papaflix.stream/
188.114.97.1301 Moved Permanently 0 B IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: papaflix.stream
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 21 Dec 2022 02:35:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 21 Dec 2022 03:35:21 GMT
Location: https://papaflix.stream/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7OX%2B94GxBJKkiAW%2Fg%2F8vLTb4EHopfnx9rlUzY8AG1wXcg%2FEivvH4scah3Gcglz%2BIS5SshnL%2BTEuLm%2BfzLg1MEaA4J9Kvgd54oGVs1MdB2qOLAfzx1Nr9EDG8bZp10vNKgRk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77cd39513dbfb518-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash bbea1550fedd5eb9c265712fab75b137
2c2f981747898a380265f766345f2bb9c8c983fd
c728286e38c31a4d3f7a39702e0a5f69c14bf69e01a88bc4479714953fbda278
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C728286E38C31A4D3F7A39702E0A5F69C14BF69E01A88BC4479714953FBDA278"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12753
Expires: Wed, 21 Dec 2022 06:07:54 GMT
Date: Wed, 21 Dec 2022 02:35:21 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b8fbcd7ca1a893d05677318a8a198e7a
0851654c21f6e3741887e7deab8098c1dc56f33c
edbade5913ace2fcbb932922e9af69acb2e8759474a2eeaec216307247fea361
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDBADE5913ACE2FCBB932922E9AF69ACB2E8759474A2EEAEC216307247FEA361"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13876
Expires: Wed, 21 Dec 2022 06:26:37 GMT
Date: Wed, 21 Dec 2022 02:35:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 21 Dec 2022 02:34:33 GMT
content-type: application/json
age: 48
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash cf03270e3476f7482a2cc7ddc6a9e857
ab70d5ee87b01e0601f8e518bf36f97c8ceeba9a
43a4e796860a1481636dac103488cadc68c261d13cfe835d273efc368e569f97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43A4E796860A1481636DAC103488CADC68C261D13CFE835D273EFC368E569F97"
Last-Modified: Sun, 18 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3926
Expires: Wed, 21 Dec 2022 03:40:47 GMT
Date: Wed, 21 Dec 2022 02:35:21 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sS+sHwEcuP5usmoY7EqJvi5Aklvkk9IbKjlZ2JcuRvAYyXAwl9DyS5Ib/7qLkFA30FPURH17lTU=
x-amz-request-id: 1QNTT9YMCH42ZXRG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 21 Dec 2022 02:29:41 GMT
age: 340
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 346 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a5970487b293df2aedecdf7050f579c4
e8a737d62c665f183b59edcbecd8bda405ef610b
0ce99796ed2ae7b832d856914d17bd3c38d0ce9fb336e73c9af39c749c22d1f7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "0CE99796ED2AE7B832D856914D17BD3C38D0CE9FB336E73C9AF39C749C22D1F7"
Last-Modified: Tue, 20 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2109
Expires: Wed, 21 Dec 2022 03:10:30 GMT
Date: Wed, 21 Dec 2022 02:35:21 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Dec 2022 02:35:21 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 346 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a5970487b293df2aedecdf7050f579c4
e8a737d62c665f183b59edcbecd8bda405ef610b
0ce99796ed2ae7b832d856914d17bd3c38d0ce9fb336e73c9af39c749c22d1f7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "0CE99796ED2AE7B832D856914D17BD3C38D0CE9FB336E73C9AF39C749C22D1F7"
Last-Modified: Tue, 20 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2109
Expires: Wed, 21 Dec 2022 03:10:30 GMT
