;445389:1:1663053879; path=/
kadRPixJ=bnVsbA==; max-age=1694664470; path=/
kadUnP3=CAYQt+CAmQYaCwi1CBABGLfggJkGGg0ImLKQAhABGL2thJkGGg0I5seQAhABGLHBhJkGGg0IwL2TAhABGPfahJkGGg0Ir6f+ARABGJanhZkGIgoIDhABGL2thJkGIgoIAxADGLfggJkGIgoIARABGJanhZkGKgwIqqknEAEYscGEmQYqDAiz3CcQARj32oSZBioMCMPpDBABGJanhZkGKgsI6QIQARi34ICZBioMCK/eJhABGL2thJkG; max-age=1694664470; path=/
x-content-type-options: nosniff
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395
95.163.52.67302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395
IP 95.163.52.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395
set-cookie: FTID=1RMYgQ0tkIIC:1663128470:2787143:::; path=/; expires=Fri, 15-Sep-23 04:07:50 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
77.88.21.119200 OK 75 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 77.88.21.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (681)
Hash 1cc0c1f6e686260b4032d3a2c3c84bea
62f4a7ee04093374ca76e761b6b7e65f1c7f771d
b18d088442b7af5b9df459a03641de3d7ae1078d924c7024a63f81943fa05b01
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 74749
date: Wed, 14 Sep 2022 04:07:50 GMT
access-control-allow-origin: *
etag: "63076de4-123fd"
expires: Wed, 14 Sep 2022 05:07:50 GMT
last-modified: Thu, 25 Aug 2022 15:41:08 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;title=Publisher%20Okunev%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1663128457134%3A1663128457153%3A1%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga;visible=true;_=0.47916724354139395 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIC:1663128470:2787143:::; path=/; expires=Fri, 15-Sep-23 04:07:50 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=499390
185.94.236.244200 OK 1.8 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=499390
IP 185.94.236.244:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1670), with CRLF, LF line terminators
Hash 16b09214f43656a82de1a9433ae6723a
382ecb0b5cbcefc9046373d603c8c73e0db9a8f9
02904e71e95b96b5e3d2528388d413b3ad714e4060107aeb8ba6c69b13a88dd5
GET /adshow.php?adzone=499390 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=51b445e967cd7d2db29ff111f25f5aef; expires=Thu, 14-Sep-2023 04:07:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YTowOnt9; expires=Sat, 17-Sep-2022 04:07:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 17-Sep-2022 04:07:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
mc.yandex.ru/metrika/advert.gif
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Sep 2022 04:07:51 GMT
access-control-allow-origin: *
etag: "63076e51-2b"
expires: Wed, 14 Sep 2022 05:07:51 GMT
accept-ranges: bytes
last-modified: Thu, 25 Aug 2022 15:42:57 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&page-ref=&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Afp%3A834%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1530016447435%3Ahid%3A1047446049%3Az%3A0%3Ai%3A20220914040737%3Aet%3A1663128458%3Ac%3A1%3Arn%3A42300701%3Arqn%3A1%3Au%3A1663128458890786418%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663128455442%3Ads%3A0%2C0%2C84%2C0%2C325%2C331%2C1%2C1009%2C57%2C%2C%2C%2C1424%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663128458%3At%3APublisher%20Okunev%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)mtb(0)aw(1)rqnt(1)efid(1)fip(1)rqnl(1)ti(2)
77.88.21.119302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&page-ref=&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Afp%3A834%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1530016447435%3Ahid%3A1047446049%3Az%3A0%3Ai%3A20220914040737%3Aet%3A1663128458%3Ac%3A1%3Arn%3A42300701%3Arqn%3A1%3Au%3A1663128458890786418%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663128455442%3Ads%3A0%2C0%2C84%2C0%2C325%2C331%2C1%2C1009%2C57%2C%2C%2C%2C1424%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663128458%3At%3APublisher%20Okunev%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)mtb(0)aw(1)rqnt(1)efid(1)fip(1)rqnl(1)ti(2)
IP 77.88.21.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 02423a2c1240e24ef0c39edfb6252fd9
cb17cc344a786d2fa388af3d131aa46554898a41
078dd38a3c025c4d8b8950b0fb003690e9d8770647ee77bebe1199cd22697d99
