www.googletagmanager.com/gtag/js?id=G-0KVPEKPNG7
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-0KVPEKPNG7
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash f32f7e0a2e9dbbac7ba5b66af75d5288
d51b42b8d9d2d7546638795017fb33621c211dac
29ca177f772a80bd685bfcb4fbd7038e8cfec0c3d2b212efe8c15a3d9912d52e
GET /gtag/js?id=G-0KVPEKPNG7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 03:00:02 GMT
expires: Thu, 30 Nov 2023 03:00:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fvcwqkkqmuv.com/solid.gif?z=1976015&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615096889686016&eclog=0&sp=1&im=1
200 OK 43 B URL POST HTTP/2 fvcwqkkqmuv.com/solid.gif?z=1976015&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615096889686016&eclog=0&sp=1&im=1
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1976015&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615096889686016&eclog=0&sp=1&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
UID=2311292200255facdfc1e84d3b957e3f2395; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
freshenrubpan.com/f1/4a/b1/f14ab1a1d93ca97c0c0da7c3d00b26cf.js
200 OK 16 kB URL GET HTTP/1.1 freshenrubpan.com/f1/4a/b1/f14ab1a1d93ca97c0c0da7c3d00b26cf.js
IP
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectfreshenrubpan.com
Fingerprint39:5E:63:34:71:71:FD:6C:35:BE:54:12:C6:CF:EE:F2:C1:1C:37:BA
ValidityTue, 17 Oct 2023 06:57:39 GMT - Mon, 15 Jan 2024 06:57:38 GMT
File type ASCII text, with very long lines (42869), with no line terminators
Hash 1ca70b356ebc1ecd02b44c43b286eae0
c345ae4c6ea1be1e6242a8748486c66f773f9cde
cee5d978608c6b2d6d8e1f0d19fedf7c4bf001a079330c44247ad6dfaf190777
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f1/4a/b1/f14ab1a1d93ca97c0c0da7c3d00b26cf.js HTTP/1.1
Host: freshenrubpan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:00:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5d2295ae993fc9fabecbec38b83c218a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
faponic.com/js/libs/material.min.js
200 OK 25 kB URL GET HTTP/3 faponic.com/js/libs/material.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (8136), with CRLF line terminators
Hash 162ddc9a5385ac16b0a331f7523f8966
1e24a4271c908380c845af4288d40d1869d89be9
291bc73a4c0ebdd58d37b40fa35cf155b5176b60c32641a9d790dc6f957621ce
GET /js/libs/material.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-1fca"
expires: Fri, 01 Dec 2023 04:35:50 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 512651
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dhNVleet3lwQj%2FN8IqfJbgjeRpz37%2BdRiniy2qQNz7%2Bc8aQNJeklSbHiaUYIAocY8kOsklitx3m4clzKVHJXBu6lj8WZSlJjLcWhJ%2BlAp2K7aNC0j6CPVcB446Hv4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6779c70d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/js/main.js
200 OK 20 kB IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with CRLF line terminators
Hash e062ebbdac81d089397539b38cb25a90
e18b504807259726c9b93e24ae3b616a4a9cd8ca
4410f39c828f520007c1af27ae5b4ec453ddb6e4257e0b46dc913f68d2925cc7
GET /js/main.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:30 GMT
etag: W/"6013e9a2-2469"
expires: Thu, 30 Nov 2023 05:25:09 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 596092
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=daExvzwm8w3g2f3rVVE6mr6%2BMzRhScXQENsqjAIIgRzRKDVzkBJ1CJ%2FsfO8wqa25oB%2B1EfzonNZX1M%2BuuR2oKUd5%2FoKRnDvhyWvXd6oA9WvhtWJbKmx3dNOinq164Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac90d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/data/g/e/geane-mello/1000/geane-mello_0006.jpg
200 OK 35 kB URL GET HTTP/3 faponic.com/data/g/e/geane-mello/1000/geane-mello_0006.jpg
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 0aec55e25f030b964a7bd386ed2c3271
c14b1347021043bb109d16cd3664a9982d0240e2
db72577a0d44d75895fdc7def4bee24eafea6a7f7372ceae072198cc013e8009
GET /data/g/e/geane-mello/1000/geane-mello_0006.jpg HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/jpeg
content-length: 35028
last-modified: Wed, 24 Aug 2022 09:57:28 GMT
etag: "6305f608-88d4"
expires: Wed, 06 Dec 2023 08:15:27 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 67475
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4zWm%2BcmJN02xPqLqh%2BMWS6o1aNYxn0725unSBq1%2F7DlTEJnlUFZJcf1RM8OaGn38qYk2z0koOnQ7zEOS4rB44igBRhq%2Bbxk%2F2oX90S%2BckPzKqDM856NF7UGGR%2BHhyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67b6bf4d97b-HEL
alt-svc: h3=":443"; ma=86400
faponic.com/data/x/a/xanabellex/1000/xanabellex_0007.jpg
200 OK 23 kB URL GET HTTP/3 faponic.com/data/x/a/xanabellex/1000/xanabellex_0007.jpg
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash c7cb947274d43f23b2156e48742c0a6b
67013990b7b474a1bd490521796bff876fb83c5f
5640a9a39f75c1ef771357a745f34ca99306f42704aebc4a1a328b6eb3135180
GET /data/x/a/xanabellex/1000/xanabellex_0007.jpg HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/jpeg
content-length: 23118
last-modified: Tue, 21 Feb 2023 17:51:13 GMT
etag: "63f50491-5a4e"
expires: Thu, 07 Dec 2023 03:00:02 GMT
cache-control: max-age=604800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MikLDPySGZl4GntaXFCdCUI3VB7nxEvp4KOEYsZmGSmC0sZLRvNntpaw42%2BlwOFwB8hh3ixKB8I7FSUSYanUPE15M6lS77HO1esfKO0q8rsyLL7F5Nx%2BE5DT2VGxhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67b6bf7d97b-HEL
alt-svc: h3=":443"; ma=86400
faponic.com/img/assets/logo.png
200 OK 3.3 kB URL GET HTTP/3 faponic.com/img/assets/logo.png
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 87dd4f58eb57c01002ec9e19a0ca759d
4f51bc41952e2c799add3097a80b99ab5ea9e34c
c12ca0e90619dc812eb42d49f11e85cf5f548c953263fe9493f06f5d37e31cfc
GET /img/assets/logo.png HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/png
content-length: 3306
last-modified: Thu, 14 Apr 2022 12:26:47 GMT
etag: "62581307-cea"
expires: Thu, 30 Nov 2023 05:06:31 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 597211
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dss%2Bes%2FvwHZpISbvPLz%2Bp9FwyFF6PuOCqwunhZhM8pP%2FUg4QX%2BhGp7H5BEQlod7omQ8Mgh8d8eJ%2FEJZhBydH1Bse%2F2rckqdW4E0lOJz5LUar3LqjuPIpS6Qjm5YTpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67b6bf0d97b-HEL
alt-svc: h3=":443"; ma=86400
faponic.com/js/libs/selectize.min.js
200 OK 33 kB URL GET HTTP/3 faponic.com/js/libs/selectize.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type Unicode text, UTF-8 text, with very long lines (32007), with CRLF line terminators
Hash 81ed3bf9f8a8b2634e320e6ae7f55764
d180303c512b0dbe4902cf999e680b0c689f8f9c
fd2deb6a99103da704ab1e3f23f8e916255b665e453de84682855abde3558182
GET /js/libs/selectize.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-b056"
expires: Wed, 06 Dec 2023 04:44:24 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 80137
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=suI6ceiLAnPnoRmD%2Bw4bqt7k%2Bn2zLk6hBJBpoo5xq0B5TyJEXNYy6IpMT5t6xp0dCqpGarmVlw9F5lxS%2FhzR%2BVQ8t2kPxqjB9fJPjUZwUAUzEqbntqJ3U6TgQaqPjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6779c73d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
hhbypdoecp.com/lv/esnk/1976032/code.js?pid=_cb-1976032_1
200 OK 39 kB URL GET HTTP/2 hhbypdoecp.com/lv/esnk/1976032/code.js?pid=_cb-1976032_1
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash aea3669a862d28a3dc4f80d4729e9d6f
8e9620ada5e358d67ea6f5cb75c4e6c474c2abde
940ac2396adcd4765dae651a1f46e6e1e136d629c2bd2caf3cd52115b0014b64
GET /lv/esnk/1976032/code.js?pid=_cb-1976032_1 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 11:34:35 GMT
vary: Accept-Encoding
etag: W/"6565d04b-1929a"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
faponic.com/js/libs-init/libs-init.js?1
200 OK 3.4 kB URL GET HTTP/3 faponic.com/js/libs-init/libs-init.js?1
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with CRLF line terminators
Hash e0879bf47343d92942f3944439656530
d871723ba0b6cef674bca27ee69013c30b67c892
590ea48c656281412f3e4189f4d0bdabe04491188ebc316aa0e9addc8044fbe2
GET /js/libs-init/libs-init.js?1 HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Wed, 13 Apr 2022 14:00:21 GMT
etag: W/"6256d775-363c"
expires: Fri, 01 Dec 2023 04:39:57 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 512404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1vukNUz1sFg11v07%2FqbzUKEbmNfzwVEIhC%2BEUuYckLQYDuC0Xd8kYQ%2FfofnF1i3N83voxxWF%2FSGnFM6FnBaD%2FZ3p4P1q%2BsSwF6%2Fr3c%2BbO%2BqpHHGH14n08rcOSa9jtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac92d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
hhbypdoecp.com/lv/esnk/1976032/code.js?pid=_cb-1976032_0
200 OK 48 kB URL GET HTTP/2 hhbypdoecp.com/lv/esnk/1976032/code.js?pid=_cb-1976032_0
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash fbbbbbe061d51271731a608fc87b6d08
2cb4b51057f3e723f9aab5873a157995d028cca2
1cac8a1ee5e68fcd53bc0ef63c4d43c6879131ef76110021202da3191bb65929
GET /lv/esnk/1976032/code.js?pid=_cb-1976032_0 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 11:34:35 GMT
vary: Accept-Encoding
etag: W/"6565d04b-1929a"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
hhbypdoecp.com/get/1976032?zoneid=1976032&pid=_cb-1976032_0&jp=_clfmu9ejgh7clnbgiicpyk&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&freq=0
200 OK 2.9 kB URL GET HTTP/2 hhbypdoecp.com/get/1976032?zoneid=1976032&pid=_cb-1976032_0&jp=_clfmu9ejgh7clnbgiicpyk&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&freq=0
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type gzip compressed data, from Unix\012- data
Hash cbdf9f2a15057972e470e10e463c9886
026d7ab58007ac7196e8e684ac40b16d11e8b39c
3316c714db39794f85a895a4ce22a3e16e3945e767a1c109f1f9228c579e432c
GET /get/1976032?zoneid=1976032&pid=_cb-1976032_0&jp=_clfmu9ejgh7clnbgiicpyk&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&freq=0 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Cookie: CHCK=1; UID=2311292200ddc18d1fd43447d9865febafa7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://faponic.com/search/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d338dce23682d6d32c9833daa93a6292
4ad2c655f7c937d4e8fbfca6637953f44a3ca2a1
b3ad688972685be2e6cf30ef563430976a8c1292294372e51cd4692c963c826c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Cookie: uid_id2=bbdf796a-d14d-438a-998c-d869027c5809:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://faponic.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
faponic.com/bootstrap/dist/css/bootstrap.css
200 OK 23 kB URL GET HTTP/3 faponic.com/bootstrap/dist/css/bootstrap.css
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (65320)
Hash 1c379b99d403d49c353316fd1f2f6131
3726a1c6243e9be12b57c150deadc4cbf24fd99a
47034746abc09f048f25ee1460f1048632d7b32c6c4522e8b6adfec1e5c13a89
GET /bootstrap/dist/css/bootstrap.css HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: text/css
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-21e0e"
expires: Thu, 30 Nov 2023 06:24:36 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 592525
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q06Am89UR%2BGjDm6zgqlk1yxNGMUVaCJDcHwB017bvdGu0aIM6sRR%2BydVLBJTSwH9%2BWjPNntozsJRIIzFimb9je3uNRTWvDI%2BSIHnFvd18NfxAFt4FA21rcj%2F4mPjCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c5cd97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=2311292200fc88f9cd0eac47b69ca720493c
200 OK 1.1 kB URL GET HTTP/1.1 www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=2311292200fc88f9cd0eac47b69ca720493c
IP
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectscfsdvc.com
Fingerprint15:AC:50:9E:63:8B:D2:6B:AA:A9:5A:0A:AE:9E:AB:1D:DC:D6:44:C3
ValidityMon, 25 Sep 2023 18:47:38 GMT - Sun, 24 Dec 2023 18:47:37 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1178), with CRLF, LF line terminators
Hash 3972e91df608d4a725496d00959556ed
c90f18f53fa0e20cced7d044e662d8526303589f
5b0f4ebe312eba732cc5637cbf22575e73b7a5eaaeb178f6e3695e4bebcbb881
GET /en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=2311292200fc88f9cd0eac47b69ca720493c HTTP/1.1
Host: www.scfsdvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.15.7
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: Thu, 31 Dec 1998 11:59:59 GMT
X-Robots-Tag: none
P3P: CP="NOI DSP COR NID"
Set-Cookie: AVPUID=123d70a1e3a899f2ca79b777cf294f26; Expires=Fri, 29-Nov-2024 03:00:03 GMT; Path=/; Secure; HttpOnly; SameSite=None
DNT: 1
Content-Encoding: gzip
faponic.com/js/libs/jquery.magnific-popup.min.js
200 OK 8.5 kB URL GET HTTP/3 faponic.com/js/libs/jquery.magnific-popup.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (20148), with CRLF line terminators
