13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
172.67.174.215403 Forbidden 3.6 kB URL HTTP/1.1 13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
IP 172.67.174.215:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1647)
Hash 35aac740ec4a96e7707f93e62a0231f6
85f3f1e9c171e780482e85ba76943a2f6a66365c
92c3ecd4a27983d16808e96652845a2bfcaec6c462ac693bb4e0936f95127410
GET /wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Date: Tue, 28 Mar 2023 08:27:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8TChXKrb3gIHNBA0jFXop7vyYyYeBPUtPSEyEzYqhgu3LdsidOphg9QnXWbdly3DpZm%2Bbo8pHMWnwOrAWaIx70LiCwtSoMOPIBqwLQlWkjKZmLAztY8EGOgv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aee7e1d3d28b51d-OSL
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 911d74784325663a0d95b463b0e9ae9b
21e999229be584d8e42696bce71236ad5bcb9a25
f48cbe4d605e660a45267400e0add4f7bc7cd523c450376ecd8e3a7f094abf56
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F48CBE4D605E660A45267400E0ADD4F7BC7CD523C450376ECD8E3A7F094ABF56"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2775
Expires: Tue, 28 Mar 2023 09:13:28 GMT
Date: Tue, 28 Mar 2023 08:27:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 93f633ce30c038eb581544323c5a971e
2f60526cb750c6babccc207f75fb5a8ae6f7598b
0ff6df80a892199848fb943af78541b66efc09a7ab70d4b169906fdbac1eabf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FF6DF80A892199848FB943AF78541B66EFC09A7AB70D4B169906FDBAC1EABF8"
Last-Modified: Mon, 27 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5022
Expires: Tue, 28 Mar 2023 09:50:55 GMT
Date: Tue, 28 Mar 2023 08:27:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 28 Mar 2023 08:15:49 GMT
content-type: application/json
age: 684
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c0d9353dc46e88bf564ed464b0b073c7
0b5ce170e7db24267a3ba5b79a48548b1acd2e5b
7c7ef189b14109b44aa96454ea1b94bcbd3d69599cc7ba429f8234f6acd88a9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7C7EF189B14109B44AA96454EA1B94BCBD3D69599CC7BA429F8234F6ACD88A9B"
Last-Modified: Mon, 27 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14599
Expires: Tue, 28 Mar 2023 12:30:32 GMT
Date: Tue, 28 Mar 2023 08:27:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8alw9rVPSDh+5esc2Qt9rS4CpX51lAMbNlom6Ul8a9TTEFfMeHteQu3A80dPXPEywliNXc+8eXk=
x-amz-request-id: J6AT96HP7TY8D984
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 28 Mar 2023 08:01:58 GMT
age: 1515
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
13dl.to/cdn-cgi/styles/challenges.css
172.67.174.215200 OK 2.6 kB URL HTTP/1.1 13dl.to/cdn-cgi/styles/challenges.css
IP 172.67.174.215:0
File type ASCII text, with very long lines (6600), with no line terminators
Hash 9fa2f809c184b1f61b213cd4e503a226
5d7a209eb9da1e823ea6bdc9610005d7a224b35f
f47ef292aa20330e7c78dc476c33845afbc76cb0ba0901bc1f29492cfeb28437
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 21 Mar 2023 12:30:57 GMT
ETag: W/"6419a381-19c8"
Server: cloudflare
CF-RAY: 7aee7e1f285bfab4-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 28 Mar 2023 10:27:13 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
13dl.to/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7aee7e1d3d28b51d
172.67.174.215200 OK 42 B URL HTTP/1.1 13dl.to/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7aee7e1d3d28b51d
IP 172.67.174.215:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7aee7e1d3d28b51d HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:13 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Last-Modified: Tue, 21 Mar 2023 12:30:57 GMT
ETag: "6419a381-2a"
Server: cloudflare
CF-RAY: 7aee7e1fa8fafab4-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 28 Mar 2023 10:27:13 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 28 Mar 2023 08:27:13 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
13dl.to/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7aee7e1d3d28b51d
172.67.174.215200 OK 56 kB URL HTTP/1.1 13dl.to/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7aee7e1d3d28b51d
IP 172.67.174.215:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 36adce5ae7ea2b98f976cebc2306922e
7b68c4376cf07087235a74be6422076d7cdc1d71
9274e50563c98dd580255383fd82ca4e1ff371492a3c51e26620ac66024a7812
GET /cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7aee7e1d3d28b51d HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b&__cf_chl_rt_tk=y7QtwF_WsIyTXg1M9p_fDNVZAgtL6i5S9f9MCgErDrs-1679992032-0-gaNycGzNBjs
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:13 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=0, must-revalidate
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=92Cl%2FvPpjpm1%2F4g4AYgboL9R8N2vqSBgZPEJ%2BddZQlbRIqNuce0WRmOSaYQiqmskXwzhsLr2QZuRDLOje%2BEHlhKRNu19tMtsJwa%2B%2FkGrxq7A0wqarbz%2FuACQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aee7e1fbe9fb505-OSL
Content-Encoding: gzip
13dl.to/favicon.ico
172.67.174.215200 OK 122 B IP 172.67.174.215:0
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Hash fe40114b7ecd115ad12c33caca215d7d
271e6f3ce721576b9d3da6a3763099a5f0953586
ea98adb8569d9dad62d3d864b57b952b5a369cf2db431e3e7d8d563cfc60aeb0
GET /favicon.ico HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:13 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 Nov 2022 17:10:34 GMT
ETag: W/"636d308a-13e"
Expires: Sun, 24 Sep 2023 06:25:00 GMT
Cache-Control: max-age=15552000
CF-Cache-Status: HIT
Age: 3009
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yToeppI4s3kq46CzSKvuzEQltHjMZRZlFh0caNbBmFYe909MxkT2NNg%2BXSONtdTt3v%2F2zDfFfxxrA2lBuiWqAn4fCZHL8M7Rj6uWmumyozLCL7a750h%2F%2FlyC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aee7e1fef01b505-OSL