GET /watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&page-ref=&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Afp%3A834%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1530016447435%3Ahid%3A1047446049%3Az%3A0%3Ai%3A20220914040737%3Aet%3A1663128458%3Ac%3A1%3Arn%3A42300701%3Arqn%3A1%3Au%3A1663128458890786418%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663128455442%3Ads%3A0%2C0%2C84%2C0%2C325%2C331%2C1%2C1009%2C57%2C%2C%2C%2C1424%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663128458%3At%3APublisher%20Okunev%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)mtb(0)aw(1)rqnt(1)efid(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&page-ref&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Afp%3A834%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1530016447435%3Ahid%3A1047446049%3Az%3A0%3Ai%3A20220914040737%3Aet%3A1663128458%3Ac%3A1%3Arn%3A42300701%3Arqn%3A1%3Au%3A1663128458890786418%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663128455442%3Ads%3A0%2C0%2C84%2C0%2C325%2C331%2C1%2C1009%2C57%2C%2C%2C%2C1424%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663128458%3At%3APublisher%20Okunev%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29mtb%280%29aw%281%29rqnt%281%29efid%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 14 Sep 2022 04:07:51 GMT
access-control-allow-origin: http://surefap.org
set-cookie: yandexuid=9562378321663128471; Expires=Thu, 14-Sep-2023 04:07:51 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9562378321663128471; Expires=Thu, 14-Sep-2023 04:07:51 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2540834651663128471; Path=/; SameSite=None; Secure
i=QuXYVu1S1lWGP92J4leFbARarIBq4CnpaTJYcTYai0cP3FXZdwwHYOnF2urOQFQYLy3VGFZNU3IiFh8Ro3f4H0qylPM=; Expires=Sat, 11-Sep-2032 04:07:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694664471.yrts.1663128471#1694664471.yrtsi.1663128471; Expires=Thu, 14-Sep-2023 04:07:51 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:51 GMT
last-modified: Wed, 14-Sep-2022 04:07:51 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.juicyads.me/1x1.gif
69.16.175.42200 OK 43 B IP 69.16.175.42:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:51 GMT
etag: "1457030838"
cache-control: max-age=24096795
content-length: 43
content-type: image/gif
last-modified: Thu, 03 Mar 2016 18:47:18 GMT
accept-ranges: bytes
x-hw: 1663128471.dop009.sk1.t,1663128471.cds009.sk1.hn,1663128471.cds217.sk1.c
X-Firefox-Spdy: h2
ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
69.16.175.42200 OK 284 kB URL HTTP/2 ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
IP 69.16.175.42:0
File type GIF image data, version 89a, 250 x 250\012- data
Size 284 kB (284264 bytes)
Hash 94eeda124cd4fd45a6ca4a7f0d672cc0
2c614d114dd89373a06a8823c4973f97b6120736
4a28e5c786dab8824c53af0d6543b86f58527139584fd50e41b97a5e917dfcc7
GET /ads/user161341/ad1266795-1658474854.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:51 GMT
etag: "1658474854"
cache-control: max-age=26882612
content-length: 284264
content-type: image/gif
last-modified: Fri, 22 Jul 2022 07:27:34 GMT
accept-ranges: bytes
x-hw: 1663128471.dop009.sk1.t,1663128471.cds009.sk1.hn,1663128471.cds261.sk1.c
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/metrika_match.html
77.88.21.119200 OK 698 B URL HTTP/2 mc.yandex.ru/metrika/metrika_match.html
IP 77.88.21.119:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (540)
Hash d6d901488de20f057239c827342327b8
92c1bd30486ccd86c989a5214b8b22d35943b2e9
bdc08719640417a85ba25136a6f7450a2c9659e372e9d8db43f1340de7dc2df1
GET /metrika/metrika_match.html HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 698
date: Wed, 14 Sep 2022 04:07:51 GMT
access-control-allow-origin: *
etag: "63076e51-2ba"
expires: Wed, 14 Sep 2022 05:07:51 GMT
last-modified: Thu, 25 Aug 2022 15:42:57 GMT
cache-control: max-age=3600
content-encoding: br
content-type: text/html
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5dc25adbca638e4a493bb2f9bdccd722
18168b8a51f6ab9e331eade0e76cffeb649eaf4b
502928763c74d2aea7774a18a586c69b9c2d7a1cc50e276f1366abfc3473aaa1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "502928763C74D2AEA7774A18A586C69B9C2D7A1CC50E276F1366ABFC3473AAA1"
Last-Modified: Mon, 12 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1393
Expires: Wed, 14 Sep 2022 04:31:04 GMT
Date: Wed, 14 Sep 2022 04:07:51 GMT
Connection: keep-alive
adserver.juicyads.com/adshow.php?adzone=498259
185.94.236.244200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=498259
IP 185.94.236.244:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (431), with CRLF, LF line terminators