Date: Wed, 21 Dec 2022 02:35:21 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c92a63593449265941bccd2401ec3927
09bd5c279a11c5067d75300053d70e4e678d7140
a137e34a2d19637a6fe63ba801ce97be1ded72584f8a90798b4c0910526a4429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Dec 2022 02:35:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-230856302-1
142.250.74.40200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-230856302-1
IP 142.250.74.40:0
File type ASCII text, with very long lines (1921)
Hash fa3195f2e635b7aa681b7a3b70bf7f14
710d1b752103b4f05fd52ad26410d4a9790c771a
25676c2a1aaa1c81a4ac9aec7ccc9d19ee246b4936537ff9c259d81ae203f9b4
GET /gtag/js?id=UA-230856302-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Dec 2022 02:35:21 GMT
expires: Wed, 21 Dec 2022 02:35:21 GMT
cache-control: private, max-age=900
last-modified: Wed, 21 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43578
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 21 Dec 2022 02:33:24 GMT
age: 117
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c92a63593449265941bccd2401ec3927
09bd5c279a11c5067d75300053d70e4e678d7140
a137e34a2d19637a6fe63ba801ce97be1ded72584f8a90798b4c0910526a4429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Dec 2022 02:35:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d0c2b6760f2b58f445446dd2276d5af4
aeedf417b1ebde86ce837ca02ba934abb938b1a4
8fe72d0ce839150559da5ddf46bf87d26b6b9cbe34d09641b29a53be24997c81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6144
Cache-Control: max-age=116033
Content-Type: application/ocsp-response
Date: Wed, 21 Dec 2022 02:35:22 GMT
Etag: "63a17b2b-1d7"
Expires: Thu, 22 Dec 2022 10:49:15 GMT
Last-Modified: Tue, 20 Dec 2022 09:06:51 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
image.tmdb.org/t/p/w500/nxbQLpCm78w5UHOyLrnkFJVCY7p.jpg
54.230.111.45200 OK 59 kB URL HTTP/2 image.tmdb.org/t/p/w500/nxbQLpCm78w5UHOyLrnkFJVCY7p.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 5a627e03949e921022304d1a66ea68dd
2e7fa0e15f1d12e7666230842f6f3df40b1d382c
ec6da053148c0be824f2ed4057006daeb24c4d307d4ac764e70e48a140db9a32
GET /t/p/w500/nxbQLpCm78w5UHOyLrnkFJVCY7p.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 59263
date: Thu, 01 Dec 2022 17:46:21 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "8d426500e60f97ce89104e1b6dff1d3d"
last-modified: Thu, 01 Dec 2022 17:45:19 GMT
imagery: degrade=85, sample=2x2, difference=1.005
cache-tag: nxbQLpCm78w5UHOyLrnkFJVCY7p
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sqzVXGDH4i_JIp3UWqU8VAU7J7d2CKMtez2y2aeKthpnoTz2SDYCMw==
age: 1673341
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/kgmfnxNdJy9N4ejrBfrkf6iNSjq.jpg
54.230.111.45200 OK 43 kB URL HTTP/2 image.tmdb.org/t/p/w500/kgmfnxNdJy9N4ejrBfrkf6iNSjq.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 4487a100670ce33209e7ab4195db91e9
01a891e32565c695239aade2c17d8807043150f4
776a44e07838d34524236b0bfbb8436a90f58c97c9655aa33a458d98a0d23be5
GET /t/p/w500/kgmfnxNdJy9N4ejrBfrkf6iNSjq.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 42929
date: Sun, 11 Dec 2022 07:40:16 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "9be1484c465983ce79a14c47b905eb79"
last-modified: Wed, 14 Sep 2022 12:16:51 GMT
imagery: degrade=77, sample=2x2, difference=1.07
cache-tag: kgmfnxNdJy9N4ejrBfrkf6iNSjq
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: B8sQspMlSdkJwt2X3lG2qBsU5vJZyozwimHHGzux2khpVl1UI6J2JQ==
age: 845706