Content-Encoding: gzip
13dl.to/cdn-cgi/challenge-platform/h/b/flow/ov1/273690803:1679991021:xxBGcFQozCyO7zDJwGk5JRuEDZNCDQHcmty9H1MOIjM/7aee7e1d3d28b51d/9c09a71a67571c9
172.67.174.215200 OK 47 kB URL HTTP/1.1 13dl.to/cdn-cgi/challenge-platform/h/b/flow/ov1/273690803:1679991021:xxBGcFQozCyO7zDJwGk5JRuEDZNCDQHcmty9H1MOIjM/7aee7e1d3d28b51d/9c09a71a67571c9
IP 172.67.174.215:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash cdce23471e5b9c95b1a6c13b004314e4
f3c878dd9ba711b93a600c68cf7fe45329d2c5b6
12392a8c50141d2661dc27ec6ed4bd62083ccb24ccd1a97cdf8b25c99996f40f
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/273690803:1679991021:xxBGcFQozCyO7zDJwGk5JRuEDZNCDQHcmty9H1MOIjM/7aee7e1d3d28b51d/9c09a71a67571c9 HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Content-type: application/x-www-form-urlencoded
CF-Challenge: 9c09a71a67571c9
Content-Length: 1883
Origin: http://13dl.to
Connection: keep-alive
Cookie: cf_chl_2=9c09a71a67571c9
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:13 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: KXnu+QP11UuPKdQt/pvveRT7wCKMdE6zv/mrQ1iCDDyCS1D/OrFKNYeu5/RQLU0SViL7oT9XQwvf1Q2kaWSPfI8itFAPU1t/g4BVxkhjM9GyctyIoPVpA8f0yrDU1xZFewMPMvc3yTlSb1UuwPlXCZji1pMHNGzyvJZYCWHNt7P1mIiTAnDMDuOxQPc4vKvHwOsGozot1jMsIQsOMZF2pO01BeiTaFEi2cka8oaVpSiT4678b2JCS2uyR4GGOlp0EK+SoqdGyXMw28qJ+D1GKTj06r4Je38p+Gvi6W1ZtJ0xlcKGxOGgJgzOPKIq49D2zof6SoWByfdRiaeOCKnG3pWqTr9tIpvYRxuEb2QYNHSfmf8tiJf4EY+xixWqpgpIYnIssBRf6AwaiVFApjKW940baz3osD3I5WHxfo/G7PI=$b68TAMXR6zneQIzHE9kcKw==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EGa8R5X%2BYbIhIBcMUAVlgx1SdyTRP8NMOS8k8KpRbwEDmzDUIt2uNMXba4%2Fdzu2AnxpOmUOK%2FBrULjgG%2Bh4Kh9BCwsmdZpJST%2B85AVsEZvUPGoDT4cjQ%2FQ7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7aee7e2108b0b505-OSL
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 28 Mar 2023 08:14:35 GMT
age: 758
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash da5340ee69a1000f751686df9e716663
a5da880a61ed119790a7990bbdcc0c97eecf04f2
d1ff10bfe40f290935abe1feeb975a6af8cf310f9ce9d45bbf482a604da73560
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1FF10BFE40F290935ABE1FEEB975A6AF8CF310F9CE9D45BBF482A604DA73560"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15921
Expires: Tue, 28 Mar 2023 12:52:34 GMT
Date: Tue, 28 Mar 2023 08:27:13 GMT
Connection: keep-alive
push.services.mozilla.com/
44.226.72.95101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.226.72.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MVxYwgRnqGf/zumEbejXZw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yx1+Ye/umenbF3Q6b2HZOemqu/Q=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9152
Expires: Tue, 28 Mar 2023 10:59:47 GMT
Date: Tue, 28 Mar 2023 08:27:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9152
Expires: Tue, 28 Mar 2023 10:59:47 GMT
Date: Tue, 28 Mar 2023 08:27:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9152
Expires: Tue, 28 Mar 2023 10:59:47 GMT
Date: Tue, 28 Mar 2023 08:27:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72713d4b-dac7-4d4c-bfff-c16bd305c5b1.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72713d4b-dac7-4d4c-bfff-c16bd305c5b1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 15e37de1dba62187e1e5f012145813f3
cfe8cd953330252e15594f403e2f38ec56acdfd7
89bf7dbcf5a7fca006545f001b47de0ab6f94014de4bd4c519f6050e6daa5aa0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72713d4b-dac7-4d4c-bfff-c16bd305c5b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6542
x-amzn-requestid: 1106a670-cf68-4e3d-b5af-3013407acc5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbsjGAaoAMF5GQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220cb6-726c7ba02ddb31182834d82d;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:58 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: hWI0gKHs2830OtWE9Or5YEsE4aQSNLzf85--OGAQEqPEN-6bgWBbFw==
via: 1.1 8ead054384c1626556ee4410cad35692.cloudfront.net (CloudFront), 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 22:05:26 GMT
age: 37309
etag: "cfe8cd953330252e15594f403e2f38ec56acdfd7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6469f625-03ad-45a7-a918-5f220169711a.png
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6469f625-03ad-45a7-a918-5f220169711a.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e828b7227de7aa7a7b7c54c96e0cef9a
9a717142ab25dabf9123485ef51ed586662d2a71
0390f8771432de010cc11e11be2e2dfa7c303664858a5b066e66a628a1f3dd66
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6469f625-03ad-45a7-a918-5f220169711a.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 05cb5115-a27b-485a-89fd-670bdb5bb06f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbofHHPIAMFkQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220c9c-774bb5d725336b35088e2527;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:32 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: OUJZjN0YFRbVlZWNMbOXCvz9Ttj5bYtGwAOuGXR_T-GtUyWkXQAxhQ==
via: 1.1 22ea0ab0881473261b786ecbb5e00f54.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:53:24 GMT
etag: "9a717142ab25dabf9123485ef51ed586662d2a71"
content-type: image/jpeg
age: 38031
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: wlc65ytdELa_faMSddEDHZNsbtF1_CgMOho3W3BvkaOSrFyAkKUagg==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:43:57 GMT
age: 38598
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada29e049501b12a35b0bcc5f68e3e57
5c1ba9bffbcc9007e7f119dbb3197db34a12f8da
b45583b5845129386a456e03fbdba25305c8d6d9fb5a8f01d783816ced080629
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10744