Hash 8f110a6d8d715e646ccaff9d21e7400b
3581562e2f53008cd0cd85db2a7a022e98c2b4c2
fa51078b465cfb61ec6f705104d06a82ae07776e094b217d3cbb0f702b2d4ba4
GET /js/libs/jquery.magnific-popup.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-4f38"
expires: Thu, 07 Dec 2023 01:53:52 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 3969
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wmpNQhqQbsFqJej9TOqE%2BUCRMvGiqiTZ906Cdimd38O5g3ufzZNyrYHfTP%2BSBGL%2BFOcmRn64OzDWAV3HonPcnIzty3V6%2FL7gj6Z%2BWF1%2FNBceTOcear9YKucffsG5lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac8ed97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/bootstrap/dist/js/bootstrap.bundle.min.js
200 OK 23 kB URL GET HTTP/3 faponic.com/bootstrap/dist/js/bootstrap.bundle.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (65293)
Hash 255a58b3e9d10c59096e3a2fae341cf7
8d85c1a1ac55a16b68a1e8c1f032068d5d4de604
f2112b7212a3395603d5c60dfe71dea79b96e5996c77c0138675d121beae0ec0
GET /bootstrap/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-13b26"
expires: Fri, 01 Dec 2023 01:21:00 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 524341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=piaV%2BwGluUFgS4gRAx29xv4KsIlLA1BKJZN46KkV0lFM8oyi3%2BgsX0J7IsViP%2FaPdbW0s7YNNGkOWSP%2BZxg65iJ9Q%2BZLrwr2ye4VbpflFNAZeUvbSZDn9P06UXN0Zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac93d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=231129220094eb8dee05504ddab3774f4b90
200 OK 1.1 kB URL GET HTTP/1.1 www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=231129220094eb8dee05504ddab3774f4b90
IP
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectscfsdvc.com
Fingerprint15:AC:50:9E:63:8B:D2:6B:AA:A9:5A:0A:AE:9E:AB:1D:DC:D6:44:C3
ValidityMon, 25 Sep 2023 18:47:38 GMT - Sun, 24 Dec 2023 18:47:37 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1178), with CRLF, LF line terminators
Hash 494ac3f9f8c9d054eb871c0018c4f717
6b58aa2cc8ee175d20425c44c124991d99b1f2b6
16ebd4c5704b42d114b293ba3553106eb60f5e54515a07f525d6547b501d0d9b
GET /en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=231129220094eb8dee05504ddab3774f4b90 HTTP/1.1
Host: www.scfsdvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.15.7
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: Thu, 31 Dec 1998 11:59:59 GMT
X-Robots-Tag: none
P3P: CP="NOI DSP COR NID"
Set-Cookie: AVPUID=6d9a6fa8d92140122d95515df5168b8b; Expires=Fri, 29-Nov-2024 03:00:03 GMT; Path=/; Secure; HttpOnly; SameSite=None
DNT: 1
Content-Encoding: gzip
www.imgbchw.com/5643/009826C_JRKM_18_ALL_EN_71_L.gif
200 OK 105 kB URL GET HTTP/2 www.imgbchw.com/5643/009826C_JRKM_18_ALL_EN_71_L.gif
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
Certificate IssuerAmazon
Subjectimglnka.com
FingerprintF3:07:96:42:74:51:29:E2:DC:9E:C9:92:E0:26:19:0B:24:F2:FF:02
ValidityWed, 08 Nov 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Size 105 kB (104906 bytes)
Hash 623a251820fe0ef692a8b374463d9360
768235d473a8846915453be78df03016e83c1d32
aa3dbcedfadfe1bc1219eb1adae4a452205e0c6df7130cb0a1257053054f5ced
GET /5643/009826C_JRKM_18_ALL_EN_71_L.gif HTTP/1.1
Host: www.imgbchw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 104906
last-modified: Fri, 18 Sep 2020 18:29:22 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 02:34:01 GMT
cache-control: max-age=3600
etag: "623a251820fe0ef692a8b374463d9360"
via: 1.1 0121ceb2efadb6db52d122a8b6b52f90.cloudfront.net (CloudFront), 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: cpl3Sx12Wcl0miLwsLwkP7rYPvIHe0Wj3wDBjwUcXHl78z55De0Lig==
age: 1563
X-Firefox-Spdy: h2
www.scfsdvc.com/js/interactive2.js
200 OK 11 kB URL GET HTTP/1.1 www.scfsdvc.com/js/interactive2.js
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
Certificate IssuerLet's Encrypt
Subjectscfsdvc.com
Fingerprint15:AC:50:9E:63:8B:D2:6B:AA:A9:5A:0A:AE:9E:AB:1D:DC:D6:44:C3
ValidityMon, 25 Sep 2023 18:47:38 GMT - Sun, 24 Dec 2023 18:47:37 GMT
File type ASCII text, with very long lines (11195), with no line terminators
Hash 905f3ddae4774c92242e4813407cdbd5
f698ad7ba5a4a0d2093d6def137d55bca54bd030
94a16af23f5b8c309dc7fa05d0ea2de49f6da7de105159b46241a046e407e056
GET /js/interactive2.js HTTP/1.1
Host: www.scfsdvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=2311292200fc88f9cd0eac47b69ca720493c
Cookie: AVPUID=d26b0366fb7e3a1d0d610beca93a56bf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.15.7
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=86400
Expires: Thu, 30 Nov 2023 06:12:34 GMT
Vary: Accept-Encoding
Last-Modified: Fri, 14 Feb 2020 21:12:20 GMT
www.scfsdvc.com/js/interactive2.js
200 OK 11 kB URL GET HTTP/1.1 www.scfsdvc.com/js/interactive2.js
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
Certificate IssuerLet's Encrypt
Subjectscfsdvc.com
Fingerprint15:AC:50:9E:63:8B:D2:6B:AA:A9:5A:0A:AE:9E:AB:1D:DC:D6:44:C3
ValidityMon, 25 Sep 2023 18:47:38 GMT - Sun, 24 Dec 2023 18:47:37 GMT
File type ASCII text, with very long lines (11195), with no line terminators
Hash 905f3ddae4774c92242e4813407cdbd5
f698ad7ba5a4a0d2093d6def137d55bca54bd030
94a16af23f5b8c309dc7fa05d0ea2de49f6da7de105159b46241a046e407e056
GET /js/interactive2.js HTTP/1.1
Host: www.scfsdvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
Cookie: AVPUID=d26b0366fb7e3a1d0d610beca93a56bf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.15.7
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=86400
Expires: Thu, 30 Nov 2023 06:12:34 GMT
Vary: Accept-Encoding
Last-Modified: Fri, 14 Feb 2020 21:12:20 GMT
semicolonrichsieve.com/sbar.json?key=f14ab1a1d93ca97c0c0da7c3d00b26cf&uuid=bbdf796a-d14d-438a-998c-d869027c5809%3A1%3A1
200 OK 4.2 kB URL GET HTTP/1.1 semicolonrichsieve.com/sbar.json?key=f14ab1a1d93ca97c0c0da7c3d00b26cf&uuid=bbdf796a-d14d-438a-998c-d869027c5809%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectsemicolonrichsieve.com
FingerprintE8:A4:25:54:56:69:72:E0:37:17:3E:3A:3C:A2:E0:DC:DE:7C:DE:92
ValidityTue, 28 Nov 2023 08:18:19 GMT - Mon, 26 Feb 2024 08:18:18 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5780), with no line terminators
Hash 0d1d6f44c6177356c7c8f863e768eca4
9d0286299f40586f47e0f14a8b823babc03c583a
255144d1bf57fb2f940270c97d37cc7a53435984b346875cb07c2b635641c5b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f14ab1a1d93ca97c0c0da7c3d00b26cf&uuid=bbdf796a-d14d-438a-998c-d869027c5809%3A1%3A1 HTTP/1.1
Host: semicolonrichsieve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://faponic.com
Access-Control-Allow-Origin: https://faponic.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20287261; expires=Fri, 01 Dec 2023 03:00:03 GMT; secure; SameSite=None
uid_id2=bbdf796a-d14d-438a-998c-d869027c5809:1:1; expires=Thu, 07 Dec 2023 03:00:03 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Dec 2023 03:00:03 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Dec 2023 03:00:03 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 01 Dec 2023 03:00:03 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 01 Dec 2023 03:00:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0b1c8958b025de9bde8dd1310996950e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.imgbchw.com/5643/010963A_JRKM_18_ALL_EN_71_L.jpg
200 OK 39 kB URL GET HTTP/2 www.imgbchw.com/5643/010963A_JRKM_18_ALL_EN_71_L.jpg
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=231129220094eb8dee05504ddab3774f4b90
Certificate IssuerAmazon
Subjectimglnka.com
FingerprintF3:07:96:42:74:51:29:E2:DC:9E:C9:92:E0:26:19:0B:24:F2:FF:02
ValidityWed, 08 Nov 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type JPEG image data, progressive, precision 8, 300x250, components 3\012- data
Hash 58f58d20e3ee8ab613f2147b178a799b
9055a4fb7e0f695a4215c57caa70bb0091c2c8ff
7de23d2eb42afc088beb54b7395fbd5d9a8a0810728a2db334cf6c6e3fa9aace
GET /5643/010963A_JRKM_18_ALL_EN_71_L.jpg HTTP/1.1
Host: www.imgbchw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 39036
last-modified: Fri, 12 Nov 2021 20:12:56 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 02:27:47 GMT
cache-control: max-age=3600
etag: "58f58d20e3ee8ab613f2147b178a799b"
via: 1.1 5ddb18e15e6b0ed6114111e515bddc66.cloudfront.net (CloudFront), 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: sNaq5PckYk5m8JDJqbv4Q2k7jlzHouY5Fe-fyzBZR2vtjmQ-3f_QYA==
age: 1937
X-Firefox-Spdy: h2
www.imgbchw.com/5643/008530G_JRKM_18_ALL_EN_71_L.gif
200 OK 32 kB URL GET HTTP/2 www.imgbchw.com/5643/008530G_JRKM_18_ALL_EN_71_L.gif
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=2311292200fc88f9cd0eac47b69ca720493c
Certificate IssuerAmazon
Subjectimglnka.com
FingerprintF3:07:96:42:74:51:29:E2:DC:9E:C9:92:E0:26:19:0B:24:F2:FF:02
ValidityWed, 08 Nov 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash 84ef74f6915d7baaa6d6344ebcf34423
9900b2e0d13cc293d9c426e3d094ac20db407e10
59cf9b3ceea0b184f80db276ca9fb41d11445d341ef973d724c378a999082c24
GET /5643/008530G_JRKM_18_ALL_EN_71_L.gif HTTP/1.1
Host: www.imgbchw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 32081
last-modified: Fri, 04 Sep 2020 17:57:23 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 02:20:38 GMT
cache-control: max-age=3600
etag: "84ef74f6915d7baaa6d6344ebcf34423"
via: 1.1 5ddb18e15e6b0ed6114111e515bddc66.cloudfront.net (CloudFront), 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: xsBHTcgcFgNxOZy-VfVSiIW36bxLD6d7XKSlt1U6ru8WW2bwzb_oUQ==
age: 2366
X-Firefox-Spdy: h2
www.scfsdvc.com/js/interactive2.js
200 OK 11 kB URL GET HTTP/1.1 www.scfsdvc.com/js/interactive2.js
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
Certificate IssuerLet's Encrypt
Subjectscfsdvc.com
Fingerprint15:AC:50:9E:63:8B:D2:6B:AA:A9:5A:0A:AE:9E:AB:1D:DC:D6:44:C3
ValidityMon, 25 Sep 2023 18:47:38 GMT - Sun, 24 Dec 2023 18:47:37 GMT
File type ASCII text, with very long lines (11195), with no line terminators
Hash 905f3ddae4774c92242e4813407cdbd5
f698ad7ba5a4a0d2093d6def137d55bca54bd030
94a16af23f5b8c309dc7fa05d0ea2de49f6da7de105159b46241a046e407e056
GET /js/interactive2.js HTTP/1.1
Host: www.scfsdvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=231129220094eb8dee05504ddab3774f4b90
Cookie: AVPUID=6d9a6fa8d92140122d95515df5168b8b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.15.7
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=86400
Expires: Thu, 30 Nov 2023 06:12:34 GMT
Vary: Accept-Encoding
Last-Modified: Fri, 14 Feb 2020 21:12:20 GMT
v.mbvlmx.com/impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90544;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&cost=231129220094eb8dee05504ddab3774f4b90&Bnr=010963A&FileID=563883
204 No Content 0 B URL GET HTTP/2 v.mbvlmx.com/impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90544;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&cost=231129220094eb8dee05504ddab3774f4b90&Bnr=010963A&FileID=563883
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=231129220094eb8dee05504ddab3774f4b90
Certificate IssuerLet's Encrypt
Subjectv.mbvlmx.com
Fingerprint20:90:D4:87:5F:04:73:2C:6B:79:59:48:05:21:79:4F:40:3A:75:78
ValidityTue, 31 Oct 2023 06:49:12 GMT - Mon, 29 Jan 2024 06:49:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90544;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&cost=231129220094eb8dee05504ddab3774f4b90&Bnr=010963A&FileID=563883 HTTP/1.1
Host: v.mbvlmx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: 3bc069f6-63d3-4acd-9e17-c7494347a674-osz-v4=72E4cQNB8MsqSdwXYEwkvdv0yvSl9DeWz-or10pHVuJYUkY7EU5Q3c2VWpny6aL9J_948JZQhFauKKx7Myj2sQLZ7xCfJGM4xJ4J6r8bnfH2V_RZ9BPwTs6kqNwKzwTt8ChXWxdU4R3ZeO61NDzSomXeNk5HV0XilTGR712CaMqUaZOYA3X9yPVPGrPgWx7a8oqGH_QtvdJruxxwUJgd-SDc2vq1lgiom54Z3QspmIAce5Hza55EdEcIohvwURia8pnAd1GooBZOTuK1Z-_M_zy3fQx7pJ0qNs4XcLUMyXjpQ0m3IcaZcbDpGFMbyUpx8bdUVebDu9-1fDWPV__y2t3vnP2LFk0fA-bmXrlGrcMzmfFWiPqT-WP9iZAjxH6zjfXqXGTQoymkHngkSMB6TaGiQsOQMmYK99Bk9WUvVdRkEsQOnZGft8SpXS_saZTNlwmHc5nYq0BXhVKLQJf8B-TVN-0cW7r4qPunDL_8o1CCRnAOxFxeYc1sypgwqqei0QT8LX1QL7AuRoD4VNTfRvD1gbnEhRQIpewuzkrnhhJKCDT9GjNDZzWoor1JeRPEzRO3rSLM_TW5BRV3dRaL0f-h_ynJX3RgeviZtf95rIP-N0iNgApJkOVsk50AU0kSIWx7ur0eDabK-D40JzwC_vJqHUz0WDH9TmYsbup-l2ZNq3_a_mAlnfDV1yhJleTvrbFBQONM2Xfat1CiwHCD0NmM15iDQ8NWqMqN4gb3pW8YXDMkX-QrDnlE6KOwY_KXKyZQdaCcuEX17uenx-j9-E5orMFcl1ICDRFVJyB-WEOL5Hi8XXw9hjgIhlrl6SD0; Domain=v.mbvlmx.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
faponic.com/js/libs/isotope.pkgd.min.js
200 OK 10 kB URL GET HTTP/3 faponic.com/js/libs/isotope.pkgd.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (34826), with no line terminators