Hash a926d46235625caa8304956ea96774bd
f246421bd00c01d9258c2625233266b77e10d601
f051d8de7ce6215f21419e7c961e9cab8b4a877d35c6dbddc16cc49816ddbe6c
GET /adshow.php?adzone=498259 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 04:07:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=51b445e967cd7d2db29ff111f25f5aef; expires=Thu, 14-Sep-2023 04:07:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps39903=1; expires=Thu, 15-Sep-2022 04:07:51 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjEwOTQyMjE7aToxNjYzMzg3NjcwO30%3D; expires=Sat, 17-Sep-2022 04:07:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 17-Sep-2022 04:07:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
reapinject.com/watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1
173.233.137.44307 Temporary Redirect 0 B URL HTTP/1.1 reapinject.com/watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1
IP 173.233.137.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1 HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 14 Sep 2022 04:07:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Location: https://reapinject.com/watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1&shu=bf1062806fb993ce773ba2ebb3da6be4d2b2f1ba5183a3e3810ac876038fc5fa1cebb5f45599acab9bf8a3204354e261411ebbaba8074123221223392f2cd9458226940180336063885c6e55c240de968f81ae6e6e7d1302d3aeabe65eed8bb6e7&pst=1663128531&rmtc=t
Set-Cookie: u_pl=15842260; expires=Thu, 15 Sep 2022 04:07:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.-lZXQQc2OlbshVMaHEu0gNRV09MUVrFQ58zDVsopaFU; expires=Wed, 14 Sep 2022 04:08:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 876b1170905fe0ef0d39553bb7583295
Strict-Transport-Security: max-age=0; includeSubdomains
reapinject.com/watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1&shu=bf1062806fb993ce773ba2ebb3da6be4d2b2f1ba5183a3e3810ac876038fc5fa1cebb5f45599acab9bf8a3204354e261411ebbaba8074123221223392f2cd9458226940180336063885c6e55c240de968f81ae6e6e7d1302d3aeabe65eed8bb6e7&pst=1663128531&rmtc=t
173.233.137.44200 OK 2.4 kB URL HTTP/1.1 reapinject.com/watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1&shu=bf1062806fb993ce773ba2ebb3da6be4d2b2f1ba5183a3e3810ac876038fc5fa1cebb5f45599acab9bf8a3204354e261411ebbaba8074123221223392f2cd9458226940180336063885c6e55c240de968f81ae6e6e7d1302d3aeabe65eed8bb6e7&pst=1663128531&rmtc=t
IP 173.233.137.44:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (3108)
Hash e8425e945ec1992a856daa5f083e1bda
eb852b06cab4de1c879cd55fef98aa7abf7588f0
4f49e7a6838fa83a499c8317d045560261c282cd7a94306e8fc04a752a6b5c2a
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1362615872241.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22okunev%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&tz=0&dev=r&res=12.29&uuid=d57d935a-a3b8-4140-bc93-14e53854039f%3A3%3A1&shu=bf1062806fb993ce773ba2ebb3da6be4d2b2f1ba5183a3e3810ac876038fc5fa1cebb5f45599acab9bf8a3204354e261411ebbaba8074123221223392f2cd9458226940180336063885c6e55c240de968f81ae6e6e7d1302d3aeabe65eed8bb6e7&pst=1663128531&rmtc=t HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Cookie: u_pl=15842260; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTg0MjI2MCwiayI6IjdhMmZhMzU2Y2M3Nzk5MDBjODYzYTUxZTgxMGZiZmNlIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo2ODAzOCwicGlkIjo1NTg0NiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjoyNSwicHQiOjQsInBrIjoia2VkZ2llM3giLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHA6Ly9zdXJlZmFwLm9yZy9wdWJsaXNoZXIvb2t1bmV2LyJ9fQ.-lZXQQc2OlbshVMaHEu0gNRV09MUVrFQ58zDVsopaFU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 14 Sep 2022 04:07:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=d57d935a-a3b8-4140-bc93-14e53854039f:3:1; expires=Wed, 21 Sep 2022 04:07:51 GMT; secure; SameSite=None
iprc913bb38fb3040f5012ae5537421d6dc0=3569676; expires=Wed, 14 Sep 2022 08:07:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 15 Sep 2022 04:07:51 GMT; secure; SameSite=None
uncs=1; expires=Thu, 15 Sep 2022 04:07:51 GMT; secure; SameSite=None
pdhtkv25=true; expires=Thu, 15 Sep 2022 04:07:51 GMT; secure; SameSite=None
uncs25=1; expires=Thu, 15 Sep 2022 04:07:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: da4f6e833a7161ec62648bb390ea78d6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 359127f2c560d1415c82e9f211eaa447
9bb69b07c783b5a3e9f455c68795ab451d8dcf8e