x-amzn-requestid: d693d820-7eed-47a3-9b0b-8f43c141bd3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbogF0poAMFTAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220c9c-22ab350146e8a3a606f74c42;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:32 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: KAI78tfv0ATn1DQvBGyodBs9UWsIGdj1Fa50KowbUAO4ab2ceaYhMw==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:49:26 GMT
age: 38269
etag: "5c1ba9bffbcc9007e7f119dbb3197db34a12f8da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F008df6b4-92c5-423a-a32e-4ab5016464ba.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F008df6b4-92c5-423a-a32e-4ab5016464ba.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5d955ec5d3a9f655e4ca0523acfd039
e8b2cd28a02a2cee1b4e57c57570f2598721ff57
e7753ef91d6f04dce00f83cb1ba3ea4f1abb52140993fbee375e506597cee529
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F008df6b4-92c5-423a-a32e-4ab5016464ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6970
x-amzn-requestid: 9f7a82d7-dbba-4c67-a330-6a7f2b68177d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cdn3zGn7oAMFwNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64222031-1d97c16f7a9c163c02fe72ac;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 23:01:05 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: tFYFwzjyNtfiOJ3pLPC126YgOclndkmPYWrFTdLcWP9LgP9xjj_snQ==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 23:10:22 GMT
age: 33413
etag: "e8b2cd28a02a2cee1b4e57c57570f2598721ff57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1da68df9d96e2758e37b9f15daab027b
5ff19ed6dc5752aa4b15fb88da972b736fd55783
ad924425946dbdf309c764e7097e676185516301feb7722b30d95ffd50b4353f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7426
x-amzn-requestid: 85a30298-4613-4a96-bdba-0899fe9f9475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdcsgGZsoAMFQkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220e4f-10db431e7632048d7b15e0ec;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:44:47 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: JDa9YUJ9xo5mo8tb7poZC8XJDp6USTidZjWEwTZCrioJxR7vur6uJw==
via: 1.1 f193acd25f2604e189bfbfaf539aaa06.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 22:00:12 GMT
age: 37623
etag: "5ff19ed6dc5752aa4b15fb88da972b736fd55783"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
13dl.to/cdn-cgi/challenge-platform/h/b/img/7aee7e1d3d28b51d/1679992033459/1kYOXxxsJfxKeZJ
172.67.174.215200 OK 61 B URL HTTP/1.1 13dl.to/cdn-cgi/challenge-platform/h/b/img/7aee7e1d3d28b51d/1679992033459/1kYOXxxsJfxKeZJ
IP 172.67.174.215:0
File type PNG image data, 76 x 43, 8-bit/color RGB, non-interlaced\012- data
Hash e4a3c56458b8e5daf0515b852f5e4eb9
e80b7df5be789a4860967d892bc7508a5c4e403c
b12068b5496d6c2f8a6e224f08b5157a8e8e4ec5af7b57a1f113df4cd0f6e3b3
GET /cdn-cgi/challenge-platform/h/b/img/7aee7e1d3d28b51d/1679992033459/1kYOXxxsJfxKeZJ HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Connection: keep-alive
Cookie: cf_chl_2=9c09a71a67571c9
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:15 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7qI1M0Wxit2wvOOiKBbYVXI9%2FMK%2BBtWXvKLyg5qcTskdYdDghMznU%2BFy5CL6sb4uI2Vh555FjfyiqtEYjB%2B271Qr1QfAPxtVYnMNyZgF9ETgHhHLxCCVmGOD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aee7e2e6f46b505-OSL
13dl.to/cdn-cgi/challenge-platform/h/b/flow/ov1/273690803:1679991021:xxBGcFQozCyO7zDJwGk5JRuEDZNCDQHcmty9H1MOIjM/7aee7e1d3d28b51d/9c09a71a67571c9
172.67.174.215200 OK 1.8 kB URL HTTP/1.1 13dl.to/cdn-cgi/challenge-platform/h/b/flow/ov1/273690803:1679991021:xxBGcFQozCyO7zDJwGk5JRuEDZNCDQHcmty9H1MOIjM/7aee7e1d3d28b51d/9c09a71a67571c9
IP 172.67.174.215:0
File type ASCII text, with very long lines (2264), with no line terminators
Hash 081cf500f9c54d3c62cb736662feb96f
806a81ba40965465af834461f8978bbfc1e26e29
b46ea2db27c047d758de8f38a12e87b48ca02388c792c72a0030a3dc85cc9187
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/273690803:1679991021:xxBGcFQozCyO7zDJwGk5JRuEDZNCDQHcmty9H1MOIjM/7aee7e1d3d28b51d/9c09a71a67571c9 HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Content-type: application/x-www-form-urlencoded
CF-Challenge: 9c09a71a67571c9
Content-Length: 16219
Origin: http://13dl.to
Connection: keep-alive
Cookie: cf_chl_2=9c09a71a67571c9
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: cf_chl_rc_ni=;Expires=Mon, 27 Mar 2023 08:27:15 GMT;SameSite=Strict
cf_chl_out: jM4TL4euHPDMX37LE3Rt+0bXG86/koislTHgxXq0JD4Y1ePR6UCrljzQMQ3vROYimdxbiEzDXNKKDnIyYhz0D3OlVhShwogQeC3LH7SY7DY=$lw7iLxLFWuFkE7lNEXXLPA==
cf_chl_out_s: Fqkw1mXo6MyYdfp4SGhAM0TPlE/DWRU1yS28JWv1ohfbyjwmj9r9Q4LzbzprWCVxffegmDBbYWehWJdWb65p6w==$3iGJTdEadp/sts6Cgjqf8A==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EIMctaUiw08YPF6J65QiYSj8lcQGZj5ZjNGChPxgpfiqdEYee1wSXVaD10Wy2%2F52yYNfhWjyFb9dcRz4%2BQPKWRDY0w8nYwQURlQGvobEL5v8zLS2OoUzNUwZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7aee7e2f0845b505-OSL
Content-Encoding: gzip
13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
172.67.174.215301 Moved Permanently 380 B URL HTTP/1.1 13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
IP 172.67.174.215:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7de2ecc23c10a85aa79cdb2422d1d31c
0a3b9ad61717bbabe64046a11ff99677ce25b741
79b511302f4f4392e023733c069cca51b6d61097dd3b7217a29933ce359961cb
POST /wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b&__cf_chl_tk=y7QtwF_WsIyTXg1M9p_fDNVZAgtL6i5S9f9MCgErDrs-1679992032-0-gaNycGzNBjs
Content-Type: application/x-www-form-urlencoded
Content-Length: 1670
Origin: http://13dl.to
Connection: keep-alive
Cookie: cf_chl_2=9c09a71a67571c9
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 28 Mar 2023 08:27:15 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: cf_chl_2=; path=/; expires=Thu, Jan 01 1970 00:00:00 UTC; domain=.13dl.to