Hash 8ef8a013e968661683d59b30eaa21468
7cfd9bef982f129a0fe172cc39d249491ed38b63
23fd9d2b985d8329cc293280a5d3b49dd0d08aa3020dc7e6f10dcd2b1ac69a66
GET /js/libs/isotope.pkgd.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-880a"
expires: Fri, 01 Dec 2023 03:14:21 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 517540
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ET2WYL6Zfi9f6JxlIf1wJN8wbxgGXKH5OaURHBNj7V3L3CpAqTJGjRKxKz5Er8qxgPqoOLFlJQ23y7atsrSws%2B5YLkgHonvs%2BRS56uYwg%2BNSrGojoeZJeoY0iOYY0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac8bd97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
v.mbvlmx.com/impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90541;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&Bnr=009826C&FileID=475029
204 No Content 0 B URL GET HTTP/2 v.mbvlmx.com/impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90541;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&Bnr=009826C&FileID=475029
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
Certificate IssuerLet's Encrypt
Subjectv.mbvlmx.com
Fingerprint20:90:D4:87:5F:04:73:2C:6B:79:59:48:05:21:79:4F:40:3A:75:78
ValidityTue, 31 Oct 2023 06:49:12 GMT - Mon, 29 Jan 2024 06:49:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90541;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&Bnr=009826C&FileID=475029 HTTP/1.1
Host: v.mbvlmx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: 3bc069f6-63d3-4acd-9e17-c7494347a674-osz-v4=WnVnP5ppLywbC6dwOlzVaaApBGtiBQxdS0qPE3uOFxor8pE4vK4gilu7zakeznf_1kmTdF1PjnO6LQYajieAFBX4EsQqMp-JTxAMRHYANmC_s70seGGjb2XUDrmotzQvaQV9TRx-92BonKEUoP2XJfb0DQaFhf8yg9bVlMCH18x8wdxtnLF3_eQbVTXCRWTrOow5FhwbOkJgTFRXJi2xPFpJ7F6s2mvs1iP3dY-dg_myhfrVayqCalHq5fcOdfriHqAhXgNINQFlwG98uYzLtRoV1gbDBDHhmwmgLLJcbzOMEXNdWl3TqAlRUml_cHPqMJyULpAd4oVC-af0CqXp-TM0nUQMfGtLXFaGBuFwkvU4RyrxuqyCf7S1D1OLuvH1mXFqnGGVqEzDtGqUvyT5s4mXaCPTToWJnYjuSDoXSmS7UF8QCFgpyTAn1YOjCHldchG1PP3ycINQkkZHnlkCe-OxyhiQldX4Y4OcdslXxYJp7wb1b8gWL60txaNovpR-D8TwyJf4OvYuhV-9CPgNkDdeLSUTKZ18EqAYoVnVlb5wJgTWrn6eJg4dECxJZzByPlBqJUIxoTKZgbwCeULy1QQz64CxGZtZsu9CPvSfXyBcN9_4pg0J5E3MLM4vf8dYIeHACimm7i9qzB6a6nwi7n3B3_TJmWgGkGRsIM5SVCfp4IF-MS2FSObMkr0lWb-uf98-PVHTY4VXyNjgn3CUTm4JzXNLqJeIHUqxldLRktxkoDpgSMTb1ahV7oBLe0zMhgSU81Y9XUrvSojwenl0nA; Domain=v.mbvlmx.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=bbdf796a-d14d-438a-998c-d869027c5809&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f14ab1a1d93ca97c0c0da7c3d00b26cf&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=bbdf796a-d14d-438a-998c-d869027c5809&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f14ab1a1d93ca97c0c0da7c3d00b26cf&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=bbdf796a-d14d-438a-998c-d869027c5809&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f14ab1a1d93ca97c0c0da7c3d00b26cf&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=3 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 97e64e30eb93a21b50142957fbc485aa
Strict-Transport-Security: max-age=0; includeSubdomains
hhbypdoecp.com/chicken.gif?z=1976032&pid=_cb-1976032_0&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=3t6-tDum20ztOv8acmwC3tW40WlYpg9UgBLNaqE-KC6LLXvP4uf2au8grEcqY_NSXx58zvhtu0jVdw9Lyc8mES3_4yre8goKl2wTpm5EQLc7szwD8wQQbxX_xecbPyORZZ1CUMWoXtf-rLpyFXvRb-ApKwt_5_ANEikEvdNi3wJpNJERws2myLF3DDRjq8YXnQYUPC__TtBa2WCBKVDI4W5d-eHEqruuAcdAqIkEYPYFbnA1RtcX8MOXmF6L3Rcbp9I7OAbWep01u2P4s9YrED2Mbr_q2ozwrIcexIjcDJvaYKHEbSpC8mwke55qKcpt9EqMqUB9Lef57dU_U7V1CdGTlRkCJwQCYIw-1xM9S1pSTZnxqtpsq2AKBL9KhVxScG4LJp7SrgFEoi5xtdcgAQCD9lAe4BMhvQwsYsw0gJArbYp0G72qFeJy8uflm6f1S9PqYQttMe6QI5HJd55T5zD1ZXSV1c3I5P8dWYC4BNvMRTX9qty1IPyNXLAiu4xIbw-N98lqlIuxXeGDUQqkq9gZVpTgI9GZ9F3ILeJMZSjU--TamhPPhOg7-pJWHT7NxYyS9CZ_kfNBxcr0ptx7sQ3dY1EZDcv47Rv5zIFak1LtIxbbU-tewFYjXS5emWxlY1__s84WiF8T9FfdKcCqzmcUib4lo6Msa2AvfWYigReDXGb-evvSWIq3DC3eh8JQLjsk6CyJK59XStX27Y8OXQyxNZrEGGhRvlGxnycC-zv0RLQKP2757peVgXWSbg30SUfSbWhhIq-EuQ-9hD4V265RWAGxorHraSm6vFakEjbGqrFRN6phEFaCsqR5FP2eH9BbIiTbowHaCSm_vBbIaO3iPdV2KUz1Mdcto9w_s3u1nREx2t0wo8KHMj-7IPANl7Xtd3OJh5rDP4muvjjLEgB6OItjTDGJQtRGk5dG4e48tXHh5PLZK_Pyzmzf_ZlY6HoaVwJ9KC__boIMyOkTPPrkLUgni7kdRvdTQubHNh4cdptWwLXqlbEbei4JdvwyhQF19syTTZVemjqUZC752LrK5Aj_Veh5Bv8vCfjjI1k4cluc7y7ZgatfOoqdNQDArWtRmdSMC0C0OYTTeq8DrImhMqYTiWHus38sMXIqXeDhv1qI747gSNQTQYzvP6qJg_Bd1X0Ap-IvaKTEc29xzXgM7KqwQfXoYCA48edJHkOzq01cfXWFZaXNGP1BYzavztLxjCmrS9HyLYdQCx6t2gRNUOBC6m498X-GLcxnYU8xvEEVZ3wUYJEAvnH8GXVConQNBL6R4LideizaIRjptdOrJ5E6h9I9IFrjeDnh8KjDzcKpPeSR9qVha0K5gMzii1k6W_4hZ7NAk8hGC9wyibwAxRxLCwJGqD7-NcSsrXuJQuAu5rP45ykeElRD9Zw0jXxEGOK6T23zMumvdiS8s2G4gC6TD-C_zMrwl11_ZXD4zwtXL3ifUjmfikYMSmTNQ-62httJ-XuLTKqKtc_NXxMfKV7yaocU1uz8cyj4ZpAZ5qHXoyTcwgcnLHR_PTcTu1fr8MNp-CrIJ8MxKpLfZh-uiM-WMNRn&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&pload=955
200 OK 43 B URL GET HTTP/2 hhbypdoecp.com/chicken.gif?z=1976032&pid=_cb-1976032_0&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=3t6-tDum20ztOv8acmwC3tW40WlYpg9UgBLNaqE-KC6LLXvP4uf2au8grEcqY_NSXx58zvhtu0jVdw9Lyc8mES3_4yre8goKl2wTpm5EQLc7szwD8wQQbxX_xecbPyORZZ1CUMWoXtf-rLpyFXvRb-ApKwt_5_ANEikEvdNi3wJpNJERws2myLF3DDRjq8YXnQYUPC__TtBa2WCBKVDI4W5d-eHEqruuAcdAqIkEYPYFbnA1RtcX8MOXmF6L3Rcbp9I7OAbWep01u2P4s9YrED2Mbr_q2ozwrIcexIjcDJvaYKHEbSpC8mwke55qKcpt9EqMqUB9Lef57dU_U7V1CdGTlRkCJwQCYIw-1xM9S1pSTZnxqtpsq2AKBL9KhVxScG4LJp7SrgFEoi5xtdcgAQCD9lAe4BMhvQwsYsw0gJArbYp0G72qFeJy8uflm6f1S9PqYQttMe6QI5HJd55T5zD1ZXSV1c3I5P8dWYC4BNvMRTX9qty1IPyNXLAiu4xIbw-N98lqlIuxXeGDUQqkq9gZVpTgI9GZ9F3ILeJMZSjU--TamhPPhOg7-pJWHT7NxYyS9CZ_kfNBxcr0ptx7sQ3dY1EZDcv47Rv5zIFak1LtIxbbU-tewFYjXS5emWxlY1__s84WiF8T9FfdKcCqzmcUib4lo6Msa2AvfWYigReDXGb-evvSWIq3DC3eh8JQLjsk6CyJK59XStX27Y8OXQyxNZrEGGhRvlGxnycC-zv0RLQKP2757peVgXWSbg30SUfSbWhhIq-EuQ-9hD4V265RWAGxorHraSm6vFakEjbGqrFRN6phEFaCsqR5FP2eH9BbIiTbowHaCSm_vBbIaO3iPdV2KUz1Mdcto9w_s3u1nREx2t0wo8KHMj-7IPANl7Xtd3OJh5rDP4muvjjLEgB6OItjTDGJQtRGk5dG4e48tXHh5PLZK_Pyzmzf_ZlY6HoaVwJ9KC__boIMyOkTPPrkLUgni7kdRvdTQubHNh4cdptWwLXqlbEbei4JdvwyhQF19syTTZVemjqUZC752LrK5Aj_Veh5Bv8vCfjjI1k4cluc7y7ZgatfOoqdNQDArWtRmdSMC0C0OYTTeq8DrImhMqYTiWHus38sMXIqXeDhv1qI747gSNQTQYzvP6qJg_Bd1X0Ap-IvaKTEc29xzXgM7KqwQfXoYCA48edJHkOzq01cfXWFZaXNGP1BYzavztLxjCmrS9HyLYdQCx6t2gRNUOBC6m498X-GLcxnYU8xvEEVZ3wUYJEAvnH8GXVConQNBL6R4LideizaIRjptdOrJ5E6h9I9IFrjeDnh8KjDzcKpPeSR9qVha0K5gMzii1k6W_4hZ7NAk8hGC9wyibwAxRxLCwJGqD7-NcSsrXuJQuAu5rP45ykeElRD9Zw0jXxEGOK6T23zMumvdiS8s2G4gC6TD-C_zMrwl11_ZXD4zwtXL3ifUjmfikYMSmTNQ-62httJ-XuLTKqKtc_NXxMfKV7yaocU1uz8cyj4ZpAZ5qHXoyTcwgcnLHR_PTcTu1fr8MNp-CrIJ8MxKpLfZh-uiM-WMNRn&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&pload=955
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1976032&pid=_cb-1976032_0&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=3t6-tDum20ztOv8acmwC3tW40WlYpg9UgBLNaqE-KC6LLXvP4uf2au8grEcqY_NSXx58zvhtu0jVdw9Lyc8mES3_4yre8goKl2wTpm5EQLc7szwD8wQQbxX_xecbPyORZZ1CUMWoXtf-rLpyFXvRb-ApKwt_5_ANEikEvdNi3wJpNJERws2myLF3DDRjq8YXnQYUPC__TtBa2WCBKVDI4W5d-eHEqruuAcdAqIkEYPYFbnA1RtcX8MOXmF6L3Rcbp9I7OAbWep01u2P4s9YrED2Mbr_q2ozwrIcexIjcDJvaYKHEbSpC8mwke55qKcpt9EqMqUB9Lef57dU_U7V1CdGTlRkCJwQCYIw-1xM9S1pSTZnxqtpsq2AKBL9KhVxScG4LJp7SrgFEoi5xtdcgAQCD9lAe4BMhvQwsYsw0gJArbYp0G72qFeJy8uflm6f1S9PqYQttMe6QI5HJd55T5zD1ZXSV1c3I5P8dWYC4BNvMRTX9qty1IPyNXLAiu4xIbw-N98lqlIuxXeGDUQqkq9gZVpTgI9GZ9F3ILeJMZSjU--TamhPPhOg7-pJWHT7NxYyS9CZ_kfNBxcr0ptx7sQ3dY1EZDcv47Rv5zIFak1LtIxbbU-tewFYjXS5emWxlY1__s84WiF8T9FfdKcCqzmcUib4lo6Msa2AvfWYigReDXGb-evvSWIq3DC3eh8JQLjsk6CyJK59XStX27Y8OXQyxNZrEGGhRvlGxnycC-zv0RLQKP2757peVgXWSbg30SUfSbWhhIq-EuQ-9hD4V265RWAGxorHraSm6vFakEjbGqrFRN6phEFaCsqR5FP2eH9BbIiTbowHaCSm_vBbIaO3iPdV2KUz1Mdcto9w_s3u1nREx2t0wo8KHMj-7IPANl7Xtd3OJh5rDP4muvjjLEgB6OItjTDGJQtRGk5dG4e48tXHh5PLZK_Pyzmzf_ZlY6HoaVwJ9KC__boIMyOkTPPrkLUgni7kdRvdTQubHNh4cdptWwLXqlbEbei4JdvwyhQF19syTTZVemjqUZC752LrK5Aj_Veh5Bv8vCfjjI1k4cluc7y7ZgatfOoqdNQDArWtRmdSMC0C0OYTTeq8DrImhMqYTiWHus38sMXIqXeDhv1qI747gSNQTQYzvP6qJg_Bd1X0Ap-IvaKTEc29xzXgM7KqwQfXoYCA48edJHkOzq01cfXWFZaXNGP1BYzavztLxjCmrS9HyLYdQCx6t2gRNUOBC6m498X-GLcxnYU8xvEEVZ3wUYJEAvnH8GXVConQNBL6R4LideizaIRjptdOrJ5E6h9I9IFrjeDnh8KjDzcKpPeSR9qVha0K5gMzii1k6W_4hZ7NAk8hGC9wyibwAxRxLCwJGqD7-NcSsrXuJQuAu5rP45ykeElRD9Zw0jXxEGOK6T23zMumvdiS8s2G4gC6TD-C_zMrwl11_ZXD4zwtXL3ifUjmfikYMSmTNQ-62httJ-XuLTKqKtc_NXxMfKV7yaocU1uz8cyj4ZpAZ5qHXoyTcwgcnLHR_PTcTu1fr8MNp-CrIJ8MxKpLfZh-uiM-WMNRn&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&pload=955 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311292200442f85aa66c84a2cb489d85ae8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACitnQAAAAAAAAAB; Path=/; Expires=Sat, 30 Dec 2023 03:00:03 GMT; Secure; SameSite=None
OACIBLOCK=ACitnQAAAABlZ%2Fqw; Path=/; Expires=Sat, 30 Dec 2023 03:00:03 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
hhbypdoecp.com/whob.gif?z=1976032&pid=_cb-1976032_0&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=3t6-tDum20ztOv8acmwC3tW40WlYpg9UgBLNaqE-KC6LLXvP4uf2au8grEcqY_NSXx58zvhtu0jVdw9Lyc8mES3_4yre8goKl2wTpm5EQLc7szwD8wQQbxX_xecbPyORZZ1CUMWoXtf-rLpyFXvRb-ApKwt_5_ANEikEvdNi3wJpNJERws2myLF3DDRjq8YXnQYUPC__TtBa2WCBKVDI4W5d-eHEqruuAcdAqIkEYPYFbnA1RtcX8MOXmF6L3Rcbp9I7OAbWep01u2P4s9YrED2Mbr_q2ozwrIcexIjcDJvaYKHEbSpC8mwke55qKcpt9EqMqUB9Lef57dU_U7V1CdGTlRkCJwQCYIw-1xM9S1pSTZnxqtpsq2AKBL9KhVxScG4LJp7SrgFEoi5xtdcgAQCD9lAe4BMhvQwsYsw0gJArbYp0G72qFeJy8uflm6f1S9PqYQttMe6QI5HJd55T5zD1ZXSV1c3I5P8dWYC4BNvMRTX9qty1IPyNXLAiu4xIbw-N98lqlIuxXeGDUQqkq9gZVpTgI9GZ9F3ILeJMZSjU--TamhPPhOg7-pJWHT7NxYyS9CZ_kfNBxcr0ptx7sQ3dY1EZDcv47Rv5zIFak1LtIxbbU-tewFYjXS5emWxlY1__s84WiF8T9FfdKcCqzmcUib4lo6Msa2AvfWYigReDXGb-evvSWIq3DC3eh8JQLjsk6CyJK59XStX27Y8OXQyxNZrEGGhRvlGxnycC-zv0RLQKP2757peVgXWSbg30SUfSbWhhIq-EuQ-9hD4V265RWAGxorHraSm6vFakEjbGqrFRN6phEFaCsqR5FP2eH9BbIiTbowHaCSm_vBbIaO3iPdV2KUz1Mdcto9w_s3u1nREx2t0wo8KHMj-7IPANl7Xtd3OJh5rDP4muvjjLEgB6OItjTDGJQtRGk5dG4e48tXHh5PLZK_Pyzmzf_ZlY6HoaVwJ9KC__boIMyOkTPPrkLUgni7kdRvdTQubHNh4cdptWwLXqlbEbei4JdvwyhQF19syTTZVemjqUZC752LrK5Aj_Veh5Bv8vCfjjI1k4cluc7y7ZgatfOoqdNQDArWtRmdSMC0C0OYTTeq8DrImhMqYTiWHus38sMXIqXeDhv1qI747gSNQTQYzvP6qJg_Bd1X0Ap-IvaKTEc29xzXgM7KqwQfXoYCA48edJHkOzq01cfXWFZaXNGP1BYzavztLxjCmrS9HyLYdQCx6t2gRNUOBC6m498X-GLcxnYU8xvEEVZ3wUYJEAvnH8GXVConQNBL6R4LideizaIRjptdOrJ5E6h9I9IFrjeDnh8KjDzcKpPeSR9qVha0K5gMzii1k6W_4hZ7NAk8hGC9wyibwAxRxLCwJGqD7-NcSsrXuJQuAu5rP45ykeElRD9Zw0jXxEGOK6T23zMumvdiS8s2G4gC6TD-C_zMrwl11_ZXD4zwtXL3ifUjmfikYMSmTNQ-62httJ-XuLTKqKtc_NXxMfKV7yaocU1uz8cyj4ZpAZ5qHXoyTcwgcnLHR_PTcTu1fr8MNp-CrIJ8MxKpLfZh-uiM-WMNRn&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&pload=955
200 OK 43 B URL GET HTTP/2 hhbypdoecp.com/whob.gif?z=1976032&pid=_cb-1976032_0&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=3t6-tDum20ztOv8acmwC3tW40WlYpg9UgBLNaqE-KC6LLXvP4uf2au8grEcqY_NSXx58zvhtu0jVdw9Lyc8mES3_4yre8goKl2wTpm5EQLc7szwD8wQQbxX_xecbPyORZZ1CUMWoXtf-rLpyFXvRb-ApKwt_5_ANEikEvdNi3wJpNJERws2myLF3DDRjq8YXnQYUPC__TtBa2WCBKVDI4W5d-eHEqruuAcdAqIkEYPYFbnA1RtcX8MOXmF6L3Rcbp9I7OAbWep01u2P4s9YrED2Mbr_q2ozwrIcexIjcDJvaYKHEbSpC8mwke55qKcpt9EqMqUB9Lef57dU_U7V1CdGTlRkCJwQCYIw-1xM9S1pSTZnxqtpsq2AKBL9KhVxScG4LJp7SrgFEoi5xtdcgAQCD9lAe4BMhvQwsYsw0gJArbYp0G72qFeJy8uflm6f1S9PqYQttMe6QI5HJd55T5zD1ZXSV1c3I5P8dWYC4BNvMRTX9qty1IPyNXLAiu4xIbw-N98lqlIuxXeGDUQqkq9gZVpTgI9GZ9F3ILeJMZSjU--TamhPPhOg7-pJWHT7NxYyS9CZ_kfNBxcr0ptx7sQ3dY1EZDcv47Rv5zIFak1LtIxbbU-tewFYjXS5emWxlY1__s84WiF8T9FfdKcCqzmcUib4lo6Msa2AvfWYigReDXGb-evvSWIq3DC3eh8JQLjsk6CyJK59XStX27Y8OXQyxNZrEGGhRvlGxnycC-zv0RLQKP2757peVgXWSbg30SUfSbWhhIq-EuQ-9hD4V265RWAGxorHraSm6vFakEjbGqrFRN6phEFaCsqR5FP2eH9BbIiTbowHaCSm_vBbIaO3iPdV2KUz1Mdcto9w_s3u1nREx2t0wo8KHMj-7IPANl7Xtd3OJh5rDP4muvjjLEgB6OItjTDGJQtRGk5dG4e48tXHh5PLZK_Pyzmzf_ZlY6HoaVwJ9KC__boIMyOkTPPrkLUgni7kdRvdTQubHNh4cdptWwLXqlbEbei4JdvwyhQF19syTTZVemjqUZC752LrK5Aj_Veh5Bv8vCfjjI1k4cluc7y7ZgatfOoqdNQDArWtRmdSMC0C0OYTTeq8DrImhMqYTiWHus38sMXIqXeDhv1qI747gSNQTQYzvP6qJg_Bd1X0Ap-IvaKTEc29xzXgM7KqwQfXoYCA48edJHkOzq01cfXWFZaXNGP1BYzavztLxjCmrS9HyLYdQCx6t2gRNUOBC6m498X-GLcxnYU8xvEEVZ3wUYJEAvnH8GXVConQNBL6R4LideizaIRjptdOrJ5E6h9I9IFrjeDnh8KjDzcKpPeSR9qVha0K5gMzii1k6W_4hZ7NAk8hGC9wyibwAxRxLCwJGqD7-NcSsrXuJQuAu5rP45ykeElRD9Zw0jXxEGOK6T23zMumvdiS8s2G4gC6TD-C_zMrwl11_ZXD4zwtXL3ifUjmfikYMSmTNQ-62httJ-XuLTKqKtc_NXxMfKV7yaocU1uz8cyj4ZpAZ5qHXoyTcwgcnLHR_PTcTu1fr8MNp-CrIJ8MxKpLfZh-uiM-WMNRn&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&pload=955