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/sFLBmaQcUDSz87bL7UlkE8oVumm.jpg
54.230.111.45200 OK 51 kB URL HTTP/2 image.tmdb.org/t/p/w500/sFLBmaQcUDSz87bL7UlkE8oVumm.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash e704bc01992c6e5911f17e3d1477bcf8
2045b53522f8cc7ce4b46d1c833a82f9f212c42d
15a1529812922127a1a4272b0c639daf48ebfc1e79db373eb76ba2ec0dd9fb8b
GET /t/p/w500/sFLBmaQcUDSz87bL7UlkE8oVumm.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 50995
date: Sun, 11 Sep 2022 17:35:58 GMT
server: openresty
last-modified: Sun, 11 Sep 2022 16:39:58 GMT
cache-control: max-age=31449600
etag: "88d762c31af9db0a652d53d68138d66b"
expires: Sun, 10 Sep 2023 17:35:58 GMT
x-rack-cache: fresh
x-content-digest: 2045b53522f8cc7ce4b46d1c833a82f9f212c42d
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 56hOy-dKrb_hY7qWZ3wRrlrLLveJpqSfkQXLKuUm65x6UWVS8z-ywA==
age: 8672364
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/dgYFcMUOojIeK7jZEjkjK3tOqTe.jpg
54.230.111.45200 OK 51 kB URL HTTP/2 image.tmdb.org/t/p/w500/dgYFcMUOojIeK7jZEjkjK3tOqTe.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash fe941b3354c690b39dd6f8903d336ebd
21d85ce9464d206dddba163f3a3922db5cb15694
8d78103b6e1adadaee00af2f77fefd262b926a1cef0e2ca2bef2fa660364deb0
GET /t/p/w500/dgYFcMUOojIeK7jZEjkjK3tOqTe.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 51156
date: Thu, 08 Dec 2022 23:37:41 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "995831813f069677229a208911fd9c36"
last-modified: Tue, 04 Jan 2022 06:56:28 GMT
imagery: degrade=75, sample=2x2, difference=1.311
cache-tag: dgYFcMUOojIeK7jZEjkjK3tOqTe
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: gYw86Jh0Nkz3sn6hbfcFQ6VPvfwwZCK6lCeZnZVpUwQwFsFM9pqB8A==
age: 1047461
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/oevemGPVzo2qB6ttQGfgagqSG43.jpg
54.230.111.45200 OK 58 kB URL HTTP/2 image.tmdb.org/t/p/w500/oevemGPVzo2qB6ttQGfgagqSG43.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 133d1e70db865dadf8a1f9e019d0a6ee
e7e54e25da184fcf561785b780e156711677cc48
888fda2773fc7df1bb5969a40012f2ced406300f1d277f13e4616042e9d217ae
GET /t/p/w500/oevemGPVzo2qB6ttQGfgagqSG43.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 58272
date: Fri, 16 Dec 2022 19:45:27 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "b26de7051d3fe3f66e96b0f5ef7302c0"
last-modified: Fri, 16 Dec 2022 15:23:55 GMT
imagery: degrade=75, sample=2x2, difference=1.31
cache-tag: oevemGPVzo2qB6ttQGfgagqSG43
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FDhdkBdogb-6Joc0lk_CQueQYVNjKL8khDPqhTwzEZ8wl-t4LuWe2A==
age: 370195
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/6iKHIkBmYxIbIsXwZFbx3dY68m4.jpg
54.230.111.45200 OK 56 kB URL HTTP/2 image.tmdb.org/t/p/w500/6iKHIkBmYxIbIsXwZFbx3dY68m4.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 0c62550b3c8a0f15c9e899c86513e9c0
e591cde3f5214340508698a6c51221db6131604b
0189b639af5f5cdad606a6d855ddae0fac5492be97d9da03ce2c7b48e7bdbd56
GET /t/p/w500/6iKHIkBmYxIbIsXwZFbx3dY68m4.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 55727
date: Wed, 30 Nov 2022 03:54:07 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "c04779a61a081eaa06103347760be6d6"
last-modified: Wed, 09 Nov 2022 11:16:12 GMT
imagery: degrade=79, sample=2x2, difference=1.123
cache-tag: 6iKHIkBmYxIbIsXwZFbx3dY68m4
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 0Rc-nWLEpPvcJJgEOPB7-Nc28dr8r_Mx_VhxH2tjZWaUzpQZsyiK9Q==
age: 1809675