18ac99c386e7130ae3ff1a2f5e236d9198f056a6cf59c8f33f6f883437cddf53
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 23:38:01 GMT
ETag: "9bb69b07c783b5a3e9f455c68795ab451d8dcf8e"
Last-Modified: Tue, 13 Sep 2022 23:38:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3070
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a642158858b4ff-OSL
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9657
Expires: Wed, 14 Sep 2022 06:48:48 GMT
Date: Wed, 14 Sep 2022 04:07:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9657
Expires: Wed, 14 Sep 2022 06:48:48 GMT
Date: Wed, 14 Sep 2022 04:07:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9657
Expires: Wed, 14 Sep 2022 06:48:48 GMT
Date: Wed, 14 Sep 2022 04:07:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9657
Expires: Wed, 14 Sep 2022 06:48:48 GMT
Date: Wed, 14 Sep 2022 04:07:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9657
Expires: Wed, 14 Sep 2022 06:48:48 GMT
Date: Wed, 14 Sep 2022 04:07:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 67104c4246b4621f998420b0e5ebbd53
2b7467d2a9e125599655986947027fe15f64dd9b
74870b17f8b2b4dd0fea0bb426edf6668de4b430c8e0cc2793d9251cd523ff61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10252
x-amzn-requestid: 0e87d69b-2097-473d-87ee-d0e38021633e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yau8DFKRoAMFnww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f84c-189a00f437ca36611c4741f6;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:38:20 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GD0bR8yri-Lzxd5H1QBToF9nN5DlxAFmXXZEGdFr81xQ1Tv4OM9OJA==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:59:17 GMT
age: 22115
etag: "2b7467d2a9e125599655986947027fe15f64dd9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg
34.120.237.76200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7be52d818b206e064541ef4f4b0786b
7674123112859fd79ee9214c5308ad6a5e4ed015
bb011cf1e3c97c42f22c0553b64c23f120fa52d4bc7b56b5bde5678226aff0ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16980
x-amzn-requestid: f6211d45-1e26-49a6-8c46-412d8714501c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YSIvUHPwoAMFzFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d87fb-00d053687671af6214ea6ba9;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 07:02:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1ZhWlfWQgEMpTF4Nrnc3RTN71UZICYJTNpVNUvEsurjMDp2e8mta4Q==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 00:10:59 GMT
age: 14213
etag: "7674123112859fd79ee9214c5308ad6a5e4ed015"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2fdd44c-8a24-416f-967c-d0f6ab274f25.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2fdd44c-8a24-416f-967c-d0f6ab274f25.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a18be7ae1217fd8640959c71628cdbce
89496b999ba3af9553bad8cb2b1c8d3f662c3d84
fe3dff7c808fa7cfeb0677afb6e2bfb4845662198491d50af4c08330691cb765
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2fdd44c-8a24-416f-967c-d0f6ab274f25.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6146
x-amzn-requestid: 9b369978-738d-4ccc-b36f-1d594e4ca56b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEGwCIAMFVcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-3fa4c7a60e0f8df44080c0a3;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NmxiUGBGj9wp4AhSSzAqE2NcZ3HltbFlujBRF2-mKD5pc-W7KL1Gfw==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:16:58 GMT
age: 21054
etag: "89496b999ba3af9553bad8cb2b1c8d3f662c3d84"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ur-HTN2DS8b3ojSQldJOZi6YW2wtCwRfbGqxg49ZUJ_00hC_rFxYEw==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:51:32 GMT
age: 22580
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f85dd3f15d0c55c06f712bbfb6f55fa
2c053f4774c450e42effdc440e89fb2ce232bad3
0035f6235d012f4c2ffbc8e414e82bbba3235c51e20f7b1ebebcdff47be285fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8836
x-amzn-requestid: cae5f1fa-005b-4819-900e-e0cec381e450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavYxGUCoAMF5Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f904-1be4cae92b407bed2a128109;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:41:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Edqp_EdPzoXt6xQtd24wiBzLSdqQ2HYzOGExvqkcJCUwSN5Kn7lZcQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:00:47 GMT
age: 22025