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1976032&pid=_cb-1976032_0&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=3t6-tDum20ztOv8acmwC3tW40WlYpg9UgBLNaqE-KC6LLXvP4uf2au8grEcqY_NSXx58zvhtu0jVdw9Lyc8mES3_4yre8goKl2wTpm5EQLc7szwD8wQQbxX_xecbPyORZZ1CUMWoXtf-rLpyFXvRb-ApKwt_5_ANEikEvdNi3wJpNJERws2myLF3DDRjq8YXnQYUPC__TtBa2WCBKVDI4W5d-eHEqruuAcdAqIkEYPYFbnA1RtcX8MOXmF6L3Rcbp9I7OAbWep01u2P4s9YrED2Mbr_q2ozwrIcexIjcDJvaYKHEbSpC8mwke55qKcpt9EqMqUB9Lef57dU_U7V1CdGTlRkCJwQCYIw-1xM9S1pSTZnxqtpsq2AKBL9KhVxScG4LJp7SrgFEoi5xtdcgAQCD9lAe4BMhvQwsYsw0gJArbYp0G72qFeJy8uflm6f1S9PqYQttMe6QI5HJd55T5zD1ZXSV1c3I5P8dWYC4BNvMRTX9qty1IPyNXLAiu4xIbw-N98lqlIuxXeGDUQqkq9gZVpTgI9GZ9F3ILeJMZSjU--TamhPPhOg7-pJWHT7NxYyS9CZ_kfNBxcr0ptx7sQ3dY1EZDcv47Rv5zIFak1LtIxbbU-tewFYjXS5emWxlY1__s84WiF8T9FfdKcCqzmcUib4lo6Msa2AvfWYigReDXGb-evvSWIq3DC3eh8JQLjsk6CyJK59XStX27Y8OXQyxNZrEGGhRvlGxnycC-zv0RLQKP2757peVgXWSbg30SUfSbWhhIq-EuQ-9hD4V265RWAGxorHraSm6vFakEjbGqrFRN6phEFaCsqR5FP2eH9BbIiTbowHaCSm_vBbIaO3iPdV2KUz1Mdcto9w_s3u1nREx2t0wo8KHMj-7IPANl7Xtd3OJh5rDP4muvjjLEgB6OItjTDGJQtRGk5dG4e48tXHh5PLZK_Pyzmzf_ZlY6HoaVwJ9KC__boIMyOkTPPrkLUgni7kdRvdTQubHNh4cdptWwLXqlbEbei4JdvwyhQF19syTTZVemjqUZC752LrK5Aj_Veh5Bv8vCfjjI1k4cluc7y7ZgatfOoqdNQDArWtRmdSMC0C0OYTTeq8DrImhMqYTiWHus38sMXIqXeDhv1qI747gSNQTQYzvP6qJg_Bd1X0Ap-IvaKTEc29xzXgM7KqwQfXoYCA48edJHkOzq01cfXWFZaXNGP1BYzavztLxjCmrS9HyLYdQCx6t2gRNUOBC6m498X-GLcxnYU8xvEEVZ3wUYJEAvnH8GXVConQNBL6R4LideizaIRjptdOrJ5E6h9I9IFrjeDnh8KjDzcKpPeSR9qVha0K5gMzii1k6W_4hZ7NAk8hGC9wyibwAxRxLCwJGqD7-NcSsrXuJQuAu5rP45ykeElRD9Zw0jXxEGOK6T23zMumvdiS8s2G4gC6TD-C_zMrwl11_ZXD4zwtXL3ifUjmfikYMSmTNQ-62httJ-XuLTKqKtc_NXxMfKV7yaocU1uz8cyj4ZpAZ5qHXoyTcwgcnLHR_PTcTu1fr8MNp-CrIJ8MxKpLfZh-uiM-WMNRn&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4896571866416128&eclog=0&sp=1&im=1&pload=955 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311292200442f85aa66c84a2cb489d85ae8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
hhbypdoecp.com/chicken.gif?z=1976032&pid=_cb-1976032_2&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=Prp9jVsFpYC7EqO9JvDQjSb7fJ5cLv3GJi9RWC1DSZMNDraxC5mPhdjQJyP7q8oA34-qGyRETvmXY_V9tNRrVskK6SA0xEXns335-EEjeLpciY4nt7c8jCUyYaafDKNJYhJP4aaJxsWDLkVz05sImko31MX4AY7ZM9oayYJLWL_RIBE3gE0Kc6Bh8QCkH5Uh__PfHyZAufyvWKJHv-FD3BVi4iJi3dT4IQo5Siga0oMdvew3-jLNERljHbMFgKj6_8NtP1e-EXtAQ9_mEj2bZir_Y-3GDcEizt9WKpaFrqlaSLinvuNUFnQuG88Q1hAc1p9qaRR1JsxeuPXHcCf3u2azkgMOzVKBR2Fd8i6Q5k8ohV9delnxy5cciLsGdoGAb5FM_0FIWevH15s3CVfE-uAwTQ3WY82JkWK7l4V7LykUOA09Rkk6yGI_2v8ABNsos2Fv17o2a8pCmm60NRlRuwYrpu3ZTmBRfSHY9stlXyfkMvHy4ubPAMG1-m1l9CXWnFfjYv819HdUvLc0s7d9XWPO8kQzRWOeV9ubF7dDfp8xd7yo543EhH84oPFYWVBhRIQU_R0UpX23MOarS4dZCMx_nfmk7yZ20SvymtzvBzqTfJdpCaDmyXVgMvFTV6Ik_eJy9aGcte_E1E3S058iyws4selG1DdtT1Tti2eXred7cvrzOSF7XyCOUsiSzTyxj7O-qc-FY_YXYHh_3Z230nkrD4GRQ4oBe6aXy1YauMSOqpUmsaP-I9U8jXj-7SloUsU6eihY73wYP8XUMOQXAFk5_3GMvAY8gXL6QPCZaqiQ7TVSqTBkTFyshKcBUdhBkTbN_XxA27EX-TuXVv2TwXfPOfKQp5axGOCE_pn-NfSWpZeyNGN4f96R2mdXLt5OE7rTWSyGVY5IPBpsbC6pmHOnAUdnecu_RujshwZ85BV4UU2TDCxvuMk0sjO_UAzSKeYQRXR5eSMYP55Z99V9ZKBC6XIwUBa1OrLXg33MFKL0cCB8sOlz_Wsd1MPjPPgmem6lLOcz6Rf2JdUWAEt7G-KwIitqTNWazCi0GrVVDmDy-JC66Eyh9ydHlHXgsXxsxnU4bdkchph-l5xCd3usJkYLo8ubrezrMyJ-KjteIIjwXkdkzd__NwW-vthZ_rnJhEwXJF3ynjOx29Hg7QWXjksOkCRALwITMfW7TDs4tytzv5LPWBZMmGpRD_Kq904peZNRqpmIZ6afDcn2XKzY_LzvXKIyGULD5mB5vzhUMco6oVHO8Yd6h1fj4BZrxfZvCuDmDcFmgNosj7GzFsqHT-JYC0GgZm4P4jwfsyWKvzWaBWKBPqua0byqiLVb0Ue-HiZt90R928B2etFdVwGyKHb5vR8GZQ1icgTwFaOZYhbbRZUJNK1VE-64ZI74nJ7E-kS1-iy35C1o51FqC0C86rGyG29F17Di-nMFfS9AgXLtkG68z5pmc_iboAIayXSAJLU31UwpRwvgsDBL3zvulp6la2yJKDieGuq-C-WOVkI2R_rMlyhr4sAizRVvQsZn3yWSk7h6RhLbgy9KypaeYXTA4p7CnQPU&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&pload=1060
200 OK 43 B URL GET HTTP/2 hhbypdoecp.com/chicken.gif?z=1976032&pid=_cb-1976032_2&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=Prp9jVsFpYC7EqO9JvDQjSb7fJ5cLv3GJi9RWC1DSZMNDraxC5mPhdjQJyP7q8oA34-qGyRETvmXY_V9tNRrVskK6SA0xEXns335-EEjeLpciY4nt7c8jCUyYaafDKNJYhJP4aaJxsWDLkVz05sImko31MX4AY7ZM9oayYJLWL_RIBE3gE0Kc6Bh8QCkH5Uh__PfHyZAufyvWKJHv-FD3BVi4iJi3dT4IQo5Siga0oMdvew3-jLNERljHbMFgKj6_8NtP1e-EXtAQ9_mEj2bZir_Y-3GDcEizt9WKpaFrqlaSLinvuNUFnQuG88Q1hAc1p9qaRR1JsxeuPXHcCf3u2azkgMOzVKBR2Fd8i6Q5k8ohV9delnxy5cciLsGdoGAb5FM_0FIWevH15s3CVfE-uAwTQ3WY82JkWK7l4V7LykUOA09Rkk6yGI_2v8ABNsos2Fv17o2a8pCmm60NRlRuwYrpu3ZTmBRfSHY9stlXyfkMvHy4ubPAMG1-m1l9CXWnFfjYv819HdUvLc0s7d9XWPO8kQzRWOeV9ubF7dDfp8xd7yo543EhH84oPFYWVBhRIQU_R0UpX23MOarS4dZCMx_nfmk7yZ20SvymtzvBzqTfJdpCaDmyXVgMvFTV6Ik_eJy9aGcte_E1E3S058iyws4selG1DdtT1Tti2eXred7cvrzOSF7XyCOUsiSzTyxj7O-qc-FY_YXYHh_3Z230nkrD4GRQ4oBe6aXy1YauMSOqpUmsaP-I9U8jXj-7SloUsU6eihY73wYP8XUMOQXAFk5_3GMvAY8gXL6QPCZaqiQ7TVSqTBkTFyshKcBUdhBkTbN_XxA27EX-TuXVv2TwXfPOfKQp5axGOCE_pn-NfSWpZeyNGN4f96R2mdXLt5OE7rTWSyGVY5IPBpsbC6pmHOnAUdnecu_RujshwZ85BV4UU2TDCxvuMk0sjO_UAzSKeYQRXR5eSMYP55Z99V9ZKBC6XIwUBa1OrLXg33MFKL0cCB8sOlz_Wsd1MPjPPgmem6lLOcz6Rf2JdUWAEt7G-KwIitqTNWazCi0GrVVDmDy-JC66Eyh9ydHlHXgsXxsxnU4bdkchph-l5xCd3usJkYLo8ubrezrMyJ-KjteIIjwXkdkzd__NwW-vthZ_rnJhEwXJF3ynjOx29Hg7QWXjksOkCRALwITMfW7TDs4tytzv5LPWBZMmGpRD_Kq904peZNRqpmIZ6afDcn2XKzY_LzvXKIyGULD5mB5vzhUMco6oVHO8Yd6h1fj4BZrxfZvCuDmDcFmgNosj7GzFsqHT-JYC0GgZm4P4jwfsyWKvzWaBWKBPqua0byqiLVb0Ue-HiZt90R928B2etFdVwGyKHb5vR8GZQ1icgTwFaOZYhbbRZUJNK1VE-64ZI74nJ7E-kS1-iy35C1o51FqC0C86rGyG29F17Di-nMFfS9AgXLtkG68z5pmc_iboAIayXSAJLU31UwpRwvgsDBL3zvulp6la2yJKDieGuq-C-WOVkI2R_rMlyhr4sAizRVvQsZn3yWSk7h6RhLbgy9KypaeYXTA4p7CnQPU&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&pload=1060
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1976032&pid=_cb-1976032_2&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=Prp9jVsFpYC7EqO9JvDQjSb7fJ5cLv3GJi9RWC1DSZMNDraxC5mPhdjQJyP7q8oA34-qGyRETvmXY_V9tNRrVskK6SA0xEXns335-EEjeLpciY4nt7c8jCUyYaafDKNJYhJP4aaJxsWDLkVz05sImko31MX4AY7ZM9oayYJLWL_RIBE3gE0Kc6Bh8QCkH5Uh__PfHyZAufyvWKJHv-FD3BVi4iJi3dT4IQo5Siga0oMdvew3-jLNERljHbMFgKj6_8NtP1e-EXtAQ9_mEj2bZir_Y-3GDcEizt9WKpaFrqlaSLinvuNUFnQuG88Q1hAc1p9qaRR1JsxeuPXHcCf3u2azkgMOzVKBR2Fd8i6Q5k8ohV9delnxy5cciLsGdoGAb5FM_0FIWevH15s3CVfE-uAwTQ3WY82JkWK7l4V7LykUOA09Rkk6yGI_2v8ABNsos2Fv17o2a8pCmm60NRlRuwYrpu3ZTmBRfSHY9stlXyfkMvHy4ubPAMG1-m1l9CXWnFfjYv819HdUvLc0s7d9XWPO8kQzRWOeV9ubF7dDfp8xd7yo543EhH84oPFYWVBhRIQU_R0UpX23MOarS4dZCMx_nfmk7yZ20SvymtzvBzqTfJdpCaDmyXVgMvFTV6Ik_eJy9aGcte_E1E3S058iyws4selG1DdtT1Tti2eXred7cvrzOSF7XyCOUsiSzTyxj7O-qc-FY_YXYHh_3Z230nkrD4GRQ4oBe6aXy1YauMSOqpUmsaP-I9U8jXj-7SloUsU6eihY73wYP8XUMOQXAFk5_3GMvAY8gXL6QPCZaqiQ7TVSqTBkTFyshKcBUdhBkTbN_XxA27EX-TuXVv2TwXfPOfKQp5axGOCE_pn-NfSWpZeyNGN4f96R2mdXLt5OE7rTWSyGVY5IPBpsbC6pmHOnAUdnecu_RujshwZ85BV4UU2TDCxvuMk0sjO_UAzSKeYQRXR5eSMYP55Z99V9ZKBC6XIwUBa1OrLXg33MFKL0cCB8sOlz_Wsd1MPjPPgmem6lLOcz6Rf2JdUWAEt7G-KwIitqTNWazCi0GrVVDmDy-JC66Eyh9ydHlHXgsXxsxnU4bdkchph-l5xCd3usJkYLo8ubrezrMyJ-KjteIIjwXkdkzd__NwW-vthZ_rnJhEwXJF3ynjOx29Hg7QWXjksOkCRALwITMfW7TDs4tytzv5LPWBZMmGpRD_Kq904peZNRqpmIZ6afDcn2XKzY_LzvXKIyGULD5mB5vzhUMco6oVHO8Yd6h1fj4BZrxfZvCuDmDcFmgNosj7GzFsqHT-JYC0GgZm4P4jwfsyWKvzWaBWKBPqua0byqiLVb0Ue-HiZt90R928B2etFdVwGyKHb5vR8GZQ1icgTwFaOZYhbbRZUJNK1VE-64ZI74nJ7E-kS1-iy35C1o51FqC0C86rGyG29F17Di-nMFfS9AgXLtkG68z5pmc_iboAIayXSAJLU31UwpRwvgsDBL3zvulp6la2yJKDieGuq-C-WOVkI2R_rMlyhr4sAizRVvQsZn3yWSk7h6RhLbgy9KypaeYXTA4p7CnQPU&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&pload=1060 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311292200442f85aa66c84a2cb489d85ae8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACitnQAAAAAAAAAB; Path=/; Expires=Sat, 30 Dec 2023 03:00:03 GMT; Secure; SameSite=None
OACIBLOCK=ACitnQAAAABlZ%2Fqw; Path=/; Expires=Sat, 30 Dec 2023 03:00:03 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
hhbypdoecp.com/whob.gif?z=1976032&pid=_cb-1976032_2&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=Prp9jVsFpYC7EqO9JvDQjSb7fJ5cLv3GJi9RWC1DSZMNDraxC5mPhdjQJyP7q8oA34-qGyRETvmXY_V9tNRrVskK6SA0xEXns335-EEjeLpciY4nt7c8jCUyYaafDKNJYhJP4aaJxsWDLkVz05sImko31MX4AY7ZM9oayYJLWL_RIBE3gE0Kc6Bh8QCkH5Uh__PfHyZAufyvWKJHv-FD3BVi4iJi3dT4IQo5Siga0oMdvew3-jLNERljHbMFgKj6_8NtP1e-EXtAQ9_mEj2bZir_Y-3GDcEizt9WKpaFrqlaSLinvuNUFnQuG88Q1hAc1p9qaRR1JsxeuPXHcCf3u2azkgMOzVKBR2Fd8i6Q5k8ohV9delnxy5cciLsGdoGAb5FM_0FIWevH15s3CVfE-uAwTQ3WY82JkWK7l4V7LykUOA09Rkk6yGI_2v8ABNsos2Fv17o2a8pCmm60NRlRuwYrpu3ZTmBRfSHY9stlXyfkMvHy4ubPAMG1-m1l9CXWnFfjYv819HdUvLc0s7d9XWPO8kQzRWOeV9ubF7dDfp8xd7yo543EhH84oPFYWVBhRIQU_R0UpX23MOarS4dZCMx_nfmk7yZ20SvymtzvBzqTfJdpCaDmyXVgMvFTV6Ik_eJy9aGcte_E1E3S058iyws4selG1DdtT1Tti2eXred7cvrzOSF7XyCOUsiSzTyxj7O-qc-FY_YXYHh_3Z230nkrD4GRQ4oBe6aXy1YauMSOqpUmsaP-I9U8jXj-7SloUsU6eihY73wYP8XUMOQXAFk5_3GMvAY8gXL6QPCZaqiQ7TVSqTBkTFyshKcBUdhBkTbN_XxA27EX-TuXVv2TwXfPOfKQp5axGOCE_pn-NfSWpZeyNGN4f96R2mdXLt5OE7rTWSyGVY5IPBpsbC6pmHOnAUdnecu_RujshwZ85BV4UU2TDCxvuMk0sjO_UAzSKeYQRXR5eSMYP55Z99V9ZKBC6XIwUBa1OrLXg33MFKL0cCB8sOlz_Wsd1MPjPPgmem6lLOcz6Rf2JdUWAEt7G-KwIitqTNWazCi0GrVVDmDy-JC66Eyh9ydHlHXgsXxsxnU4bdkchph-l5xCd3usJkYLo8ubrezrMyJ-KjteIIjwXkdkzd__NwW-vthZ_rnJhEwXJF3ynjOx29Hg7QWXjksOkCRALwITMfW7TDs4tytzv5LPWBZMmGpRD_Kq904peZNRqpmIZ6afDcn2XKzY_LzvXKIyGULD5mB5vzhUMco6oVHO8Yd6h1fj4BZrxfZvCuDmDcFmgNosj7GzFsqHT-JYC0GgZm4P4jwfsyWKvzWaBWKBPqua0byqiLVb0Ue-HiZt90R928B2etFdVwGyKHb5vR8GZQ1icgTwFaOZYhbbRZUJNK1VE-64ZI74nJ7E-kS1-iy35C1o51FqC0C86rGyG29F17Di-nMFfS9AgXLtkG68z5pmc_iboAIayXSAJLU31UwpRwvgsDBL3zvulp6la2yJKDieGuq-C-WOVkI2R_rMlyhr4sAizRVvQsZn3yWSk7h6RhLbgy9KypaeYXTA4p7CnQPU&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&pload=1060
200 OK 43 B URL GET HTTP/2 hhbypdoecp.com/whob.gif?z=1976032&pid=_cb-1976032_2&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=Prp9jVsFpYC7EqO9JvDQjSb7fJ5cLv3GJi9RWC1DSZMNDraxC5mPhdjQJyP7q8oA34-qGyRETvmXY_V9tNRrVskK6SA0xEXns335-EEjeLpciY4nt7c8jCUyYaafDKNJYhJP4aaJxsWDLkVz05sImko31MX4AY7ZM9oayYJLWL_RIBE3gE0Kc6Bh8QCkH5Uh__PfHyZAufyvWKJHv-FD3BVi4iJi3dT4IQo5Siga0oMdvew3-jLNERljHbMFgKj6_8NtP1e-EXtAQ9_mEj2bZir_Y-3GDcEizt9WKpaFrqlaSLinvuNUFnQuG88Q1hAc1p9qaRR1JsxeuPXHcCf3u2azkgMOzVKBR2Fd8i6Q5k8ohV9delnxy5cciLsGdoGAb5FM_0FIWevH15s3CVfE-uAwTQ3WY82JkWK7l4V7LykUOA09Rkk6yGI_2v8ABNsos2Fv17o2a8pCmm60NRlRuwYrpu3ZTmBRfSHY9stlXyfkMvHy4ubPAMG1-m1l9CXWnFfjYv819HdUvLc0s7d9XWPO8kQzRWOeV9ubF7dDfp8xd7yo543EhH84oPFYWVBhRIQU_R0UpX23MOarS4dZCMx_nfmk7yZ20SvymtzvBzqTfJdpCaDmyXVgMvFTV6Ik_eJy9aGcte_E1E3S058iyws4selG1DdtT1Tti2eXred7cvrzOSF7XyCOUsiSzTyxj7O-qc-FY_YXYHh_3Z230nkrD4GRQ4oBe6aXy1YauMSOqpUmsaP-I9U8jXj-7SloUsU6eihY73wYP8XUMOQXAFk5_3GMvAY8gXL6QPCZaqiQ7TVSqTBkTFyshKcBUdhBkTbN_XxA27EX-TuXVv2TwXfPOfKQp5axGOCE_pn-NfSWpZeyNGN4f96R2mdXLt5OE7rTWSyGVY5IPBpsbC6pmHOnAUdnecu_RujshwZ85BV4UU2TDCxvuMk0sjO_UAzSKeYQRXR5eSMYP55Z99V9ZKBC6XIwUBa1OrLXg33MFKL0cCB8sOlz_Wsd1MPjPPgmem6lLOcz6Rf2JdUWAEt7G-KwIitqTNWazCi0GrVVDmDy-JC66Eyh9ydHlHXgsXxsxnU4bdkchph-l5xCd3usJkYLo8ubrezrMyJ-KjteIIjwXkdkzd__NwW-vthZ_rnJhEwXJF3ynjOx29Hg7QWXjksOkCRALwITMfW7TDs4tytzv5LPWBZMmGpRD_Kq904peZNRqpmIZ6afDcn2XKzY_LzvXKIyGULD5mB5vzhUMco6oVHO8Yd6h1fj4BZrxfZvCuDmDcFmgNosj7GzFsqHT-JYC0GgZm4P4jwfsyWKvzWaBWKBPqua0byqiLVb0Ue-HiZt90R928B2etFdVwGyKHb5vR8GZQ1icgTwFaOZYhbbRZUJNK1VE-64ZI74nJ7E-kS1-iy35C1o51FqC0C86rGyG29F17Di-nMFfS9AgXLtkG68z5pmc_iboAIayXSAJLU31UwpRwvgsDBL3zvulp6la2yJKDieGuq-C-WOVkI2R_rMlyhr4sAizRVvQsZn3yWSk7h6RhLbgy9KypaeYXTA4p7CnQPU&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&pload=1060
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1976032&pid=_cb-1976032_2&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=Prp9jVsFpYC7EqO9JvDQjSb7fJ5cLv3GJi9RWC1DSZMNDraxC5mPhdjQJyP7q8oA34-qGyRETvmXY_V9tNRrVskK6SA0xEXns335-EEjeLpciY4nt7c8jCUyYaafDKNJYhJP4aaJxsWDLkVz05sImko31MX4AY7ZM9oayYJLWL_RIBE3gE0Kc6Bh8QCkH5Uh__PfHyZAufyvWKJHv-FD3BVi4iJi3dT4IQo5Siga0oMdvew3-jLNERljHbMFgKj6_8NtP1e-EXtAQ9_mEj2bZir_Y-3GDcEizt9WKpaFrqlaSLinvuNUFnQuG88Q1hAc1p9qaRR1JsxeuPXHcCf3u2azkgMOzVKBR2Fd8i6Q5k8ohV9delnxy5cciLsGdoGAb5FM_0FIWevH15s3CVfE-uAwTQ3WY82JkWK7l4V7LykUOA09Rkk6yGI_2v8ABNsos2Fv17o2a8pCmm60NRlRuwYrpu3ZTmBRfSHY9stlXyfkMvHy4ubPAMG1-m1l9CXWnFfjYv819HdUvLc0s7d9XWPO8kQzRWOeV9ubF7dDfp8xd7yo543EhH84oPFYWVBhRIQU_R0UpX23MOarS4dZCMx_nfmk7yZ20SvymtzvBzqTfJdpCaDmyXVgMvFTV6Ik_eJy9aGcte_E1E3S058iyws4selG1DdtT1Tti2eXred7cvrzOSF7XyCOUsiSzTyxj7O-qc-FY_YXYHh_3Z230nkrD4GRQ4oBe6aXy1YauMSOqpUmsaP-I9U8jXj-7SloUsU6eihY73wYP8XUMOQXAFk5_3GMvAY8gXL6QPCZaqiQ7TVSqTBkTFyshKcBUdhBkTbN_XxA27EX-TuXVv2TwXfPOfKQp5axGOCE_pn-NfSWpZeyNGN4f96R2mdXLt5OE7rTWSyGVY5IPBpsbC6pmHOnAUdnecu_RujshwZ85BV4UU2TDCxvuMk0sjO_UAzSKeYQRXR5eSMYP55Z99V9ZKBC6XIwUBa1OrLXg33MFKL0cCB8sOlz_Wsd1MPjPPgmem6lLOcz6Rf2JdUWAEt7G-KwIitqTNWazCi0GrVVDmDy-JC66Eyh9ydHlHXgsXxsxnU4bdkchph-l5xCd3usJkYLo8ubrezrMyJ-KjteIIjwXkdkzd__NwW-vthZ_rnJhEwXJF3ynjOx29Hg7QWXjksOkCRALwITMfW7TDs4tytzv5LPWBZMmGpRD_Kq904peZNRqpmIZ6afDcn2XKzY_LzvXKIyGULD5mB5vzhUMco6oVHO8Yd6h1fj4BZrxfZvCuDmDcFmgNosj7GzFsqHT-JYC0GgZm4P4jwfsyWKvzWaBWKBPqua0byqiLVb0Ue-HiZt90R928B2etFdVwGyKHb5vR8GZQ1icgTwFaOZYhbbRZUJNK1VE-64ZI74nJ7E-kS1-iy35C1o51FqC0C86rGyG29F17Di-nMFfS9AgXLtkG68z5pmc_iboAIayXSAJLU31UwpRwvgsDBL3zvulp6la2yJKDieGuq-C-WOVkI2R_rMlyhr4sAizRVvQsZn3yWSk7h6RhLbgy9KypaeYXTA4p7CnQPU&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&pload=1060 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311292200442f85aa66c84a2cb489d85ae8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