cf_clearance=dLTp_tHWeiRSHlOO5q6G_3ISEelVBPJDgFx0RoIRiWQ-1679992032-0-150; path=/; expires=Wed, 27-Mar-24 08:27:15 GMT; domain=.13dl.to; HttpOnly
Location: http://13dl.to/wp/zip/wp-ads3/?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
Cache-Control: max-age=1
Expires: Tue, 28 Mar 2023 08:27:16 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VY%2BrlRBPlItfh1jJ9cTNVRYk5u%2B9X9S9Ypmu1AqZbhhImW1lYTXukkgEo3UUeymUyaHKDAh2BcLBkNtQ1KxR5iW3mvDlVH%2F%2BKCZthBWhUlWwwL2nOcM4gvur"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7aee7e2f78d7b505-OSL
13dl.to/wp/zip/wp-ads3/?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
172.67.174.215302 Found 1 B URL HTTP/1.1 13dl.to/wp/zip/wp-ads3/?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b
IP 172.67.174.215:0
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /wp/zip/wp-ads3/?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b HTTP/1.1
Host: 13dl.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://13dl.to/wp/zip/wp-ads3?url=zq2l1qeeX2WjxKafl8yUpNSiY6bI1mWYy9CclJXLlmmebmiZa5hibZWWZmZqnJaRmWCWmZfEm2PHlm2b&__cf_chl_tk=y7QtwF_WsIyTXg1M9p_fDNVZAgtL6i5S9f9MCgErDrs-1679992032-0-gaNycGzNBjs
Connection: keep-alive
Cookie: cf_chl_2=9c09a71a67571c9; cf_clearance=dLTp_tHWeiRSHlOO5q6G_3ISEelVBPJDgFx0RoIRiWQ-1679992032-0-150
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 28 Mar 2023 08:27:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Location: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cache-Control: max-age=1
Expires: Tue, 28 Mar 2023 08:27:16 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6VvJ9tUblrPi%2FNnF%2F0OuVzzu%2FvEz2xSOuCE7HRbrjpSmp8OI7yr7eNacul5w5I8%2BqYK0nDLUsnZv9srkFdRYANJNSMwmVhthNYdD1y8knvYftmREtAOBavS6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7aee7e2ff9e3b505-OSL
rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
195.211.222.2200 OK 6.1 kB URL HTTP/1.1 rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash f9fbfe5a27bcb2fc628d981cd116f241
6b9ffc3cb9a14fd950518424f295209a38c7419a
03181fb3baddeef68fdcb44f65cfc6aeba14fb3ce4ba89572f349c7bc7aced83
GET /file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: lang=en; expires=Wed, 18 Jul 2029 05:49:51 GMT; Max-Age=199056156; path=/
lang=en; expires=Wed, 18 Jul 2029 05:49:51 GMT; Max-Age=199056156; path=/
PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; path=/; secure; HttpOnly
download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; path=/; SameSite=Lax
http_referrer=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=Lax
buyed_from_dl=1; path=/; SameSite=Lax
file_id=717639069; path=/; SameSite=Lax
tag=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=Lax
__token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-store, no-cache, must-revalidate, no-cache,must-revalidate
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
rapidgator.net/css/all.css?v=26
195.211.222.2200 OK 8.8 kB URL HTTP/1.1 rapidgator.net/css/all.css?v=26
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type Unicode text, UTF-8 (with BOM) text
Hash c5a9bc8cf173009984043527da77a287
931dd21d2ec6741e5b428aae613f83f985d40901
55db324473b1585a1956e3ec91052c3f6426507b63488f7659c4a95ea822d507
GET /css/all.css?v=26 HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: W/"641c19b8-b5b3"
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
rapidgator.net/css/ddsmoothmenu.css
195.211.222.2200 OK 1.0 kB URL HTTP/1.1 rapidgator.net/css/ddsmoothmenu.css
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
Hash e5cc40e1c35b45da77c96ee8deb6f1df
dfde0e38343afb327064c23ff24e6aa2db745e77
1d7cf80b542052bc8ae21250abc7a737ee411bba216e9d693a0ced57f3b3b736
GET /css/ddsmoothmenu.css HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: W/"641c19b8-9ae"
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 7e2d8156baac12231cc9cbfdefedacf1
62384d8842fb5b560ac39636bb519953e22dc664
ee4dbd79fc1569ab6ae0ea7b90b4b7d8dbb846296cf7fc68b24be78b7b95993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 28 Mar 2023 08:27:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-25516484-1
142.250.74.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-25516484-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (2206)
Hash 63eb2044ddb49f58d3ea84641dfc3c32
c418a6a2e7d459a102963182191db6ffa678b0c7
4561a837f44642f12fc0f7212f6ef65d749b864c2c5ed364aa67d2bc563a6aac
GET /gtag/js?id=UA-25516484-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Mar 2023 08:27:16 GMT
expires: Tue, 28 Mar 2023 08:27:16 GMT
cache-control: private, max-age=900
last-modified: Tue, 28 Mar 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44875
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rapidgator.net/javascript/main.js?v=1
195.211.222.2200 OK 3.5 kB URL HTTP/1.1 rapidgator.net/javascript/main.js?v=1
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type HTML document, ASCII text, with very long lines (332)
Hash f5a8a0968300075dc21775f7236ea73f
1e8bb2f7954c7882eaa2077b7ef3ab993b276b59
d7ca9c29f613f5b3f3d96baa7501d819e8f938627b35a02be3e7bbd26a266b47
GET /javascript/main.js?v=1 HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: application/javascript
Content-Length: 3478
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-d96"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
s7.addthis.com/js/250/addthis_widget.js
23.38.200.123200 OK 116 kB URL HTTP/2 s7.addthis.com/js/250/addthis_widget.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (54602)
Size 116 kB (116332 bytes)
Hash c8d737e60bdacba7881311502080326f
dd80ca62ff99c01e84b9821ed22256c65870f3e5