etag: "2c053f4774c450e42effdc440e89fb2ce232bad3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2983619f-d6cc-479c-a800-f63653fe82a1.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2983619f-d6cc-479c-a800-f63653fe82a1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26f9137a12e4cd798f873bc1d1696ffe
efa4e8f1a2318a72cbd87066f1356eeb00b50a1b
09aa40cc76ffaf087bcfd5448811260d81c1c042b7d65e0fbf33dd8f44cd52b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2983619f-d6cc-479c-a800-f63653fe82a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5480
x-amzn-requestid: b405f33a-dd58-4857-9491-f88ad4e26dd1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavU9GbdIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8ec-747b56005a9e41722b9284f9;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:41:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dc4L_pfIp1oUVjTKsB2XsmHExNUQw1qXvY1SD0BAwLPgA5kmf60Yfg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:31:34 GMT
age: 20178
etag: "efa4e8f1a2318a72cbd87066f1356eeb00b50a1b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adfstat.yandex.ru/metrica?id=1047446049
87.250.250.145200 OK 15 B URL HTTP/1.1 adfstat.yandex.ru/metrica?id=1047446049
IP 87.250.250.145:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0c776997933eb60833b37beaf43814c8
bff63526eb02853c6b414ccfb4d00ac9ca283930
3d23d39a30bb7323f8ccfd64c52cf286138fba4f83e78f7edcf66703b7c23aaa
GET /metrica?id=1047446049 HTTP/1.1
Host: adfstat.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mc.yandex.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:52 GMT
Content-Type: application/json
Content-Length: 15
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=10, immutable
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 09ba627272befd0f5ff19db41767b0c4
e262f240ad6e9c4036a1469b5e1d8b9552806ec0
d5c2c3f9401d006b7e078d210c9760789889abd6d6fca60072e6c57f18c82fa6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D5C2C3F9401D006B7E078D210C9760789889ABD6D6FCA60072E6C57F18C82FA6"
Last-Modified: Mon, 12 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15345
Expires: Wed, 14 Sep 2022 08:23:37 GMT
Date: Wed, 14 Sep 2022 04:07:52 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
45.133.44.9200 OK 185 kB URL HTTP/2 cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
IP 45.133.44.9:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 185 kB (185150 bytes)
Hash 69cbf6dd022575e7dcaa17248e7e4643
daf78102256bb6d153facc728e9fe73be02138e6
41110fdcc38e4d9358f19dd9440d766d798d159e2bc6dd69197321df9d1b9582
GET /cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:07:52 GMT
content-type: image/png
content-length: 185150
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 09:50:43 GMT
etag: "62e10a73-2d33e"
expires: Fri, 16 Sep 2022 04:07:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=1028492458&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128461%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040741%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128461&t=gdpr(14)ti(2)
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=1028492458&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128461%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040741%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128461&t=gdpr(14)ti(2)
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=1028492458&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128461%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040741%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128461&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 174485
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Sep 2022 04:07:55 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:55 GMT
last-modified: Wed, 14-Sep-2022 04:07:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=722548131&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663128462%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040741%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128462&t=gdpr(14)ti(2)
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=722548131&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663128462%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040741%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128462&t=gdpr(14)ti(2)