hhbypdoecp.com/chicken.gif?z=1976032&pid=_cb-1976032_1&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=b6tIoR5DB8p12IZqNUKtGqUYnlB5jKuzGqPQVdKGTSMu3L-gzlohL-Sljb0A8XbahHsbgxVUY5h7_x18ZBSuEQGSsh2ZR55t8FTVDF7rIcJ21Y0aJVlfZauB21ddeO3yFxm-fwxllZPL0exPdPboT-enn5lSebWB77sCSiPrIgtPmqZRUteoEkSBjVRRDZZxyOc5yHywUJ5IfWH-0P-EWq7Puke6WNCNZvZ5WVSGYuzxM7LB3B5_Y8bFyz7XCGVD9CZy-1LTiGUhuypTCYiVdAgPZ5huoxv-iQvj1JYsZoWKoakdI1Ljit1ttFLZEKJd135rFZhQeLAoYi2P5H4GOlYNqlVxWpwlAg0WtTFoKK9l0pyIWfHJKUtDLMmO8vYBWBTyvhbYpov6T-UpDCkruNCjW3QOJujS9gmIgIcJCCW5e1IT_8yC2VEYLhS7revRsIloOBYf5QRFL-jkxtzVCdlgTGMNqSI8fyzt8Fn-u5pcBcdann93k_arYXL5746f3atzm2Bf5pEnmblHas1AAj9BvQfPO0Bxm7PLN8apV-RiLPc-OfMPfLFcIMr8kt4hRZW3UM8gwrLshhsN0y8wzkltnR6odg-Sa9xHK2RBMS8-C62eFvSLBrxXOVZ-2wuILvqPSGf-o-8zAj3MRkqJ4zqoNzK6cnUa0BQqo3tirD2XtDYa_HL0sl-4dh456wV8QNoNDGRp4_HdcrcgUEUvJQvBMXzNundJ49ivmv5wTGkjRDqWNQNAk9vxOZbKSOAus4jgfM38knqRtCO0Ncftri_xsDNSG12_0CgXnS6ZALjeMwzutmnW7TPOpEqSBuhW8bvA2r_eG65YpZcEwghDvTAtf070cXgfn7Fa01qkpHVWT6c7oyoyMbb3UvT63qE1zvtipGyXwv5IdG3LxK4EeqPhCct2VPVQjDSpPWEfpNGTQ62m1oBvy7S2Ql2xSbsKgUdhBsKmQKbIZmLXPe4rQrGdb2jn7VIb5mAv6lChi_W6-28Cw1LGQwURQDy9hth7b3jmjOZrPzky1h6ZSLKwoirNteC-r76P3jUnQgGggOVODM_N3XmyEpOvXeH7n3tgwGZXeso6ikxWu5-chm0qZep0XU3dhUTdOwJX2NTkYCMfGBHo5eBBu8YXAdvKzRi0LdUQP00SxmhqUehPmd3PCGoXeeSQowWzCbMYXyLy1QfMVq8haxblR6jUlYxig26sd80t5aG43wFDKWPWEtRDPsA6vCtAXMYnJKpWFS_s_-vZ0-XHB8D_IBkr2O28DR8WvpMwohKAnI36gdHtNMvG303EPgEftvUMziAWgNt0dS0j2NHUiQ1whHHaMUf6XV648bzc9URnhkC9g3ilQ8JGOsNwQqnbqvLmJRcPcZAf--QLPaLMLiRzwUYl785iJftSaHZ0VEIlLJK2e7yHakVhVR1FMqZZwGvgbH5p0XHCffGg7VB5snAbkjCIytwVCTfpL_tjZfrNQx0e11fYet2nxKLyEACmVcyVso77r70_VJS6smn2utDaZ-bRzgMNv2YrxfUYd-Pm5SmkgPlxdtREUOZ213oshaKN&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&pload=1005
200 OK 43 B URL GET HTTP/2 hhbypdoecp.com/chicken.gif?z=1976032&pid=_cb-1976032_1&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=b6tIoR5DB8p12IZqNUKtGqUYnlB5jKuzGqPQVdKGTSMu3L-gzlohL-Sljb0A8XbahHsbgxVUY5h7_x18ZBSuEQGSsh2ZR55t8FTVDF7rIcJ21Y0aJVlfZauB21ddeO3yFxm-fwxllZPL0exPdPboT-enn5lSebWB77sCSiPrIgtPmqZRUteoEkSBjVRRDZZxyOc5yHywUJ5IfWH-0P-EWq7Puke6WNCNZvZ5WVSGYuzxM7LB3B5_Y8bFyz7XCGVD9CZy-1LTiGUhuypTCYiVdAgPZ5huoxv-iQvj1JYsZoWKoakdI1Ljit1ttFLZEKJd135rFZhQeLAoYi2P5H4GOlYNqlVxWpwlAg0WtTFoKK9l0pyIWfHJKUtDLMmO8vYBWBTyvhbYpov6T-UpDCkruNCjW3QOJujS9gmIgIcJCCW5e1IT_8yC2VEYLhS7revRsIloOBYf5QRFL-jkxtzVCdlgTGMNqSI8fyzt8Fn-u5pcBcdann93k_arYXL5746f3atzm2Bf5pEnmblHas1AAj9BvQfPO0Bxm7PLN8apV-RiLPc-OfMPfLFcIMr8kt4hRZW3UM8gwrLshhsN0y8wzkltnR6odg-Sa9xHK2RBMS8-C62eFvSLBrxXOVZ-2wuILvqPSGf-o-8zAj3MRkqJ4zqoNzK6cnUa0BQqo3tirD2XtDYa_HL0sl-4dh456wV8QNoNDGRp4_HdcrcgUEUvJQvBMXzNundJ49ivmv5wTGkjRDqWNQNAk9vxOZbKSOAus4jgfM38knqRtCO0Ncftri_xsDNSG12_0CgXnS6ZALjeMwzutmnW7TPOpEqSBuhW8bvA2r_eG65YpZcEwghDvTAtf070cXgfn7Fa01qkpHVWT6c7oyoyMbb3UvT63qE1zvtipGyXwv5IdG3LxK4EeqPhCct2VPVQjDSpPWEfpNGTQ62m1oBvy7S2Ql2xSbsKgUdhBsKmQKbIZmLXPe4rQrGdb2jn7VIb5mAv6lChi_W6-28Cw1LGQwURQDy9hth7b3jmjOZrPzky1h6ZSLKwoirNteC-r76P3jUnQgGggOVODM_N3XmyEpOvXeH7n3tgwGZXeso6ikxWu5-chm0qZep0XU3dhUTdOwJX2NTkYCMfGBHo5eBBu8YXAdvKzRi0LdUQP00SxmhqUehPmd3PCGoXeeSQowWzCbMYXyLy1QfMVq8haxblR6jUlYxig26sd80t5aG43wFDKWPWEtRDPsA6vCtAXMYnJKpWFS_s_-vZ0-XHB8D_IBkr2O28DR8WvpMwohKAnI36gdHtNMvG303EPgEftvUMziAWgNt0dS0j2NHUiQ1whHHaMUf6XV648bzc9URnhkC9g3ilQ8JGOsNwQqnbqvLmJRcPcZAf--QLPaLMLiRzwUYl785iJftSaHZ0VEIlLJK2e7yHakVhVR1FMqZZwGvgbH5p0XHCffGg7VB5snAbkjCIytwVCTfpL_tjZfrNQx0e11fYet2nxKLyEACmVcyVso77r70_VJS6smn2utDaZ-bRzgMNv2YrxfUYd-Pm5SmkgPlxdtREUOZ213oshaKN&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&pload=1005
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1976032&pid=_cb-1976032_1&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=b6tIoR5DB8p12IZqNUKtGqUYnlB5jKuzGqPQVdKGTSMu3L-gzlohL-Sljb0A8XbahHsbgxVUY5h7_x18ZBSuEQGSsh2ZR55t8FTVDF7rIcJ21Y0aJVlfZauB21ddeO3yFxm-fwxllZPL0exPdPboT-enn5lSebWB77sCSiPrIgtPmqZRUteoEkSBjVRRDZZxyOc5yHywUJ5IfWH-0P-EWq7Puke6WNCNZvZ5WVSGYuzxM7LB3B5_Y8bFyz7XCGVD9CZy-1LTiGUhuypTCYiVdAgPZ5huoxv-iQvj1JYsZoWKoakdI1Ljit1ttFLZEKJd135rFZhQeLAoYi2P5H4GOlYNqlVxWpwlAg0WtTFoKK9l0pyIWfHJKUtDLMmO8vYBWBTyvhbYpov6T-UpDCkruNCjW3QOJujS9gmIgIcJCCW5e1IT_8yC2VEYLhS7revRsIloOBYf5QRFL-jkxtzVCdlgTGMNqSI8fyzt8Fn-u5pcBcdann93k_arYXL5746f3atzm2Bf5pEnmblHas1AAj9BvQfPO0Bxm7PLN8apV-RiLPc-OfMPfLFcIMr8kt4hRZW3UM8gwrLshhsN0y8wzkltnR6odg-Sa9xHK2RBMS8-C62eFvSLBrxXOVZ-2wuILvqPSGf-o-8zAj3MRkqJ4zqoNzK6cnUa0BQqo3tirD2XtDYa_HL0sl-4dh456wV8QNoNDGRp4_HdcrcgUEUvJQvBMXzNundJ49ivmv5wTGkjRDqWNQNAk9vxOZbKSOAus4jgfM38knqRtCO0Ncftri_xsDNSG12_0CgXnS6ZALjeMwzutmnW7TPOpEqSBuhW8bvA2r_eG65YpZcEwghDvTAtf070cXgfn7Fa01qkpHVWT6c7oyoyMbb3UvT63qE1zvtipGyXwv5IdG3LxK4EeqPhCct2VPVQjDSpPWEfpNGTQ62m1oBvy7S2Ql2xSbsKgUdhBsKmQKbIZmLXPe4rQrGdb2jn7VIb5mAv6lChi_W6-28Cw1LGQwURQDy9hth7b3jmjOZrPzky1h6ZSLKwoirNteC-r76P3jUnQgGggOVODM_N3XmyEpOvXeH7n3tgwGZXeso6ikxWu5-chm0qZep0XU3dhUTdOwJX2NTkYCMfGBHo5eBBu8YXAdvKzRi0LdUQP00SxmhqUehPmd3PCGoXeeSQowWzCbMYXyLy1QfMVq8haxblR6jUlYxig26sd80t5aG43wFDKWPWEtRDPsA6vCtAXMYnJKpWFS_s_-vZ0-XHB8D_IBkr2O28DR8WvpMwohKAnI36gdHtNMvG303EPgEftvUMziAWgNt0dS0j2NHUiQ1whHHaMUf6XV648bzc9URnhkC9g3ilQ8JGOsNwQqnbqvLmJRcPcZAf--QLPaLMLiRzwUYl785iJftSaHZ0VEIlLJK2e7yHakVhVR1FMqZZwGvgbH5p0XHCffGg7VB5snAbkjCIytwVCTfpL_tjZfrNQx0e11fYet2nxKLyEACmVcyVso77r70_VJS6smn2utDaZ-bRzgMNv2YrxfUYd-Pm5SmkgPlxdtREUOZ213oshaKN&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&pload=1005 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311292200442f85aa66c84a2cb489d85ae8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACitnQAAAAAAAAAB; Path=/; Expires=Sat, 30 Dec 2023 03:00:03 GMT; Secure; SameSite=None
OACIBLOCK=ACitnQAAAABlZ%2Fqw; Path=/; Expires=Sat, 30 Dec 2023 03:00:03 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
hhbypdoecp.com/whob.gif?z=1976032&pid=_cb-1976032_1&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=b6tIoR5DB8p12IZqNUKtGqUYnlB5jKuzGqPQVdKGTSMu3L-gzlohL-Sljb0A8XbahHsbgxVUY5h7_x18ZBSuEQGSsh2ZR55t8FTVDF7rIcJ21Y0aJVlfZauB21ddeO3yFxm-fwxllZPL0exPdPboT-enn5lSebWB77sCSiPrIgtPmqZRUteoEkSBjVRRDZZxyOc5yHywUJ5IfWH-0P-EWq7Puke6WNCNZvZ5WVSGYuzxM7LB3B5_Y8bFyz7XCGVD9CZy-1LTiGUhuypTCYiVdAgPZ5huoxv-iQvj1JYsZoWKoakdI1Ljit1ttFLZEKJd135rFZhQeLAoYi2P5H4GOlYNqlVxWpwlAg0WtTFoKK9l0pyIWfHJKUtDLMmO8vYBWBTyvhbYpov6T-UpDCkruNCjW3QOJujS9gmIgIcJCCW5e1IT_8yC2VEYLhS7revRsIloOBYf5QRFL-jkxtzVCdlgTGMNqSI8fyzt8Fn-u5pcBcdann93k_arYXL5746f3atzm2Bf5pEnmblHas1AAj9BvQfPO0Bxm7PLN8apV-RiLPc-OfMPfLFcIMr8kt4hRZW3UM8gwrLshhsN0y8wzkltnR6odg-Sa9xHK2RBMS8-C62eFvSLBrxXOVZ-2wuILvqPSGf-o-8zAj3MRkqJ4zqoNzK6cnUa0BQqo3tirD2XtDYa_HL0sl-4dh456wV8QNoNDGRp4_HdcrcgUEUvJQvBMXzNundJ49ivmv5wTGkjRDqWNQNAk9vxOZbKSOAus4jgfM38knqRtCO0Ncftri_xsDNSG12_0CgXnS6ZALjeMwzutmnW7TPOpEqSBuhW8bvA2r_eG65YpZcEwghDvTAtf070cXgfn7Fa01qkpHVWT6c7oyoyMbb3UvT63qE1zvtipGyXwv5IdG3LxK4EeqPhCct2VPVQjDSpPWEfpNGTQ62m1oBvy7S2Ql2xSbsKgUdhBsKmQKbIZmLXPe4rQrGdb2jn7VIb5mAv6lChi_W6-28Cw1LGQwURQDy9hth7b3jmjOZrPzky1h6ZSLKwoirNteC-r76P3jUnQgGggOVODM_N3XmyEpOvXeH7n3tgwGZXeso6ikxWu5-chm0qZep0XU3dhUTdOwJX2NTkYCMfGBHo5eBBu8YXAdvKzRi0LdUQP00SxmhqUehPmd3PCGoXeeSQowWzCbMYXyLy1QfMVq8haxblR6jUlYxig26sd80t5aG43wFDKWPWEtRDPsA6vCtAXMYnJKpWFS_s_-vZ0-XHB8D_IBkr2O28DR8WvpMwohKAnI36gdHtNMvG303EPgEftvUMziAWgNt0dS0j2NHUiQ1whHHaMUf6XV648bzc9URnhkC9g3ilQ8JGOsNwQqnbqvLmJRcPcZAf--QLPaLMLiRzwUYl785iJftSaHZ0VEIlLJK2e7yHakVhVR1FMqZZwGvgbH5p0XHCffGg7VB5snAbkjCIytwVCTfpL_tjZfrNQx0e11fYet2nxKLyEACmVcyVso77r70_VJS6smn2utDaZ-bRzgMNv2YrxfUYd-Pm5SmkgPlxdtREUOZ213oshaKN&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&pload=1005
200 OK 43 B URL GET HTTP/2 hhbypdoecp.com/whob.gif?z=1976032&pid=_cb-1976032_1&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=b6tIoR5DB8p12IZqNUKtGqUYnlB5jKuzGqPQVdKGTSMu3L-gzlohL-Sljb0A8XbahHsbgxVUY5h7_x18ZBSuEQGSsh2ZR55t8FTVDF7rIcJ21Y0aJVlfZauB21ddeO3yFxm-fwxllZPL0exPdPboT-enn5lSebWB77sCSiPrIgtPmqZRUteoEkSBjVRRDZZxyOc5yHywUJ5IfWH-0P-EWq7Puke6WNCNZvZ5WVSGYuzxM7LB3B5_Y8bFyz7XCGVD9CZy-1LTiGUhuypTCYiVdAgPZ5huoxv-iQvj1JYsZoWKoakdI1Ljit1ttFLZEKJd135rFZhQeLAoYi2P5H4GOlYNqlVxWpwlAg0WtTFoKK9l0pyIWfHJKUtDLMmO8vYBWBTyvhbYpov6T-UpDCkruNCjW3QOJujS9gmIgIcJCCW5e1IT_8yC2VEYLhS7revRsIloOBYf5QRFL-jkxtzVCdlgTGMNqSI8fyzt8Fn-u5pcBcdann93k_arYXL5746f3atzm2Bf5pEnmblHas1AAj9BvQfPO0Bxm7PLN8apV-RiLPc-OfMPfLFcIMr8kt4hRZW3UM8gwrLshhsN0y8wzkltnR6odg-Sa9xHK2RBMS8-C62eFvSLBrxXOVZ-2wuILvqPSGf-o-8zAj3MRkqJ4zqoNzK6cnUa0BQqo3tirD2XtDYa_HL0sl-4dh456wV8QNoNDGRp4_HdcrcgUEUvJQvBMXzNundJ49ivmv5wTGkjRDqWNQNAk9vxOZbKSOAus4jgfM38knqRtCO0Ncftri_xsDNSG12_0CgXnS6ZALjeMwzutmnW7TPOpEqSBuhW8bvA2r_eG65YpZcEwghDvTAtf070cXgfn7Fa01qkpHVWT6c7oyoyMbb3UvT63qE1zvtipGyXwv5IdG3LxK4EeqPhCct2VPVQjDSpPWEfpNGTQ62m1oBvy7S2Ql2xSbsKgUdhBsKmQKbIZmLXPe4rQrGdb2jn7VIb5mAv6lChi_W6-28Cw1LGQwURQDy9hth7b3jmjOZrPzky1h6ZSLKwoirNteC-r76P3jUnQgGggOVODM_N3XmyEpOvXeH7n3tgwGZXeso6ikxWu5-chm0qZep0XU3dhUTdOwJX2NTkYCMfGBHo5eBBu8YXAdvKzRi0LdUQP00SxmhqUehPmd3PCGoXeeSQowWzCbMYXyLy1QfMVq8haxblR6jUlYxig26sd80t5aG43wFDKWPWEtRDPsA6vCtAXMYnJKpWFS_s_-vZ0-XHB8D_IBkr2O28DR8WvpMwohKAnI36gdHtNMvG303EPgEftvUMziAWgNt0dS0j2NHUiQ1whHHaMUf6XV648bzc9URnhkC9g3ilQ8JGOsNwQqnbqvLmJRcPcZAf--QLPaLMLiRzwUYl785iJftSaHZ0VEIlLJK2e7yHakVhVR1FMqZZwGvgbH5p0XHCffGg7VB5snAbkjCIytwVCTfpL_tjZfrNQx0e11fYet2nxKLyEACmVcyVso77r70_VJS6smn2utDaZ-bRzgMNv2YrxfUYd-Pm5SmkgPlxdtREUOZ213oshaKN&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&pload=1005
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1976032&pid=_cb-1976032_1&pb=8954800d252d23b0f37ddff42703f7471701320402&psp=b6tIoR5DB8p12IZqNUKtGqUYnlB5jKuzGqPQVdKGTSMu3L-gzlohL-Sljb0A8XbahHsbgxVUY5h7_x18ZBSuEQGSsh2ZR55t8FTVDF7rIcJ21Y0aJVlfZauB21ddeO3yFxm-fwxllZPL0exPdPboT-enn5lSebWB77sCSiPrIgtPmqZRUteoEkSBjVRRDZZxyOc5yHywUJ5IfWH-0P-EWq7Puke6WNCNZvZ5WVSGYuzxM7LB3B5_Y8bFyz7XCGVD9CZy-1LTiGUhuypTCYiVdAgPZ5huoxv-iQvj1JYsZoWKoakdI1Ljit1ttFLZEKJd135rFZhQeLAoYi2P5H4GOlYNqlVxWpwlAg0WtTFoKK9l0pyIWfHJKUtDLMmO8vYBWBTyvhbYpov6T-UpDCkruNCjW3QOJujS9gmIgIcJCCW5e1IT_8yC2VEYLhS7revRsIloOBYf5QRFL-jkxtzVCdlgTGMNqSI8fyzt8Fn-u5pcBcdann93k_arYXL5746f3atzm2Bf5pEnmblHas1AAj9BvQfPO0Bxm7PLN8apV-RiLPc-OfMPfLFcIMr8kt4hRZW3UM8gwrLshhsN0y8wzkltnR6odg-Sa9xHK2RBMS8-C62eFvSLBrxXOVZ-2wuILvqPSGf-o-8zAj3MRkqJ4zqoNzK6cnUa0BQqo3tirD2XtDYa_HL0sl-4dh456wV8QNoNDGRp4_HdcrcgUEUvJQvBMXzNundJ49ivmv5wTGkjRDqWNQNAk9vxOZbKSOAus4jgfM38knqRtCO0Ncftri_xsDNSG12_0CgXnS6ZALjeMwzutmnW7TPOpEqSBuhW8bvA2r_eG65YpZcEwghDvTAtf070cXgfn7Fa01qkpHVWT6c7oyoyMbb3UvT63qE1zvtipGyXwv5IdG3LxK4EeqPhCct2VPVQjDSpPWEfpNGTQ62m1oBvy7S2Ql2xSbsKgUdhBsKmQKbIZmLXPe4rQrGdb2jn7VIb5mAv6lChi_W6-28Cw1LGQwURQDy9hth7b3jmjOZrPzky1h6ZSLKwoirNteC-r76P3jUnQgGggOVODM_N3XmyEpOvXeH7n3tgwGZXeso6ikxWu5-chm0qZep0XU3dhUTdOwJX2NTkYCMfGBHo5eBBu8YXAdvKzRi0LdUQP00SxmhqUehPmd3PCGoXeeSQowWzCbMYXyLy1QfMVq8haxblR6jUlYxig26sd80t5aG43wFDKWPWEtRDPsA6vCtAXMYnJKpWFS_s_-vZ0-XHB8D_IBkr2O28DR8WvpMwohKAnI36gdHtNMvG303EPgEftvUMziAWgNt0dS0j2NHUiQ1whHHaMUf6XV648bzc9URnhkC9g3ilQ8JGOsNwQqnbqvLmJRcPcZAf--QLPaLMLiRzwUYl785iJftSaHZ0VEIlLJK2e7yHakVhVR1FMqZZwGvgbH5p0XHCffGg7VB5snAbkjCIytwVCTfpL_tjZfrNQx0e11fYet2nxKLyEACmVcyVso77r70_VJS6smn2utDaZ-bRzgMNv2YrxfUYd-Pm5SmkgPlxdtREUOZ213oshaKN&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&pload=1005 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311292200442f85aa66c84a2cb489d85ae8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
semicolonrichsieve.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3o0gCKLixcPCHDysaCbV85OZdg%2Fiuq4EYxJ2V3KU%2ButJmequpqp7epJTcGHZk443j51vkg26i7h4FmTiRRYEx4PksLl7FvawB5GZDIw%2B6H7v1fegvu97de%2BwOCcUBTvb%2BsTua2PYSrtOa1e3dSpt6Wsbd2ohrdNrtW2drrau1QbTn%2Bu%2FG9J2nb5V%2B0iJXbvSoCGlIQ1rN7VTsR2szFDo7FEU1iNabzXqYbuFgft%2F74sAngWQ%2FXPyGrScvLDz62NoMUaa%2FHBD%2Bd3cZu98mBSG5dahL08%2BTXdTW6ZIFmXsAsTpyXwa1k8I%2BeYSbHoyVwDbP5oqANcTEvwZgqcnc5rg%2FeMLptxApeDyJZT9MZQZQ7MxhL0LLX8ngJDY2ESaPNiwrmR7FyibohOy9Oxv6HJClp6%2BjjT5%2FrrRg9pta4pc29RjEFfQgzF0b4ysOEW%2BH0CXpxD5F9DyN7LybB1pcrTpjYWWZ29yLuNOtMqWZdiSy61mly1HUVcsy%2B5qRBsd0e7SaGaR1mPoeAyjhmA%2BQDH9dIAiDlBkARJ5VmPtKKa0E%2FO42ey2hBDNphDt7qpsy2arG1MUYqphiDwbQpghhDtA5g6wq4dwxc%2FwOxW8DOBzgr6sUCqC0hOUjKDUBGVOUParY2l8w1cPpPEFD%2Be5Mc%2FNamTz3iE7tnlPpeQwOyevTo0L2l9dwa46q8Vhi%2FGQhTJqChZ1BBVUso5oSkp5Y1XE8LqC9pdmMvf1hLz99B9kekKWnm%2BDs1N4cwqhXwErroCVo06Dgu2MWl2K%2FfRhzDKbalEXNoG0FbJ8CflecGjOyRuz%2Fa0ttaDEk%2Ff%2BaM4CwlXIXIXP9S8EPXN%2FdMuW5OiWLT15vJnlOtH7bLrb2znL1eXvPlZ7pXVy7YYffvu%2BmALT8tEd5fN1lkqd9jx5eF1LqdxN64QiP635bcW3Cr9zvXBpka1vfXBzLcmc8l7bdAymJ4R8%2BReEnpCXX%2Fxs9m6v3tuGdmO4okJSPCHzgLZjiOwAPlvw95bAmcUMzwKURTVyDb44NJrAqEXPeAX%2Fn54v6kN%2FHz0XgOV3kSYV%2Bq5C31RgZghfXB7lmVtczk0w4sYFR9w48%2FWFuV6f1VQ7prGiDcXjiMcdRmUUtyLOolB1eJuFyP1E9Z7%2F%2BC8AAAD%2F%2FwEAAP%2F%2FwY50zY8EAAA%3D