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/6EPIQ9DpGEkS9ML2Jn9Ap8UmxSP.jpg
54.230.111.45200 OK 72 kB URL HTTP/2 image.tmdb.org/t/p/w500/6EPIQ9DpGEkS9ML2Jn9Ap8UmxSP.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 613b33abd9dd47dc29ac13477dc3c23b
8bae1e47e5ec6d00a06db3910535fd4b61ee8fff
80d8120acfd517443fb39154b4ba369c03c8fa525e860b920b3a98ee6c3eb48b
GET /t/p/w500/6EPIQ9DpGEkS9ML2Jn9Ap8UmxSP.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 72121
date: Tue, 13 Dec 2022 15:36:17 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "55a65ab2684bd3019a1e1a791ebcd6a9"
last-modified: Tue, 13 Dec 2022 14:43:55 GMT
imagery: degrade=85, sample=2x2, difference=1.022
cache-tag: 6EPIQ9DpGEkS9ML2Jn9Ap8UmxSP
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NIDGitC5GxkQjDNFPRA_nT5V9RqOQDOPsL6OJAIvSBGfpLYIf6EwGw==
age: 644345
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/6pHkt81gCdR3bw41xHyzsoQccrj.jpg
54.230.111.45200 OK 111 kB URL HTTP/2 image.tmdb.org/t/p/w500/6pHkt81gCdR3bw41xHyzsoQccrj.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Size 111 kB (111088 bytes)
Hash 1cf621d5153fa628e5c8fc6e4426caf3
26931853be50aca78f9808098ccdba02fa5c53a9
c7604050fedc27d230fcb894593250c5c4fbf8369b5e08fb2fa5fb30b6b86a09
GET /t/p/w500/6pHkt81gCdR3bw41xHyzsoQccrj.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 111088
date: Thu, 08 Dec 2022 22:17:52 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "c39b0ec1c3a698661f39d12e8082814c"
last-modified: Wed, 20 Jul 2022 14:30:51 GMT
imagery: degrade=85, sample=2x2, difference=1.075
cache-tag: 6pHkt81gCdR3bw41xHyzsoQccrj
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: z8FgSA4tgn7t4GvLcQa5ixpiLBWPqCIaFY4rKvLJ38l-NFLsnyskfQ==
age: 1052250
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w185/5OraelgNFyWnwpR2ETi8wNV0YyA.jpg
54.230.111.45200 OK 5.3 kB URL HTTP/2 image.tmdb.org/t/p/w185/5OraelgNFyWnwpR2ETi8wNV0YyA.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x104, components 3\012- data
Hash 401244c4bf687cc80cdb8aef81fac5ed
edb38ad27546aa0e09d0c258758df95d51640c6a
1dce3b0cbbd41b1397ab25502f5e03f9e1b65c1036c32f4ac5bd55a6e4ce6116
GET /t/p/w185/5OraelgNFyWnwpR2ETi8wNV0YyA.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5335
date: Fri, 16 Dec 2022 08:52:10 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "c157a838cc07eb3d76349f8c5830fdce"
last-modified: Fri, 16 Dec 2022 00:37:48 GMT
imagery: degrade=77, sample=2x2, difference=1.109
cache-tag: 5OraelgNFyWnwpR2ETi8wNV0YyA
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: PqbulCVrVTTF0EQPseQqD8CXZ1eIZbgOuA6_ctJrDBKktBy-zYoDog==
age: 409392
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/mLbFg0u2DPYuB5CILzwWk3kdI8b.jpg
54.230.111.45200 OK 84 kB URL HTTP/2 image.tmdb.org/t/p/w500/mLbFg0u2DPYuB5CILzwWk3kdI8b.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash e8925be91eb96808558f908ba99e4857
60706e53b32709998f90a4b3514579910f263e19
a98bd154a2e909eb1db8cbcb0835e6d5fb9411c1da25d5e6dd9159cb2a427621
GET /t/p/w500/mLbFg0u2DPYuB5CILzwWk3kdI8b.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 84072
date: Fri, 16 Dec 2022 22:28:43 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "229a68425b843e9dc052117135332089"
last-modified: Fri, 16 Dec 2022 22:24:17 GMT
imagery: degrade=85, sample=2x2, difference=1.041
cache-tag: mLbFg0u2DPYuB5CILzwWk3kdI8b
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: cxMEfTGcYRhwi3wd8Z9s7EMXQkhG4uf5-egPdPEwaG9o8iSUUCYMgA==