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=722548131&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663128462%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040741%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128462&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Sep 2022 04:07:55 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:55 GMT
last-modified: Wed, 14-Sep-2022 04:07:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=1054420250&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128462%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040742%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128462&t=gdpr(14)ti(2)
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=1054420250&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128462%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040742%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128462&t=gdpr(14)ti(2)
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=1054420250&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128462%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040742%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128462&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 7090
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Sep 2022 04:07:55 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:55 GMT
last-modified: Wed, 14-Sep-2022 04:07:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=34681988&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128464%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040744%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128464&t=gdpr(14)ti(2)
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=34681988&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128464%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040744%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128464&t=gdpr(14)ti(2)
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=3&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=34681988&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128464%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040744%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128464&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 7123
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Sep 2022 04:07:57 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:57 GMT
last-modified: Wed, 14-Sep-2022 04:07:57 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1663128457134%3A1663128464645%3A2%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga-ym;visible=true;_=0.7274938989361435;e=RT/unload;et=1663128464643;pvt=7778;vtauto=7516
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1663128457134%3A1663128464645%3A2%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga-ym;visible=true;_=0.7274938989361435;e=RT/unload;et=1663128464643;pvt=7778;vtauto=7516
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/okunev/;st=1663128456865;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=f1caf10f9a520620;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1663128457134%3A1663128464645%3A2%3A814a0c3533f3797e2f6474698e564790;opts=jst-ga-ym;visible=true;_=0.7274938989361435;e=RT/unload;et=1663128464643;pvt=7778;vtauto=7516 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:58 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIC:1663128478:2787143:::; path=/; expires=Fri, 15-Sep-23 04:07:58 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/23307?host=surefap.org&ev=196&wh=939&ww=1280&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cfingering%2Cfuck%2Cfutanari%2Clesbian%2Cnude&s1=%25subid1%25
135.181.208.216200 OK 389 B URL HTTP/2 a.shukriya90.com/api/spots/23307?host=surefap.org&ev=196&wh=939&ww=1280&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cfingering%2Cfuck%2Cfutanari%2Clesbian%2Cnude&s1=%25subid1%25
IP 135.181.208.216:0
ASN #24940 Hetzner Online GmbH
Hash 4f04646225b3e627762f96144eb75bda
6d153ec059a702985eaba74dbf17586724d5cba8
5c1d1646c35e7551a2c3248759b06fef1184f5784438fa7e7a27b2141f6d2be6
GET /api/spots/23307?host=surefap.org&ev=196&wh=939&ww=1280&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cfingering%2Cfuck%2Cfutanari%2Clesbian%2Cnude&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:52 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=vrjsAdL2vvrQRh8Im2cV; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=4&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=97906109&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128465%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040744%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128465&t=gdpr(14)ti(2)