0a2920847187f38e6f526a7e7eb20ec40fb7f37f56338de0c5e0e757f73ca8cc
GET /js/250/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116332
x-check-cacheable: YES
date: Tue, 28 Mar 2023 08:27:16 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
rapidgator.net/javascript/ddsmoothmenu.js
195.211.222.2200 OK 8.2 kB URL HTTP/1.1 rapidgator.net/javascript/ddsmoothmenu.js
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
Hash ef63b38871c7edd0ed4e6570747bf8b2
e26838dcb5da524ded88649a901f36224729aa19
ea15f051447be1dd759326fac4d1fd7ea5dd372fcb74397247c3f126e36c4f3d
GET /javascript/ddsmoothmenu.js HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: application/javascript
Content-Length: 8199
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:53 GMT
ETag: "641c19b9-2007"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
shield.sitelock.com/shield/www.rapidgator.net
45.60.14.54200 OK 35 B URL HTTP/1.1 shield.sitelock.com/shield/www.rapidgator.net
IP 45.60.14.54:0
File type GIF image data, version 87a, 1 x 1\012- data
Hash 04d590ce36fcc6369f590ccfb7409e57
a3a71e8194f5541400b26be34f791d106f33256e
b18c315b986e7bcf03bbfff949dd65345f4cbabeec5267ade74c354d73cf5e28
GET /shield/www.rapidgator.net HTTP/1.1
Host: shield.sitelock.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Etag: "4435dfb4"
Content-Type: image/gif; charset=ISO-8859-1
Content-Length: 35
Cache-Control: max-age=5400, public
Expires: Tue, 28 Mar 2023 09:57:15 GMT
Date: Tue, 28 Mar 2023 08:27:15 GMT
Set-Cookie: visid_incap_275317=XABGmB7DRQidWQxy70D5cOOkImQAAAAAQUIPAAAAAAAzoPNnbGuomKevZPS/CsBv; expires=Tue, 26 Mar 2024 22:28:11 GMT; HttpOnly; path=/; Domain=.sitelock.com
incap_ses_277_275317=VGmcGAJqpkzM3If8mhrYA+OkImQAAAAAZtcaWp3oQ6OoiVa3XP4qXw==; path=/; Domain=.sitelock.com
X-CDN: Imperva
X-Iinfo: 14-61056730-0 0CNN RT(1679992035641 15) q(0 -1 -1 0) r(0 -1)
rapidgator.net/images/bg-container.png
195.211.222.2200 OK 1.0 kB URL HTTP/1.1 rapidgator.net/images/bg-container.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 1 x 87, 8-bit/color RGB, non-interlaced\012- data
Hash 29418410fd80eb164fcd91fe09359e5f
40d0e752ad8d6196ae5296214097ee3aaadf9175
0aed7cfee78afe98d62db924b1e5e3f9ae2bda533c92807faa1e17fa99983fe9
GET /images/bg-container.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 1018
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-3fa"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/logo.png
195.211.222.2200 OK 6.6 kB URL HTTP/1.1 rapidgator.net/images/logo.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 211 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 9bbd9c0c6a2daed0d20f0217cfe79be1
a3e6a46a342e21dfc18817890845b68afca88b0b
ea0bb4704af0c29d3d3ce57bcac18f0b2ba7f48c883c17ead607aad79a7fdeba
GET /images/logo.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 6587
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-19bb"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Tue, 28 Mar 2023 08:27:16 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
rapidgator.net/images/bullet-menu.png
195.211.222.2200 OK 980 B URL HTTP/1.1 rapidgator.net/images/bullet-menu.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 2 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash 2955fac6d3f59ef6d498bc7bd29d95c0
7883486247a8ec121d2b3dd62b03928a22ca0ca0
bcb89cc1e454d1aea6910543616a609a7403e824152805270db6957f0f168ca9
GET /images/bullet-menu.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 980
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-3d4"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/bg-lang.gif
195.211.222.2200 OK 1.5 kB URL HTTP/1.1 rapidgator.net/images/bg-lang.gif
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type GIF image data, version 89a, 111 x 24\012- data
Hash 913c8600c457c46f7bdfc55b283526d8
463c39c1312050249afca0de379efb38ece6a553
ed384949fb1a2f7ab73434ee7aefef6d1e10702256d5e401b0b77d151017322b
GET /images/bg-lang.gif HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/gif
Content-Length: 1485
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-5cd"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/bg-overall.png
195.211.222.2200 OK 993 B URL HTTP/1.1 rapidgator.net/images/bg-overall.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 1 x 115, 8-bit/color RGB, non-interlaced\012- data
Hash 2e6768af67675b2d5c95f614715234f0
3c555c37c4bc01bce5d65b41af04710ba4b334a2
63533c1e204db801dd8676f8fbc475f569bb75dbdc16f79524ec3d786908dc5a
GET /images/bg-overall.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 993
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-3e1"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/pics/Ukraine_help_728x90.jpg
195.211.222.2200 OK 40 kB URL HTTP/1.1 rapidgator.net/images/pics/Ukraine_help_728x90.jpg
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.1 (Windows), datetime=2022:03:20 07:29:06], baseline, precision 8, 728x90, components 3\012- data
Hash ea4b8d7216a8b6fe39edd76b64115b00
5a280df11dd884c4b8ef357820ed97b4ef9bae44
beac6111fa0645457ff78ce701f785b873e24cc3bcd58115e7f43513029ef200
GET /images/pics/Ukraine_help_728x90.jpg HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/jpeg
Content-Length: 39954
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-9c12"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/bg-body.gif
195.211.222.2200 OK 1.1 kB URL HTTP/1.1 rapidgator.net/images/bg-body.gif
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type GIF image data, version 89a, 960 x 1\012- data
Hash cb9e3627104ebdc009e9d40350b52532
ee22cc4dd00e57ad6f1f09da529086e96e28c027
25f3c4bdd947da25e9b14ee0dec20ea1057741a46ebd00146d375d841dbfe822