200 OK 7 B URL GET HTTP/1.1 semicolonrichsieve.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3o0gCKLixcPCHDysaCbV85OZdg%2Fiuq4EYxJ2V3KU%2ButJmequpqp7epJTcGHZk443j51vkg26i7h4FmTiRRYEx4PksLl7FvawB5GZDIw%2B6H7v1fegvu97de%2BwOCcUBTvb%2BsTua2PYSrtOa1e3dSpt6Wsbd2ohrdNrtW2drrau1QbTn%2Bu%2FG9J2nb5V%2B0iJXbvSoCGlIQ1rN7VTsR2szFDo7FEU1iNabzXqYbuFgft%2F74sAngWQ%2FXPyGrScvLDz62NoMUaa%2FHBD%2Bd3cZu98mBSG5dahL08%2BTXdTW6ZIFmXsAsTpyXwa1k8I%2BeYSbHoyVwDbP5oqANcTEvwZgqcnc5rg%2FeMLptxApeDyJZT9MZQZQ7MxhL0LLX8ngJDY2ESaPNiwrmR7FyibohOy9Oxv6HJClp6%2BjjT5%2FrrRg9pta4pc29RjEFfQgzF0b4ysOEW%2BH0CXpxD5F9DyN7LybB1pcrTpjYWWZ29yLuNOtMqWZdiSy61mly1HUVcsy%2B5qRBsd0e7SaGaR1mPoeAyjhmA%2BQDH9dIAiDlBkARJ5VmPtKKa0E%2FO42ey2hBDNphDt7qpsy2arG1MUYqphiDwbQpghhDtA5g6wq4dwxc%2FwOxW8DOBzgr6sUCqC0hOUjKDUBGVOUParY2l8w1cPpPEFD%2Be5Mc%2FNamTz3iE7tnlPpeQwOyevTo0L2l9dwa46q8Vhi%2FGQhTJqChZ1BBVUso5oSkp5Y1XE8LqC9pdmMvf1hLz99B9kekKWnm%2BDs1N4cwqhXwErroCVo06Dgu2MWl2K%2FfRhzDKbalEXNoG0FbJ8CflecGjOyRuz%2Fa0ttaDEk%2Ff%2BaM4CwlXIXIXP9S8EPXN%2FdMuW5OiWLT15vJnlOtH7bLrb2znL1eXvPlZ7pXVy7YYffvu%2BmALT8tEd5fN1lkqd9jx5eF1LqdxN64QiP635bcW3Cr9zvXBpka1vfXBzLcmc8l7bdAymJ4R8%2BReEnpCXX%2Fxs9m6v3tuGdmO4okJSPCHzgLZjiOwAPlvw95bAmcUMzwKURTVyDb44NJrAqEXPeAX%2Fn54v6kN%2FHz0XgOV3kSYV%2Bq5C31RgZghfXB7lmVtczk0w4sYFR9w48%2FWFuV6f1VQ7prGiDcXjiMcdRmUUtyLOolB1eJuFyP1E9Z7%2F%2BC8AAAD%2F%2FwEAAP%2F%2FwY50zY8EAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectsemicolonrichsieve.com
FingerprintE8:A4:25:54:56:69:72:E0:37:17:3E:3A:3C:A2:E0:DC:DE:7C:DE:92
ValidityTue, 28 Nov 2023 08:18:19 GMT - Mon, 26 Feb 2024 08:18:18 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3o0gCKLixcPCHDysaCbV85OZdg%2Fiuq4EYxJ2V3KU%2ButJmequpqp7epJTcGHZk443j51vkg26i7h4FmTiRRYEx4PksLl7FvawB5GZDIw%2B6H7v1fegvu97de%2BwOCcUBTvb%2BsTua2PYSrtOa1e3dSpt6Wsbd2ohrdNrtW2drrau1QbTn%2Bu%2FG9J2nb5V%2B0iJXbvSoCGlIQ1rN7VTsR2szFDo7FEU1iNabzXqYbuFgft%2F74sAngWQ%2FXPyGrScvLDz62NoMUaa%2FHBD%2Bd3cZu98mBSG5dahL08%2BTXdTW6ZIFmXsAsTpyXwa1k8I%2BeYSbHoyVwDbP5oqANcTEvwZgqcnc5rg%2FeMLptxApeDyJZT9MZQZQ7MxhL0LLX8ngJDY2ESaPNiwrmR7FyibohOy9Oxv6HJClp6%2BjjT5%2FrrRg9pta4pc29RjEFfQgzF0b4ysOEW%2BH0CXpxD5F9DyN7LybB1pcrTpjYWWZ29yLuNOtMqWZdiSy61mly1HUVcsy%2B5qRBsd0e7SaGaR1mPoeAyjhmA%2BQDH9dIAiDlBkARJ5VmPtKKa0E%2FO42ey2hBDNphDt7qpsy2arG1MUYqphiDwbQpghhDtA5g6wq4dwxc%2FwOxW8DOBzgr6sUCqC0hOUjKDUBGVOUParY2l8w1cPpPEFD%2Be5Mc%2FNamTz3iE7tnlPpeQwOyevTo0L2l9dwa46q8Vhi%2FGQhTJqChZ1BBVUso5oSkp5Y1XE8LqC9pdmMvf1hLz99B9kekKWnm%2BDs1N4cwqhXwErroCVo06Dgu2MWl2K%2FfRhzDKbalEXNoG0FbJ8CflecGjOyRuz%2Fa0ttaDEk%2Ff%2BaM4CwlXIXIXP9S8EPXN%2FdMuW5OiWLT15vJnlOtH7bLrb2znL1eXvPlZ7pXVy7YYffvu%2BmALT8tEd5fN1lkqd9jx5eF1LqdxN64QiP635bcW3Cr9zvXBpka1vfXBzLcmc8l7bdAymJ4R8%2BReEnpCXX%2Fxs9m6v3tuGdmO4okJSPCHzgLZjiOwAPlvw95bAmcUMzwKURTVyDb44NJrAqEXPeAX%2Fn54v6kN%2FHz0XgOV3kSYV%2Bq5C31RgZghfXB7lmVtczk0w4sYFR9w48%2FWFuV6f1VQ7prGiDcXjiMcdRmUUtyLOolB1eJuFyP1E9Z7%2F%2BC8AAAD%2F%2FwEAAP%2F%2FwY50zY8EAAA%3D HTTP/1.1
Host: semicolonrichsieve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Cookie: u_pl=20287261; uid_id2=bbdf796a-d14d-438a-998c-d869027c5809:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f839c7db5a8d2f95aa6a2cf3de433a73
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/arrow.png
200 OK 2.3 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/arrow.png
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 52 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 41109abf05740798aa2e66a3e938c8de
706e93332bf4819e9f4059765340cf97981bd1fe
2fbf669490df5b04badb9886ca664dbd9a0d66e0ecdc951b822feb6089fac0ea
GET /sb/ssp/notifications/text_bubble/2/img/arrow.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: image/png
content-length: 2332
last-modified: Tue, 12 Jul 2022 10:56:23 GMT
etag: "62cd5357-91c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2571080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LZzThZcG4AXZLbFF%2B81wjNb49giH175O%2F2FT5MjoytswCNb7w7tbbY2bqJhSBJQ1CEkovUf709KgUhNTAj4Gwo1a6%2Fm566e8Z25r7cYr6LH9VCi7XgPYdorx2QxMmqPg2bIDuBJyoVCm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd685abe1889e-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/close.png
200 OK 6.0 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/close.png
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/ssp/notifications/text_bubble/2/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: image/png
content-length: 5982
last-modified: Tue, 12 Jul 2022 10:56:24 GMT
etag: "62cd5358-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1732763
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dBC5O5BAoJB%2Ff%2BxCcDY8kzFWkn%2FytSYalaGDPanp1OGd%2FYz2adiBKUhhpwy5C5GhYSPYp%2BC7aEl9iywnhZPT8pxi1eX1x%2BM2835rKexPl1eTGNNTCx07NHHL2rurnczL6FN%2F0oP1Y7Ae"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd685abde889e-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/number.png
200 OK 1.1 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/number.png
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e4414e85c588bf7db195e49c02ab2bb
09254e79b255f1b2dfe45adbbe44583a4b433782
0b977ec6e7cf5d35df03cd3a8041f5f523f5d4059ac67c152c0a7b613e20b762
GET /sb/ssp/notifications/text_bubble/2/img/number.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: image/png
content-length: 1138
last-modified: Tue, 12 Jul 2022 10:56:23 GMT
etag: "62cd5357-472"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 163374
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o8mleiFCHdxnx8zJlgkwlktGVQTTBXgPlxUzdAFGLLcDOJ6Mw7Hux%2BDoSbG5aps4BoDhJdcWLu0nn5kV%2Bk9qUsz1oAJHEBbcigw5v9lOXTNpVJgOhvcZ6TCfdRk4LAFyr4pPLL9FbSgj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd685abe4889e-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/css/animate.css
200 OK 5.3 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/css/animate.css
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/notifications/text_bubble/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: text/css
last-modified: Tue, 12 Jul 2022 10:56:21 GMT
etag: W/"62cd5355-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1725130
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IxTUM49YdeSbmXEhmJiY5hbg1byaMdcmXyFlGVZWqLrQBfvtBs0MV%2F4uf4TNwdb8jIBPXPKGesaftW9OOYx8IhtbRGATm81LwloZlM1HkvD95HBPd0pBU1Y%2Frp87bsI%2FG8cvaP8D9bcp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6856b91889e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 1.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 3dcb0c190acd4aac59941c38f19702ae
b4e86c8f52a1fef5e288a56425f0d488df474982
f4cd4786404b2273ffff7005adb029a160528119ce2dcf834c9c7483c3c89ad0
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 03:00:04 GMT
date: Thu, 30 Nov 2023 03:00:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
faponic.com/js/libs/perfect-scrollbar.min.js
200 OK 91 kB URL GET HTTP/3 faponic.com/js/libs/perfect-scrollbar.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (25515), with CRLF line terminators
Hash 6d9ca9faf779b1643b1d3cb7bd1876b6
cc8996acdad3a92ea375d3c98d7a838630525479
e76d2581ff4f8c29c9d1a6dc8938b2f4856c491fed005eb9776973de6b4fb169
GET /js/libs/perfect-scrollbar.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-63cf"
expires: Thu, 07 Dec 2023 01:51:04 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 4137
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aKgaddd57GTBcSXLLkOkWkMXLjuJGZuShl8mCF0Okam8vh%2BxUgf9VgHYizIPyEnJjyQ17kNhDcdpeyQeoIdBj3q88x2a4YAOKvy192qoKcC%2FQcr6H%2Fa8PC4mCGVT8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c69d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:57:34 GMT
expires: Fri, 22 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 597750
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/css/style.css
200 OK 2.2 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/css/style.css
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash b05c749cc8b7745331e527f4e91ec73b
640adb0c1d6bb6e008d3c2940c68212a4053578e
e3efdb924dd25d678d2fc85bdc0a0523fc413abb55c8b25edfb40dea9b121d11
GET /sb/ssp/notifications/text_bubble/2/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: text/css
last-modified: Tue, 12 Jul 2022 11:09:04 GMT
etag: W/"62cd5650-23e9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2422854
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XyHAXZ%2BKs4SmroTFVNfnGKtsnWSS%2BGZ8%2F2hAkDwlQDnLu1cHeIYM5XiHJiuq8SUohUdO4YxVaSIXs3XqscIrEck2BIsYdAc3m8rJEiRytLsx6rGu0s9rM10Bo6oIIif74Eg8dQmejg1O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6856b8f889e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
semicolonrichsieve.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 semicolonrichsieve.com/pixel/sbs?c=1
IP
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectsemicolonrichsieve.com
FingerprintE8:A4:25:54:56:69:72:E0:37:17:3E:3A:3C:A2:E0:DC:DE:7C:DE:92
ValidityTue, 28 Nov 2023 08:18:19 GMT - Mon, 26 Feb 2024 08:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: semicolonrichsieve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Cookie: u_pl=20287261; uid_id2=bbdf796a-d14d-438a-998c-d869027c5809:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 03:00:04 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
hhbypdoecp.com/get/1976032?zoneid=1976032&pid=_cb-1976032_1&jp=_clwnolmmvm90uu7ba6yvh1&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&freq=0
200 OK 7.8 kB URL GET HTTP/2 hhbypdoecp.com/get/1976032?zoneid=1976032&pid=_cb-1976032_1&jp=_clwnolmmvm90uu7ba6yvh1&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&freq=0
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (7914), with no line terminators
Hash efc1217c5e7485baf91258c1993d4b52
4e2bf6b4c7099fbd34981eb16e3bc06174a4f3f8
68b1cdff4febc6e69909229732403a975e7ce99ec15046e026cc647697a28b29
GET /get/1976032?zoneid=1976032&pid=_cb-1976032_1&jp=_clwnolmmvm90uu7ba6yvh1&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4052146936339968&eclog=0&sp=1&im=1&freq=0 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
UID=2311292200442f85aa66c84a2cb489d85ae8; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
fvcwqkkqmuv.com/aas/r45d/vki/1976015/030c131a.js
200 OK 90 kB URL GET HTTP/2 fvcwqkkqmuv.com/aas/r45d/vki/1976015/030c131a.js
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (65106)
Hash 8e33885de2ad2134067d773613b846eb
02a7488331d6ec646db4b952575aeac5000bb6d5
8507f060d6e1e9e6f7e6ecd92c8a2a72a390df5db94f7471724b37a7438ee01c
GET /aas/r45d/vki/1976015/030c131a.js HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 11:34:35 GMT
vary: Accept-Encoding
etag: W/"6565d04b-15e20"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
faponic.com/img/assets/favicon/apple-touch-icon.png
200 OK 7.4 kB URL GET HTTP/3 faponic.com/img/assets/favicon/apple-touch-icon.png
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash 926d6eb1c3897ba280a91084cdd3c730
393f1acb3400eb6bbe83aeca99924cad2063b14a
979ecec5966211de710d757a4989e95dc4ec77d2d0d91ed848578c125367f8f5
GET /img/assets/favicon/apple-touch-icon.png HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/png
content-length: 7446
last-modified: Thu, 14 Apr 2022 11:23:40 GMT
etag: "6258043c-1d16"
expires: Sat, 02 Dec 2023 04:51:00 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 425342
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eBrVr4KyimCqFUwWlbv2uu6tfcyG8LagHM5I3BcQ5Vl3woTkjo1wAFkSBjmUZ3piOpB2aqZFoc%2Bm%2FTaSbrvWxizQGqT0WLkfd9yRe0%2Bwwaw29pMA4IgFD4ZW6AFdHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67d9ec1d97b-HEL
alt-svc: h3=":443"; ma=86400
www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
200 OK 2.3 kB URL GET HTTP/1.1 www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62
IP
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectscfsdvc.com
Fingerprint15:AC:50:9E:63:8B:D2:6B:AA:A9:5A:0A:AE:9E:AB:1D:DC:D6:44:C3
ValidityMon, 25 Sep 2023 18:47:38 GMT - Sun, 24 Dec 2023 18:47:37 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (2328), with no line terminators
Hash 62b58b9d49436312a4425dc059651656
7f98200ce24ba27aa31aea5bebfefa5c0ef604bf
841cc6ba24f73fb94374364e392b48d8d954d41eada6b7a3436b921962da23b6
GET /en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=23112922001ddcc31f510d4bf7b75f58ec62 HTTP/1.1
Host: www.scfsdvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.15.7