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=4&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=97906109&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128465%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040744%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128465&t=gdpr(14)ti(2)
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=4&wv-hit=1047446049&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fokunev%2F&rn=97906109&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663128465%3Aw%3A1268x939%3Av%3A882%3Az%3A0%3Ai%3A20220914040744%3Au%3A1663128458890786418%3Avf%3A2ofv6mafcjh9urjbdp7qpk%3Awe%3A1%3Ast%3A1663128465&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2184
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Sep 2022 04:07:58 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Sep-2022 04:07:58 GMT
last-modified: Wed, 14-Sep-2022 04:07:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
188.72.219.36200 OK 0 B URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP 188.72.219.36:0
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
ads.juicyads.me/network/user150963/39221-1600190954-0257535001600190954.gif
69.16.175.42200 OK 0 B URL HTTP/1.1 ads.juicyads.me/network/user150963/39221-1600190954-0257535001600190954.gif
IP 69.16.175.42:0
GET /network/user150963/39221-1600190954-0257535001600190954.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:07:52 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1600190954"
Cache-Control: max-age=22691978
Content-Length: 1330028
Content-Type: image/gif
X-HW: 1663128471.dop010.sk1.t,1663128471.cds254.sk1.s,1663128471.dop048.mi1.r,1663128472.cds048.mi1.c,1663128471.cds254.sk1.p
Last-Modified: Tue, 15 Sep 2020 17:29:14 GMT
stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
188.72.219.36200 OK 0 B URL HTTP/2 stenadewy.pro/aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM
IP 188.72.219.36:0
GET /aTWOZ.y_Qn2F9/k/ZuTW9B6tbP2/5DlkS-WwQz9SNOD/Eh1fOFTmUJyGMEi/ZrwkdFXbNqokW/mo9uuIZlUzlokKPyTxQaxuN/TXkc1rMkjmIM HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
stenadewy.pro/abWcZ.ydP-3fBg1hci2_hkalbm2n5-lpSqWrQs9_NuDvEw2xN-jzUA3BNCS_ZE6FbG2H5-lJSKWLQM9_NODPEQ2RN-jTUU3VNWQ_?iframeId=sqginc
188.72.219.36200 OK 0 B URL HTTP/2 stenadewy.pro/abWcZ.ydP-3fBg1hci2_hkalbm2n5-lpSqWrQs9_NuDvEw2xN-jzUA3BNCS_ZE6FbG2H5-lJSKWLQM9_NODPEQ2RN-jTUU3VNWQ_?iframeId=sqginc
IP 188.72.219.36:0
GET /abWcZ.ydP-3fBg1hci2_hkalbm2n5-lpSqWrQs9_NuDvEw2xN-jzUA3BNCS_ZE6FbG2H5-lJSKWLQM9_NODPEQ2RN-jTUU3VNWQ_?iframeId=sqginc HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:07:50 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Wed, 14 Sep 2022 04:07:50 GMT
set-cookie: kadCCap=132751:1:1663115441;199455:1:1662011125;211845:1:1661388894;194136:1:1663118711;199507:1:1655888030;168401:1:1663017409;210190:1:1662153287;180343:1:1656296307;210565:1:1660883596; max-age=1694664470; path=/
kadACap=383700:1:1662671864;438036:1:1657029440;419291:1:1662829503;445933:1:1662662013;444360:1:1662446108;410252:1:1662915839;434768:1:1656274688;419295:1:1661224266;407186:1:1660140957;445475:1:1662616891;444565:1:1663112893;320483:1:1661342695;442673:1:1660504936;424441:1:1662472246;419321:1:1662477203;319611:1:1659066943;272913:1:1661284037;443580:1:1661935629;419323:1:1661776141;432801:1:1656295814;443007:1:1661388894;419297:1:1662889803;426142:1:1655888030;346327:1:1663012385;442019:1:1662461641;422197:1:1661937740;419301:1:1661170442;438050:1:1657036135;419293:1:1662883102;445389:1:1663053879;444410:1:1662620118;446120:1:1663010101;384014:1:1658355870;427172:1:1661328422;433660:1:1662623802;419303:1:1662804291;432805:1:1656295137;435966:1:1656602141;401659:1:1662418246;434524:1:1657107027;419299:1:1662523186; max-age=1694664470; path=/
kadCSCap=194136:1:1663118711;132751:1:1663115441; path=/
kadASCap=444565:1:1663112893;445389:1:1663053879; path=/
kadRPixJ=bnVsbA==; max-age=1694664470; path=/
kadUnP3=CAUQt+CAmQYaDQiYspACEAEYva2EmQYaDQjmx5ACEAEYscGEmQYaDQjAvZMCEAEY99qEmQYaCwi1CBABGLfggJkGIgoIDhABGL2thJkGIgoIAxADGLfggJkGKgsI6QIQARi34ICZBioMCK/eJhABGL2thJkGKgwIqqknEAEYscGEmQYqDAiz3CcQARj32oSZBg==; max-age=1694664470; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2