GET /images/bg-body.gif HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/gif
Content-Length: 1120
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:53 GMT
ETag: "641c19b9-460"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3be2c51b473bf90eef83ce03d48d91cb
21bcfecb44ddcd184df569130140b9a9fd0d189c
9f816aec1db140fd860a1af796ebae0219880b0277da254bfad554baaa7e83d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9F816AEC1DB140FD860A1AF796EBAE0219880B0277DA254BFAD554BAAA7E83D7"
Last-Modified: Tue, 28 Mar 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14792
Expires: Tue, 28 Mar 2023 12:33:48 GMT
Date: Tue, 28 Mar 2023 08:27:16 GMT
Connection: keep-alive
system-notify.app/f/sdk.js?z=557832
157.90.33.121200 OK 14 kB URL HTTP/2 system-notify.app/f/sdk.js?z=557832
IP 157.90.33.121:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (52267), with no line terminators
Hash 9a0eedbcee20a37d4d1871d53adbaf0a
6054509179bdaa11e0fa1164bc0ca3c476661008
39f72e51045832dd73e8fddd7ed66d0a19e2efb8295e8299daf6f52c4c87568a
GET /f/sdk.js?z=557832 HTTP/1.1
Host: system-notify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 28 Mar 2023 08:27:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 14468
content-encoding: gzip
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
rapidgator.net/images/bg-arrow.gif
195.211.222.2200 OK 1.6 kB URL HTTP/1.1 rapidgator.net/images/bg-arrow.gif
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type GIF image data, version 89a, 53 x 54\012- data
Hash a2325795227be2b0975e6514c8ee90bd
9f7a279cbcee7b66d5f796f355f0891db15504f9
e5035ecf70fb2a93116a19b6085eb51a2dff7075177a146bc3c87e3b1cf6d4dc
GET /images/bg-arrow.gif HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/gif
Content-Length: 1578
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-62a"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/ico-file-descr.png
195.211.222.2200 OK 1.6 kB URL HTTP/1.1 rapidgator.net/images/ico-file-descr.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced\012- data
Hash 707a798fb603cdb021c03ef7946980f7
b96fa70c0b3e6945617f127bbef157f700cf2d56
63ffad9ba7f33fa98cd47b2cf53eef892ce2657a05b7fc1f41dad5739def8869
GET /images/ico-file-descr.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 1584
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:53 GMT
ETag: "641c19b9-630"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/bg-header.png
195.211.222.2200 OK 8.7 kB URL HTTP/1.1 rapidgator.net/images/bg-header.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 960 x 86, 8-bit/color RGB, non-interlaced\012- data
Hash 4d6156185c824d04931d4f2e84fbb531
37cece9975fe345f2e4ed73ba5618e96c517b50c
4ae32fcd62b3ed023a1d3c75ab006cbd99e176fdbdfe58d209a32cfad23507d2
GET /images/bg-header.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 8685
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-21ed"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/table-download-top.gif
195.211.222.2200 OK 2.2 kB URL HTTP/1.1 rapidgator.net/images/table-download-top.gif
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type GIF image data, version 89a, 682 x 70\012- data
Hash 5d741d738dbf8d1f07e750af0a4ac957
7105cf525f604c7c303d721d40b84a9142a6797d
40f69c64db0f41bb81ce10b51fcd17f6a7966f8e0da20aff9a6be9cdb121d8d2
GET /images/table-download-top.gif HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/gif
Content-Length: 2192
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-890"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/table-download-bg.gif
195.211.222.2200 OK 1.2 kB URL HTTP/1.1 rapidgator.net/images/table-download-bg.gif
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type GIF image data, version 89a, 682 x 1\012- data
Hash a2592f675e98a65d91e182c20ae5dd68
9e0b57dd07893d8fbd562f607644d8df1c9b7992
edaf046e26dfcbcb9fa242f36cbbe413e7fba2dc14681625c3afa50270ee7560
GET /images/table-download-bg.gif HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/gif
Content-Length: 1160
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-488"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
system-notify.app/event?z=557832
157.90.33.121200 OK 0 B URL HTTP/2 system-notify.app/event?z=557832
IP 157.90.33.121:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event?z=557832 HTTP/1.1
Host: system-notify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 82
Origin: https://rapidgator.net
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Mar 2023 08:27:16 GMT
content-length: 0
access-control-allow-origin: https://rapidgator.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
rapidgator.net/images/ico-clock.jpg
195.211.222.2200 OK 2.5 kB URL HTTP/1.1 rapidgator.net/images/ico-clock.jpg
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 34x33, components 3\012- data
Hash 5e658cbb5b31410a2a2fc0061f140097
3fcac95aafd2437ec362928d7efac7111d5c949e
7f82961669ce4acb6bbf82509c96970b89c978b379731b0cf7f281ae8f1d5b35
GET /images/ico-clock.jpg HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/jpeg
Content-Length: 2474
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:53 GMT
ETag: "641c19b9-9aa"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/btn-download.png
195.211.222.2200 OK 1.8 kB URL HTTP/1.1 rapidgator.net/images/btn-download.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 154 x 56, 8-bit/color RGB, non-interlaced\012- data
Hash 3a425843ad2524d907df9a065831ece3
ff1b908fdbb1bf4af072a024831af8126d4be898
67b2955b0d6f46fefa03fd9fe6d35771c24a48e8c81f483e0c014a9efa33fcec
GET /images/btn-download.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 1825