Date: Thu, 30 Nov 2023 03:00:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: Thu, 31 Dec 1998 11:59:59 GMT
X-Robots-Tag: none
P3P: CP="NOI DSP COR NID"
Set-Cookie: AVPUID=d26b0366fb7e3a1d0d610beca93a56bf; Expires=Fri, 29-Nov-2024 03:00:03 GMT; Path=/; Secure; HttpOnly; SameSite=None
DNT: 1
Content-Encoding: gzip
200 OK 38 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9423), with CRLF, LF line terminators
Hash 5d827227b8e2e8642c950439e964dd69
504775396703316ff71fcc44595c2d3def6fa1aa
bb75972021fcc810ab743750297bcd8700fd7fef51808f20600bdc836b413719
GET /search/ HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oQRJEa9utsvKvenl8Jr8Pc6lyzTUnkkj7ZFjG9NoHYiMlEncblJ9gZFf1t8vvZkqkOm8L79w8g7I6QcMu8kPrLuHG%2BGg%2FpKDK3nAYXCldXSh6VMc6hfkJqp1TlgFMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82dfd67508644c7f-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
faponic.com/js/libs/jquery.mousewheel.min.js
200 OK 2.7 kB URL GET HTTP/3 faponic.com/js/libs/jquery.mousewheel.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (2799), with no line terminators
Hash 410a52ec82bb9b430621965dfa4d2e6e
7828ab7fa20609969c371e63db6dd99a1372d18f
b97f0802a71c0be7ddfa2cb15c74164eed6b3c24aa704c4818cbe908c3c8dcb4
GET /js/libs/jquery.mousewheel.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-a91"
expires: Wed, 06 Dec 2023 02:14:32 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 89129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZUj2qljTKLUY77XE9VrSbpU%2BnhUf%2Fv2O0QXIAnIw3GXt8ydyxjwuNHxa0aG3WHuIAkoji%2FmrAQBuLGDa9SCZiwMubYOJPcUgZsolbbQGy3rl3PEdvl7YuTuviFHa1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c65d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/data/a/-/a-romanova/1000/a-romanova_0009.jpg
200 OK 17 kB URL GET HTTP/3 faponic.com/data/a/-/a-romanova/1000/a-romanova_0009.jpg
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 9038f30e7d8e7107897a8f19290104c8
d20141f7564ff206268d18cc32b87e450a00e764
a9b221e9678ed738436b06be121ee8af4fd360ea4ccd969c637bcbaf17f98149
GET /data/a/-/a-romanova/1000/a-romanova_0009.jpg HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/jpeg
content-length: 16805
last-modified: Mon, 17 Apr 2023 08:31:17 GMT
etag: "643d03d5-41a5"
expires: Thu, 07 Dec 2023 03:00:02 GMT
cache-control: max-age=604800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5sRMXtns7KZJwGP5UbvJytOPdkcw34mVAmfo9BbltSbism3Zt%2FxD7pHHzbXUW%2FH0wzDPoFZneLqD0Mn%2F5s5V%2FUapVAENMGSgHtYAdCxAqdfb3D2OHJlVuXPUyxvaYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67b6bfdd97b-HEL
alt-svc: h3=":443"; ma=86400
hhbypdoecp.com/lv/esnk/1976032/code.js?pid=_cb-1976032_2
200 OK 103 kB URL GET HTTP/2 hhbypdoecp.com/lv/esnk/1976032/code.js?pid=_cb-1976032_2
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (65107)
Size 103 kB (103010 bytes)
Hash 527eed0159026839879b014c7f79ce6c
d3d189dfb9998f44416ef326741c0bcae5860612
ff72e52d283326fb2cb7c2606e0c7c1fa2a3f5836f31c97eb384457fa8ed4e21
GET /lv/esnk/1976032/code.js?pid=_cb-1976032_2 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 11:34:35 GMT
vary: Accept-Encoding
etag: W/"6565d04b-1929a"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
fvcwqkkqmuv.com/get/1976015?zoneid=1976015&jp=_clarxq2jt44mzj1evhqs0e&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615096889686016&eclog=0&sp=1&im=1
200 OK 3.4 kB URL GET HTTP/2 fvcwqkkqmuv.com/get/1976015?zoneid=1976015&jp=_clarxq2jt44mzj1evhqs0e&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615096889686016&eclog=0&sp=1&im=1
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
FingerprintF4:CF:5F:33:5D:62:A5:49:C0:ED:F4:A2:07:7B:6A:FC:5A:C8:EE:2D
ValiditySat, 28 Oct 2023 11:35:09 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (3714), with no line terminators
Hash 8862d1273355c3832f73357307eaf44f
1056fc26f47144a7b0159aef2730b9135278320c
2e4a274b7fe6f68a6c90f350c5c917f0f776e0ec97aa0a5097fe50b2c07f47ba
GET /get/1976015?zoneid=1976015&jp=_clarxq2jt44mzj1evhqs0e&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=4615096889686016&eclog=0&sp=1&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
UID=231129220037fd08e6f1a846e087d6e668f2; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
faponic.com/img/assets/favicon/favicon-16x16.png
200 OK 863 B URL GET HTTP/3 faponic.com/img/assets/favicon/favicon-16x16.png
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash c729b796c74d11d4e5f9eac935a87cd7
59956444743f22bfc48f2bbb6b975f8a6063313f
27509f9944f4640ec78fb92e380222aa418534d7c1c3554df8afca3f77cfe85e
GET /img/assets/favicon/favicon-16x16.png HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/png
content-length: 863
last-modified: Thu, 14 Apr 2022 11:23:41 GMT
etag: "6258043d-35f"
expires: Wed, 06 Dec 2023 04:44:28 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 80134
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GgB6BGeSYdx4vJVxgHQSlKkt%2Fa4ZKkxfDvwVZbMnNfIS6AuKdlUFHpclSsnd3uPAbTFrE5%2BEKBpWWGag2iFmoXfRzUws6DSDhtVJDKqTlvCtMFuv53%2FSWE8dSC3wbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67d9ec3d97b-HEL
alt-svc: h3=":443"; ma=86400
v.mbvlmx.com/impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90542;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&cost=2311292200fc88f9cd0eac47b69ca720493c&Bnr=008530G&FileID=471648
204 No Content 0 B URL GET HTTP/2 v.mbvlmx.com/impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90542;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&cost=2311292200fc88f9cd0eac47b69ca720493c&Bnr=008530G&FileID=471648
IP
Requested by https://www.scfsdvc.com/en/us/banner/html/zone?zid=14922&custom1=CDU_999531824_RCPM_BNR_MIX&custom2=141887&custom3=TS263-999531824&custom4=straight&custom5=BNR&custom6=RCPM&custom7=CDU&custom8=v.mbvlmx.com&custom9=3bc069f6-63d3-4acd-9e17-c7494347a674&custom10=2311292200fc88f9cd0eac47b69ca720493c
Certificate IssuerLet's Encrypt
Subjectv.mbvlmx.com
Fingerprint20:90:D4:87:5F:04:73:2C:6B:79:59:48:05:21:79:4F:40:3A:75:78
ValidityTue, 31 Oct 2023 06:49:12 GMT - Mon, 29 Jan 2024 06:49:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /impression/3bc069f6-63d3-4acd-9e17-c7494347a674?subID1=CDU_999531824_RCPM_BNR_MIX&affiliateID=141887&source=TS263-999531824&subID2=ADV14922_34241_90542;straight&Location_Alias=BNR&Pub=RCPM&Target=CDU&cost=2311292200fc88f9cd0eac47b69ca720493c&Bnr=008530G&FileID=471648 HTTP/1.1
Host: v.mbvlmx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.scfsdvc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Thu, 30 Nov 2023 03:00:03 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: 3bc069f6-63d3-4acd-9e17-c7494347a674-osz-v4=myNIv_mNeMK2uoEjgWfpPKv7tlkFvG0trkYKgDUeSMoneRmZIvaAZHHXT1_wxGFw9JpB2z_BbTLqVBS_5jBvxb8uGzwlG97vV3tU5i9pfeVV7n2VpWhwXXrcPLV5Hf-w1tG3wXDw5c4-iDdRd7KprRqvO2jHuzbki8651huWuwAHMXDuXidplRaQHD3IdklbTfXq7v2iw7oZg4ER9CfK-8BwzK_pjsnp1rYW7eKtgz2scPAuv2wlPbVP2CdY7td3MHaiCpWqCgNP5oJvAK9xeqXtPPB-cEzqOCQrEcBttcvF-gA6202w3G8rQx24rLTVrPfVIN9pgYnxPA6fSpX330-msv3ZfBFhL0YbNAjs2g8FA2HYVZsgSx4g74Q3HmciJLfnE5YegSDWbhmb_PdAYsg_XlEWwu_p4HQYUmlIRl_PQGbPc3_yGIHzyVImTfr9EaJmDjMh5mPLX-6FqHKd-HJ7FrDlS2nLuoiQzHeDTYCgsbWGbxbV8g2j5-B-DZGHszBzTy5q0yVcuKJ2wFCvpDTIh_77d_YHwDfpZuJ4eI0Amj0nQXSExM9njwUlgmhSJcJ1ApNG3AABsZvvcOGpvB2qck_aqAyvgrENsRlvRZywD5eNtmN01WQIkhpxWTWLS6_LAUfLI_aw79xVqn7uCcMuNRo75rvGpj9MktAZDCY7MPCkkmCUTJrPFfEJDQoywdeimldEa5oc_met5v2RapCmgJ15kCyTOJyiKQ_4vMBBl6Z502mLxjv6IpBn-NE6p4wGe-OyU7gFw00vYQwm6RzBoUrKm_MPyt0BoefSOeqgEvtT2jw9Su80JEsg_CJIwLyXJnZmTl2-ngI2X_KSlQ; Domain=v.mbvlmx.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
faponic.com/data/l/o/lorenamackenziefree/1000/lorenamackenziefree_0011.jpg
200 OK 18 kB URL GET HTTP/3 faponic.com/data/l/o/lorenamackenziefree/1000/lorenamackenziefree_0011.jpg
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 312f68a60108a6c7d5b0bee6815612b2
4ad4f48fb3398829666379939de7e769a7a83ebe
7e26e0272828b4959f68876525b8ad3630dac386ca251748132fde35e1ccf073
GET /data/l/o/lorenamackenziefree/1000/lorenamackenziefree_0011.jpg HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/jpeg
content-length: 17933
last-modified: Sun, 23 Apr 2023 09:36:06 GMT
etag: "6444fc06-460d"
expires: Wed, 06 Dec 2023 04:54:51 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 79511
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QoHwi6hBSTUdQTUzP79dk6pSXHWIzejlX32A5Dke4BsgstEQewby%2FFsVxTtJhs3RJ5dKSeGAANq%2Fe40gGU7EZg0qwZmVPv6dCB0F878eQv7MmVp6M4jFbNSLXoOA%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67b7c02d97b-HEL
alt-svc: h3=":443"; ma=86400
hhbypdoecp.com/get/1976032?zoneid=1976032&pid=_cb-1976032_2&jp=_clgwfvfre6gfekjvplejm7&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&freq=0
200 OK 7.8 kB URL GET HTTP/2 hhbypdoecp.com/get/1976032?zoneid=1976032&pid=_cb-1976032_2&jp=_clgwfvfre6gfekjvplejm7&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&freq=0
IP
Requested by https://faponic.com/search/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint3F:C5:7C:D2:8E:0B:18:70:FD:83:40:5E:80:7A:95:EB:1B:19:7E:B4
ValiditySat, 28 Oct 2023 12:17:01 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (7914), with no line terminators
Hash 3196a369dcab15a286aa7f771f6f3e34
61466a17f8014c0cc8cf7ca637cd91cfbfde4430
e6f6ce8538c8375fc417e370f428f2fbbc61ee0d6ec7b71356be437ae0f1874f
GET /get/1976032?zoneid=1976032&pid=_cb-1976032_2&jp=_clgwfvfre6gfekjvplejm7&nojs=0&abvar=0&febuild=1.0.179&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2081822099308544&eclog=0&sp=1&im=1&freq=0 HTTP/1.1
Host: hhbypdoecp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
UID=2311292200ddc18d1fd43447d9865febafa7; Path=/; Expires=Thu, 02 Jan 2025 03:00:02 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
semicolonrichsieve.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRSt3o0gCKLixcPCHDysaCbV0z2ZafcgrutKMCZhdyVHqa7qnpSprmqquqcnOQUXlj3pePPYeZNs0F3ExbMgEy%2ByIDgeJIfN3bOwhz2IzGRg9EP3%2F7%2Feh3rv%2Fbp3WJ4TipKdbX1i9qVSbKXdpI2r21ILU7nGxp2GT5v0WmNb6tXwWmMw%2Fdn%2Buz5tN%2BlbjY8SvmtWWtSn1Kd%2B46a0SWoGKzMUMn8U%2Bc2INsNW02%2BHGNj%2F96704JgH0T8nr0GKyQs7vz6G5GPo7IcbidstTP7Oh1mpWGEs%2BuLkU72rTaWRLcrUekj1yXwaxk0I%2BeYSjD6ZK4DpH00VIJYT4v3pI9Ync5qI%2B8cXTGOFRCMWL6Hqj5GoMSQbg5u7kOJ3AnCBjU3o7MGGsRXbu0DZFJ2QpWd%2FQ1YTsvT0dejs%2B%2BtKDhq3jSoLabTDIK0hB2PI3hh5eYpi34OsTsGLLyDFb2Tl2Tp0drTplIEUZ2%2FGsUg70SpbFn4olsOgy5ajqMuXRXc1oq0Ob3dpNLNIyjFkOoZKhmDOQzn9pIcy9VDmHjJx1mDtKKW0k8ZpEHRDznkQcN7uroq2CMJuSlHyqYYhinwIrobg9gC5PcCuHMKWP8Pt1HDCgysI%2BqJGlRBUjqBiBJUkqAqCql8fC%2BVarn4glCtjf55b8xzUI1P0DtmxKXqJJof5OXl1apzX%2FuoKdpOzRuqHLPaZL6KAs6jDKaeCdXggKI1bqzyFkzWkuzSTuS8n5O2n%2FyCXE7L0fBsxO4VTp%2BDyFbDyClg16rQo2M4o7FLs64cpy42WvMlNBmFq5MUSij3vUJ2TN2b7W1sKkfAn7%2F0RzALc1shtjc%2FlLwQ9dX90y1Tk6JapHHm8mRcyk%2FtsutvbBSuSy999nOxVxoq1G2747ft8CkzLR3cSV6wzLaTuOfLwuhQisTeN5Qn5ac1tJ%2FFW6Xaul1aX%2BfrWBzfXstwmzkmjx2ByQsiXf4HLCXn5xc9m7%2FbqvW1IO4Yta2TlEzIPSDMGzw%2Fg8gV%2FZwisWszEuYeqrEe2FS8OlSRQyaJncQ33nz5e1IfuPnrWAyvuQmc1%2BrZGX9VgaghXXh4VuV1cHitvFCvrHcXKqq8vzHXyrNH2w6QbdztciDjhwu%2B0gm5AaUuIsBMlfoTCTZLe8x%2F%2FBQAA%2F%2F8BAAD%2F%2F9WG%2BiuPBAAA
200 OK 0 B URL GET HTTP/1.1 semicolonrichsieve.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRSt3o0gCKLixcPCHDysaCbV0z2ZafcgrutKMCZhdyVHqa7qnpSprmqquqcnOQUXlj3pePPYeZNs0F3ExbMgEy%2ByIDgeJIfN3bOwhz2IzGRg9EP3%2F7%2Feh3rv%2Fbp3WJ4TipKdbX1i9qVSbKXdpI2r21ILU7nGxp2GT5v0WmNb6tXwWmMw%2Fdn%2Buz5tN%2BlbjY8SvmtWWtSn1Kd%2B46a0SWoGKzMUMn8U%2Bc2INsNW02%2BHGNj%2F96704JgH0T8nr0GKyQs7vz6G5GPo7IcbidstTP7Oh1mpWGEs%2BuLkU72rTaWRLcrUekj1yXwaxk0I%2BeYSjD6ZK4DpH00VIJYT4v3pI9Ync5qI%2B8cXTGOFRCMWL6Hqj5GoMSQbg5u7kOJ3AnCBjU3o7MGGsRXbu0DZFJ2QpWd%2FQ1YTsvT0dejs%2B%2BtKDhq3jSoLabTDIK0hB2PI3hh5eYpi34OsTsGLLyDFb2Tl2Tp0drTplIEUZ2%2FGsUg70SpbFn4olsOgy5ajqMuXRXc1oq0Ob3dpNLNIyjFkOoZKhmDOQzn9pIcy9VDmHjJx1mDtKKW0k8ZpEHRDznkQcN7uroq2CMJuSlHyqYYhinwIrobg9gC5PcCuHMKWP8Pt1HDCgysI%2BqJGlRBUjqBiBJUkqAqCql8fC%2BVarn4glCtjf55b8xzUI1P0DtmxKXqJJof5OXl1apzX%2FuoKdpOzRuqHLPaZL6KAs6jDKaeCdXggKI1bqzyFkzWkuzSTuS8n5O2n%2FyCXE7L0fBsxO4VTp%2BDyFbDyClg16rQo2M4o7FLs64cpy42WvMlNBmFq5MUSij3vUJ2TN2b7W1sKkfAn7%2F0RzALc1shtjc%2FlLwQ9dX90y1Tk6JapHHm8mRcyk%2FtsutvbBSuSy999nOxVxoq1G2747ft8CkzLR3cSV6wzLaTuOfLwuhQisTeN5Qn5ac1tJ%2FFW6Xaul1aX%2BfrWBzfXstwmzkmjx2ByQsiXf4HLCXn5xc9m7%2FbqvW1IO4Yta2TlEzIPSDMGzw%2Fg8gV%2FZwisWszEuYeqrEe2FS8OlSRQyaJncQ33nz5e1IfuPnrWAyvuQmc1%2BrZGX9VgaghXXh4VuV1cHitvFCvrHcXKqq8vzHXyrNH2w6QbdztciDjhwu%2B0gm5AaUuIsBMlfoTCTZLe8x%2F%2FBQAA%2F%2F8BAAD%2F%2F9WG%2BiuPBAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectsemicolonrichsieve.com
FingerprintE8:A4:25:54:56:69:72:E0:37:17:3E:3A:3C:A2:E0:DC:DE:7C:DE:92