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-721"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/ico-avaliable.png
195.211.222.2200 OK 1.4 kB URL HTTP/1.1 rapidgator.net/images/ico-avaliable.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 16 x 15, 8-bit/color RGB, non-interlaced\012- data
Hash 88290f6da2658cf152587fc4c2b0e3cc
44103200973f8d932ce352920cd8065e3e08c9a1
45381fd6aee333ea4e922a2d6ced93b88afaa1f29111d3035c7f81250229f445
GET /images/ico-avaliable.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 1354
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-54a"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
rapidgator.net/images/ico-not-avaliable.png
195.211.222.2200 OK 1.3 kB URL HTTP/1.1 rapidgator.net/images/ico-not-avaliable.png
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type PNG image data, 16 x 15, 8-bit/color RGB, non-interlaced\012- data
Hash cc4320e0ba0c2d706061b1fc27fa936b
1536b1cb885063a16ebf98dbea14334755d8d637
822307a18c83ccb5932e23826f2afe7955705a09ede9193d26a662961b772f7c
GET /images/ico-not-avaliable.png HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/css/all.css?v=26
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/png
Content-Length: 1348
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:53 GMT
ETag: "641c19b9-544"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 5de0e72dd0c657fafb33eddf5a71974b
a8c3cd456818fe12ea1ab537b0fd23cc44dd392b
aea44cb74b3695d9c08e04ebb7b9ee736dda72c69c1cfc4224543c60c1265e0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 27 Mar 2023 19:28:23 GMT
Expires: Mon, 03 Apr 2023 19:28:22 GMT
Etag: "a8c3cd456818fe12ea1ab537b0fd23cc44dd392b"
Cache-Control: max-age=557465,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7aee7e359da51bfe-OSL
z.moatads.com/addthismoatframe568911941483/moatframe.js
23.38.201.146200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP 23.38.201.146:0
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=15698
date: Tue, 28 Mar 2023 08:27:16 GMT
X-Firefox-Spdy: h2
rapidgator.net/favicon.ico
195.211.222.2200 OK 3.1 kB URL HTTP/1.1 rapidgator.net/favicon.ico
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
File type MS Windows icon resource - 2 icons, 16x16, 24 bits/pixel, 32x32, 8 bits/pixel\012- data
Hash cf1faa2e6cdf8c78f971d5927d28dd99
ec9454d0ef9fa07eb9dd38d44131574fbb4f84ea
9cd57803d93fbd183de40d1007606a3c30f90fc82a205c7abf4c12d322b7c144
GET /favicon.ico HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D; __atuvc=1%7C13; __atuvs=6422a4f8c65f8d0a000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: image/x-icon
Content-Length: 3126
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:52 GMT
ETag: "641c19b8-c36"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes
uidsync.net/sync?user_id=9BBvvMEFz04K4uUegY1481
157.90.33.122204 No Content 0 B URL HTTP/2 uidsync.net/sync?user_id=9BBvvMEFz04K4uUegY1481
IP 157.90.33.122:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?user_id=9BBvvMEFz04K4uUegY1481 HTTP/1.1
Host: uidsync.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://rapidgator.net/
Origin: https://rapidgator.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0
HTTP/2 204 No Content
server: nginx
date: Tue, 28 Mar 2023 08:27:16 GMT
access-control-allow-origin: https://rapidgator.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
216.58.207.206200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.58.207.206:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 28 Mar 2023 08:05:11 GMT
expires: Tue, 28 Mar 2023 10:05:11 GMT
cache-control: public, max-age=7200
age: 1325
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1072740936&t=pageview&_s=1&dl=https%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&ul=en-us&de=UTF-8&dt=Download%20file%20MahoukaKoukou_Kotonairan_02-05.rar&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=2021651589&gjid=362598532&cid=1208912818.1679992057&tid=UA-25516484-1&_gid=281064515.1679992057&_r=1>m=457e33r0&jsscut=1&z=766149885
216.58.207.206200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1072740936&t=pageview&_s=1&dl=https%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&ul=en-us&de=UTF-8&dt=Download%20file%20MahoukaKoukou_Kotonairan_02-05.rar&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=2021651589&gjid=362598532&cid=1208912818.1679992057&tid=UA-25516484-1&_gid=281064515.1679992057&_r=1>m=457e33r0&jsscut=1&z=766149885
IP 216.58.207.206:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j99&a=1072740936&t=pageview&_s=1&dl=https%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&ul=en-us&de=UTF-8&dt=Download%20file%20MahoukaKoukou_Kotonairan_02-05.rar&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=2021651589&gjid=362598532&cid=1208912818.1679992057&tid=UA-25516484-1&_gid=281064515.1679992057&_r=1>m=457e33r0&jsscut=1&z=766149885 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://rapidgator.net
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://rapidgator.net
date: Tue, 28 Mar 2023 08:27:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/xa-4f1d3bb56c6cc840/_ate.track.config_resp
23.38.200.123200 OK 47 B URL HTTP/2 v1.addthisedge.com/live/boost/xa-4f1d3bb56c6cc840/_ate.track.config_resp
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 24c668b115f75423506f2ea21d1b49c2
14f956ddb2d9e8b072cd5f605c3f39526490b391
b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16
GET /live/boost/xa-4f1d3bb56c6cc840/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=45, s-maxage=86400
date: Tue, 28 Mar 2023 08:27:16 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 5de0e72dd0c657fafb33eddf5a71974b
a8c3cd456818fe12ea1ab537b0fd23cc44dd392b
aea44cb74b3695d9c08e04ebb7b9ee736dda72c69c1cfc4224543c60c1265e0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 27 Mar 2023 19:28:23 GMT
Expires: Mon, 03 Apr 2023 19:28:22 GMT
Etag: "a8c3cd456818fe12ea1ab537b0fd23cc44dd392b"
Cache-Control: max-age=557465,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7aee7e359f6b1c06-OSL
m.addthis.com/live/red_lojson/300lo.json?si=6422a4f80bfb0b8e&bkl=0&bl=1&pdt=274&sid=6422a4f80bfb0b8e&pub=xa-4f1d3bb56c6cc840&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=rapidgator.net&fp=file%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Download%20MahoukaKoukou_Kotonairan_02-05.rar%2Cfile%20hosting%2Ccloud%20hosting%2Csafe%20and%20secure%20hosting%2Cfile%20sharing&colc=1679992056439&jsl=1&uvs=6422a4f8c65f8d0a000&skipb=1&callback=addthis.cbs.jsonp__13882411383542860
23.38.200.123200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=6422a4f80bfb0b8e&bkl=0&bl=1&pdt=274&sid=6422a4f80bfb0b8e&pub=xa-4f1d3bb56c6cc840&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=rapidgator.net&fp=file%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Download%20MahoukaKoukou_Kotonairan_02-05.rar%2Cfile%20hosting%2Ccloud%20hosting%2Csafe%20and%20secure%20hosting%2Cfile%20sharing&colc=1679992056439&jsl=1&uvs=6422a4f8c65f8d0a000&skipb=1&callback=addthis.cbs.jsonp__13882411383542860
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 52b1248d5f74b59e2319d83c7aa7e1f7
732ab4fac5f76dc38237815e8bec138128b7ee2f
6a42fd924fe94be09e2cadb6ec6d51c2e6b7dde8d061c5de703ea98437d3004e
GET /live/red_lojson/300lo.json?si=6422a4f80bfb0b8e&bkl=0&bl=1&pdt=274&sid=6422a4f80bfb0b8e&pub=xa-4f1d3bb56c6cc840&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=rapidgator.net&fp=file%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Download%20MahoukaKoukou_Kotonairan_02-05.rar%2Cfile%20hosting%2Ccloud%20hosting%2Csafe%20and%20secure%20hosting%2Cfile%20sharing&colc=1679992056439&jsl=1&uvs=6422a4f8c65f8d0a000&skipb=1&callback=addthis.cbs.jsonp__13882411383542860 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Tue, 28 Mar 2023 08:27:16 GMT
X-Firefox-Spdy: h2
uidsync.net/sync?user_id=9BBvvMEFz04K4uUegY1481
157.90.33.122200 OK 62 B URL HTTP/2 uidsync.net/sync?user_id=9BBvvMEFz04K4uUegY1481
IP 157.90.33.122:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b46fd259bec7ac56a1bd5a8a810b75e
e68695ee35f1537ae5d5120be60f7b952a7a66fd
b58cc499353f0adc9f7014ba58489f83e051daa27c8c3f1e3ce49d7d39ae8559
GET /sync?user_id=9BBvvMEFz04K4uUegY1481 HTTP/1.1
Host: uidsync.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rapidgator.net/
Content-Type: application/json
Origin: https://rapidgator.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Mar 2023 08:27:16 GMT
content-type: application/json; charset=utf-8
content-length: 62
access-control-allow-origin: https://rapidgator.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
set-cookie: rauid=9BBvvMEFz04K4uUegY1481; expires=Wed, 27 Mar 2024 08:27:16 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
s7.addthis.com/static/counter.d27508c102582d608697.js
23.38.200.123200 OK 8.3 kB URL HTTP/2 s7.addthis.com/static/counter.d27508c102582d608697.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (24530), with no line terminators
Hash 47fcfb824ad738c29e3195451d5c755e
8a955f27a30f4a8c9cde94567c041040e3c60d61
1508b4ae159e51231031ce58f3a5c31aca11a438f4ea3c12ea3581bbc97f4305
GET /static/counter.d27508c102582d608697.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5fd2"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 8265
date: Tue, 28 Mar 2023 08:27:16 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=https%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&callback=_ate.cbs.sc_httpsrapidgatornetfileaf3485737427d30077ca40aa4be1e266refererhttp13dlnet0
23.38.200.123200 OK 111 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=https%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&callback=_ate.cbs.sc_httpsrapidgatornetfileaf3485737427d30077ca40aa4be1e266refererhttp13dlnet0
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash bf55aeafa37dab169567beadf0ecc24f
284a86401959e45ca1c67a00bb0319f7e2699076
7e8dbc46b2cae8e0050e59f4cf2a338b44e3468663c581096cd3afc4e3017d36
GET /url/shares.json?url=https%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net&callback=_ate.cbs.sc_httpsrapidgatornetfileaf3485737427d30077ca40aa4be1e266refererhttp13dlnet0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: rapidgator.net/file/af3485737427d30077ca40aa4be1e266?referer=http://13dl.net
last-modified: Tue, 28 Mar 2023 08:27:17 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 111
date: Tue, 28 Mar 2023 08:27:17 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
rapidgator.net/javascript/jquery-3.4.1.min.js
195.211.222.2200 OK 0 B URL HTTP/1.1 rapidgator.net/javascript/jquery-3.4.1.min.js
IP 195.211.222.2:0
ASN #50098 DDoS Protection LTD.
GET /javascript/jquery-3.4.1.min.js HTTP/1.1
Host: rapidgator.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rapidgator.net/file/af3485737427d30077ca40aa4be1e266?Referer=http://13dl.net
Cookie: lang=en; PHPSESSID=clqs9q5dfqe4l9is1jqslpd2fe; download_url=http%3A%2F%2Frapidgator.net%2Ffile%2Faf3485737427d30077ca40aa4be1e266%3FReferer%3Dhttp%3A%2F%2F13dl.net; buyed_from_dl=1; file_id=717639069; __token=Wm5ianRoSXFsdkF1U2E4RlhsU2QzMX45SFVEfjA4SHo75vB86hsRCuW2awv_SrcbA1y79bFb7XtQconWhT8zgw%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Mar 2023 08:27:16 GMT
Content-Type: application/javascript
Content-Length: 88145
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:53 GMT
ETag: "641c19b9-15851"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Accept-Ranges: bytes