ValidityTue, 28 Nov 2023 08:18:19 GMT - Mon, 26 Feb 2024 08:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRSt3o0gCKLixcPCHDysaCbV0z2ZafcgrutKMCZhdyVHqa7qnpSprmqquqcnOQUXlj3pePPYeZNs0F3ExbMgEy%2ByIDgeJIfN3bOwhz2IzGRg9EP3%2F7%2Feh3rv%2Fbp3WJ4TipKdbX1i9qVSbKXdpI2r21ILU7nGxp2GT5v0WmNb6tXwWmMw%2Fdn%2Buz5tN%2BlbjY8SvmtWWtSn1Kd%2B46a0SWoGKzMUMn8U%2Bc2INsNW02%2BHGNj%2F96704JgH0T8nr0GKyQs7vz6G5GPo7IcbidstTP7Oh1mpWGEs%2BuLkU72rTaWRLcrUekj1yXwaxk0I%2BeYSjD6ZK4DpH00VIJYT4v3pI9Ync5qI%2B8cXTGOFRCMWL6Hqj5GoMSQbg5u7kOJ3AnCBjU3o7MGGsRXbu0DZFJ2QpWd%2FQ1YTsvT0dejs%2B%2BtKDhq3jSoLabTDIK0hB2PI3hh5eYpi34OsTsGLLyDFb2Tl2Tp0drTplIEUZ2%2FGsUg70SpbFn4olsOgy5ajqMuXRXc1oq0Ob3dpNLNIyjFkOoZKhmDOQzn9pIcy9VDmHjJx1mDtKKW0k8ZpEHRDznkQcN7uroq2CMJuSlHyqYYhinwIrobg9gC5PcCuHMKWP8Pt1HDCgysI%2BqJGlRBUjqBiBJUkqAqCql8fC%2BVarn4glCtjf55b8xzUI1P0DtmxKXqJJof5OXl1apzX%2FuoKdpOzRuqHLPaZL6KAs6jDKaeCdXggKI1bqzyFkzWkuzSTuS8n5O2n%2FyCXE7L0fBsxO4VTp%2BDyFbDyClg16rQo2M4o7FLs64cpy42WvMlNBmFq5MUSij3vUJ2TN2b7W1sKkfAn7%2F0RzALc1shtjc%2FlLwQ9dX90y1Tk6JapHHm8mRcyk%2FtsutvbBSuSy999nOxVxoq1G2747ft8CkzLR3cSV6wzLaTuOfLwuhQisTeN5Qn5ac1tJ%2FFW6Xaul1aX%2BfrWBzfXstwmzkmjx2ByQsiXf4HLCXn5xc9m7%2FbqvW1IO4Yta2TlEzIPSDMGzw%2Fg8gV%2FZwisWszEuYeqrEe2FS8OlSRQyaJncQ33nz5e1IfuPnrWAyvuQmc1%2BrZGX9VgaghXXh4VuV1cHitvFCvrHcXKqq8vzHXyrNH2w6QbdztciDjhwu%2B0gm5AaUuIsBMlfoTCTZLe8x%2F%2FBQAA%2F%2F8BAAD%2F%2F9WG%2BiuPBAAA HTTP/1.1
Host: semicolonrichsieve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Cookie: u_pl=20287261; uid_id2=bbdf796a-d14d-438a-998c-d869027c5809:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 03:00:04 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3a2491ed4a344ad0b860fa2d4f362892
Strict-Transport-Security: max-age=0; includeSubdomains
faponic.com/js/svg-loader.js
200 OK 68 kB URL GET HTTP/3 faponic.com/js/svg-loader.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type HTML document, ASCII text, with very long lines (65476)
Hash e6dd56cfa45441cde15a85de5b04eaf3
2513ffed24bf0758a67cab782c95cf32e4f8da97
798d2917fff8175470a16b8436e49f054d6483e47a2d6f9d850e5a63fb6c036d
GET /js/svg-loader.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:30 GMT
etag: W/"6013e9a2-107a1"
expires: Fri, 01 Dec 2023 01:21:00 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 524341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BMUTxevx1wbBf1VFe93y%2FqiulfPumH%2FyPLk%2Bi5dn7r1%2FtLtRbzEsWdgU%2FH02zf5JpFeGdsqLXimy2Dk0Hh%2B29mT9FVmft61HBZEB0kciZqRfRTwTFlz5SHdHFBmovA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac98d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/css/theme-font.min.css
200 OK 4.5 kB URL GET HTTP/3 faponic.com/css/theme-font.min.css
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (4630), with no line terminators
Hash 63b7d65eae395660c3ccebe950313909
66e15913995558652e671e789eb2c8c83039df64
53d1c565d4fb29d2b9c4f0223086db050a5733ae3cade38869bec8cd8357d7d3
GET /css/theme-font.min.css HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: text/css
last-modified: Fri, 29 Jan 2021 10:55:30 GMT
etag: W/"6013e9a2-119c"
expires: Fri, 01 Dec 2023 02:43:46 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 519375
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xbhK42avMDZ%2Fz7LiyrKc2NC0X4015tH%2BkibQdPD3mAsvzEkEPpbX%2BoFrOxpyCqhkbURjT5uIFMlzK3zo5k4A%2Fm7j%2Fb8flCd3oCcHnr4pIglEMfZCxn26iReYuGloKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c5ad97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/css/main.min.css
200 OK 349 kB URL GET HTTP/3 faponic.com/css/main.min.css
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 349 kB (348843 bytes)
Hash 6beac707620bbbce205d327ae03bc6dd
5b5cd888b0ea67fb397007e18b4839be48bdc43c
96ae3f75be3c542f81985ce24c9313eeb959a1f6674cbf96e1c806e2c0e6e921
GET /css/main.min.css HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: text/css
last-modified: Fri, 29 Jan 2021 10:55:30 GMT
etag: W/"6013e9a2-552ab"
expires: Fri, 01 Dec 2023 00:50:40 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 526161
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ROsFbFvhPInbf2PClus0udmBv5IjiiUnd57zzFvD0iCW4D6hAXRb52snYAm4vKabMiHUbhgljTlciMloCCW6TC5%2BNO6WoQTk%2B4aNd5QAyv%2FsGb4QH%2B2QgF3QkC9yEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c5dd97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.barscreative1.com/sb/au/29/79/b6/2979b6cd81afad6251e222515b2d8311/1663145782.html
200 OK 1.8 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/29/79/b6/2979b6cd81afad6251e222515b2d8311/1663145782.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F
ValiditySat, 11 Nov 2023 03:00:51 GMT - Fri, 09 Feb 2024 03:00:50 GMT
File type HTML document, ASCII text, with very long lines (1887), with no line terminators
Hash ad060cdf961dc780713500620212dfd2
00dff11f954cb93349d081333ba22779b5380de1
5975e0efdf299d5ab9695c6be88a67b29bd4e044aadc6af993f5102a3eb894f4
GET /sb/au/29/79/b6/2979b6cd81afad6251e222515b2d8311/1663145782.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:03 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Wed, 14 Sep 2022 08:56:26 GMT
etag: W/"6321973a-6ef"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 30 Nov 2023 04:00:03 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/jquery.min.js
200 OK 90 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/jquery.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (65451)
Hash 561acb3e541133bbdd2c0c19f8ee35a1
ffd1353cf3f77d25f801c84d8208613eb0d3d548
9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc
GET /sb/ssp/notifications/text_bubble/2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: application/javascript
last-modified: Tue, 12 Jul 2022 10:56:19 GMT
etag: W/"62cd5353-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1898027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tkGFhgvy7vnT%2BmIxdoVL4s0lcV%2F7AjKot4Yz%2B6Q1E3yDz9IOQGdhyMwLjR6r%2BLHZMiAHn%2B1cHgYLmz0ewxE0IF1PclmGtSVqD%2FL5umidq2nHsrlstiDQa9O%2BjhWx545iSgXTT35hRy0h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd685bbf2889e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
faponic.com/js/libs/ajax-pagination.min.js
200 OK 1.8 kB URL GET HTTP/3 faponic.com/js/libs/ajax-pagination.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (2136), with no line terminators
Hash 626869b124b024384ae17e0eb68a1be7
673547ed320b900d456e93ad1b3d4111d0590d83
10c4eb6901cb3e0b65b738b97cc4d6b3070eec1536c41bf1496052b37a3226e9
GET /js/libs/ajax-pagination.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-70a"
expires: Thu, 30 Nov 2023 03:37:49 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 602532
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JKWG3tfKz%2B93FlXRqhJrZCDMMlu1iqFvTxQ6B%2FM0iX4rFTLhT6k6bmOotUQUlMaA4KWV9h4Vf4%2FeoGrOeyJzBQdASWBW7vgVOMFJ65RcGC5vXWha7W8QzsCJc67hPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd677ac8dd97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/js/jQuery/jquery-3.5.1.min.js
200 OK 90 kB URL GET HTTP/3 faponic.com/js/jQuery/jquery-3.5.1.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash b61aa6e2d68d21b3546b5b418bf0e9c3
9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
GET /js/jQuery/jquery-3.5.1.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-15d86"
expires: Thu, 07 Dec 2023 01:50:17 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 4184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DVX0LUHyIK6ZGC81VcNIRRCcvhb8cpSj6VQ2wUZTiDUXYY7g3YLkTXSPOrddWBb6uQX6AGKzoUjfb%2BTaCGfCBT15Yq2wb5sMrm%2FdtRqbkJy%2FllxxXyTenAgwR9L6Zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c55d97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
faponic.com/data/p/e/pecdad/1000/pecdad_0194.jpg
200 OK 23 kB URL GET HTTP/3 faponic.com/data/p/e/pecdad/1000/pecdad_0194.jpg
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 6180159bebf88f598c2a733753e21f6a
b6f0bde65ebf161ab30d2dde35e11dd2ad4b5798
ef4ee430e63745e72dbbdddf47ebcfe16dc6f8ac1b70e4c515966a463fd0aa98
GET /data/p/e/pecdad/1000/pecdad_0194.jpg HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Cookie: _ga_0KVPEKPNG7=GS1.1.1701313206.1.0.1701313206.0.0.0; _ga=GA1.1.403577680.1701313207; __PPU___PPU_SESSION_URL=%2Fsearch%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: image/jpeg
content-length: 22809
last-modified: Mon, 27 Feb 2023 10:33:47 GMT
etag: "63fc870b-5919"
expires: Thu, 07 Dec 2023 00:45:07 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 8095
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BWeGOUJYKQEUa1yO21Sv78V3V5pjJ8Hfbn0Y1Ulay2%2FS%2FjPW2d58PJDCE%2FkP25TU0wtnb77LtI2LP%2B5vdplKn5qVvX%2FRRUPOWWh89iJ0U65pV7iEltjxl0q7cNy9SQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67b6bfbd97b-HEL
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/script.js
200 OK 892 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/script.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (959), with no line terminators
Hash 9d441b1ef0d4f07226844f2a75309fe0
588ed7e74f0c215a09e72131be39b930479dccf9
5df48723b4f69d2ecdd0de387d4233bf720e3c0cac669645d8a5ca6cb31e9bf8
GET /sb/ssp/notifications/text_bubble/2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://faponic.com
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: application/javascript
last-modified: Tue, 12 Jul 2022 10:56:18 GMT
etag: W/"62cd5352-37c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1386527
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zHKIranRngC2aFu0%2FEvBxXhM%2FkO5Q0HrhjcHKnuM%2FrkasJFNJ3NGoxEinsdiY2IdolRPAJpzairjRlKfhwzzjH95LljbW9zCfVuiGhXxI%2FltyUcmMbCrK760e9MsCWq1NzWEpUO9FCsP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd686bce7889e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
faponic.com/js/libs/imagesloaded.pkgd.min.js
200 OK 5.6 kB URL GET HTTP/3 faponic.com/js/libs/imagesloaded.pkgd.min.js
IP
Requested by https://faponic.com/search/
Certificate IssuerGoogle Trust Services LLC
Subjectfaponic.com
Fingerprint6B:FE:2D:19:BA:E6:3A:C6:8D:2B:D3:2D:64:F5:43:B3:41:F3:EB:5C
ValidityThu, 12 Oct 2023 12:32:52 GMT - Wed, 10 Jan 2024 12:32:51 GMT
File type ASCII text, with very long lines (5710), with no line terminators
Hash d67c967b2989e8322b9aa38d7ee655f6
701a87c2e5d6f4f78358516d3b117c9f0cbc3356
63133fb18f9f89e80d9823d561c78bf494f97e0b065e20a6573e739f2e62b32b
GET /js/libs/imagesloaded.pkgd.min.js HTTP/1.1
Host: faponic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/search/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 03:00:01 GMT
content-type: application/javascript
last-modified: Fri, 29 Jan 2021 10:55:38 GMT
etag: W/"6013e9aa-15e0"
expires: Wed, 06 Dec 2023 03:44:29 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 83732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAB2R5NPuW%2Bs67Af5ofMiKvZC5l9NRj5gSl7WQg%2BQF7Zhg69T0PmYR%2BBanbV0ZU1x8SHIlNY0Np9tIfYK33hEb3gPKIttC%2BDidIDk95T1gMVp5pktQC1RplHNa3ofw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd6778c6ad97b-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.cloudimagesb.com/si/8f/ea/84/8fea842e6725570caddafd3fafefc6de/1690854301.png
200 OK 84 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/8f/ea/84/8fea842e6725570caddafd3fafefc6de/1690854301.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://faponic.com/search/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash b04a52f62d43c486f98525e20fa79b58
3147acec66d5c9af77a1dc8a74ba5548e713753d
a28b993efcf36015497d94c679678869052d7c3b2b0c30b30068d0a452969f6b
GET /si/8f/ea/84/8fea842e6725570caddafd3fafefc6de/1690854301.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:04 GMT
content-type: image/png
content-length: 84058
server: nginx/1.21.6
last-modified: Tue, 01 Aug 2023 01:45:09 GMT
etag: "64c863a5-1485a"
expires: Sat, 02 Dec 2023 03:00:04 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://faponic.com/search/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faponic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 03:00:02 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: ac9c53f6531251df32a35749ab95b157
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 03:00:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o9cR5hh2HZX6kJgb%2BliR2kQv4gZYQ2G2zJuqLmUneu53bi%2BR33FR9mVKAVl0%2BfUE0yfth2SkNAIGWcHtD0DDuWRXMF%2BIs26yPelzOhTpYeZMBcj7m4u3aRCep7aj89QOX3fXxtI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82dfd67c0e19732a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.234.147
212.117.190.201
54.230.111.76
18.195.149.11
192.99.16.114