age: 360399
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w185/R3ldSFqS3nAMlviv7iQzJ2E1h5.jpg
54.230.111.45200 OK 6.6 kB URL HTTP/2 image.tmdb.org/t/p/w185/R3ldSFqS3nAMlviv7iQzJ2E1h5.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x104, components 3\012- data
Hash ba408b8ea570df7fe585bc08a3a2258e
f230c0bc5ce4050eb64f20913ad1a690273f9349
93503b72868ffd5d08aabf692d41ae215e5e7329be2c50d7a4d71b65a5088c13
GET /t/p/w185/R3ldSFqS3nAMlviv7iQzJ2E1h5.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6613
date: Fri, 16 Dec 2022 12:37:20 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "ff7e03cdd69609faefdd1eebc3a06b39"
last-modified: Fri, 16 Dec 2022 00:37:42 GMT
imagery: degrade=81, sample=2x2, difference=1.065
cache-tag: R3ldSFqS3nAMlviv7iQzJ2E1h5
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: waH3JgfVup6wEu0vxcmaUUEI96_IB3hJ95kGNxaHgGPpirqtagSCrw==
age: 395882
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/qJzOLGWZmvq4Z7abytAMbouO8f.jpg
54.230.111.45200 OK 64 kB URL HTTP/2 image.tmdb.org/t/p/w500/qJzOLGWZmvq4Z7abytAMbouO8f.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 40a36b401da99bdb71ed7b15bb735bbb
054cc23c2d27746e3e9fc25ebe374c6563c78d2e
b7a780b77e3623dbab09ee9fb9d2aa1a201bea4d707a5350e0398bc35447b885
GET /t/p/w500/qJzOLGWZmvq4Z7abytAMbouO8f.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 64200
date: Thu, 15 Dec 2022 22:07:14 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "9d3dcc14541e2c486d35781fe58a236e"
last-modified: Fri, 15 Jan 2021 17:04:46 GMT
imagery: degrade=81, sample=2x2, difference=1.188
cache-tag: qJzOLGWZmvq4Z7abytAMbouO8f
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: yN6H_KYW-O502Bo0h0w77BfS-Bgc0_r9bwXe0ct4XyDDfbpJjvcXcw==
age: 448088
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/8DBD6GpE0vg98QWWL1sr8LjGCXO.jpg
54.230.111.45200 OK 56 kB URL HTTP/2 image.tmdb.org/t/p/w500/8DBD6GpE0vg98QWWL1sr8LjGCXO.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash 92e05352b346bd71f8186efea329d22d
ecd6de46be94327f740d5bab9ad158a38f9ea5f4
4a049dd56316a968a6e0d1e1536b45481f7567a7137954c2b6c30f1f95ab76a2
GET /t/p/w500/8DBD6GpE0vg98QWWL1sr8LjGCXO.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 56369
date: Sat, 17 Dec 2022 12:33:08 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "911729b66144a52ff972f066f192fca9"
last-modified: Sat, 19 Nov 2022 16:35:44 GMT
imagery: degrade=81, sample=2x2, difference=1.098
cache-tag: 8DBD6GpE0vg98QWWL1sr8LjGCXO
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _kIBWvwa_jKKy6n3a3CvwBh88ChTYRJblEdIwRKIUkqNx9ExF3_omA==
age: 309734
vary: Origin
X-Firefox-Spdy: h2
image.tmdb.org/t/p/w500/j6UMjLEKcQDT7Ozvphh0r5QvWro.jpg
54.230.111.45200 OK 89 kB URL HTTP/2 image.tmdb.org/t/p/w500/j6UMjLEKcQDT7Ozvphh0r5QvWro.jpg
IP 54.230.111.45:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3\012- data
Hash d4a20d43f3f02ff832ce37711128bdc8
253dcfc5109bfd015d245b713dc4a212a0261c0d
7650daef8ecfd8af4fb65940191c7d6971c5d0a5087cbd537d6f4b57aba2a730
GET /t/p/w500/j6UMjLEKcQDT7Ozvphh0r5QvWro.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 88761
date: Fri, 25 Nov 2022 10:58:12 GMT
server: openresty
cache-control: public, max-age=31536000
etag: "d62d56e67ad535bb2adce5892fbc371d"
last-modified: Sat, 10 Sep 2022 08:08:25 GMT
imagery: degrade=83, sample=2x2, difference=1.084
cache-tag: j6UMjLEKcQDT7Ozvphh0r5QvWro
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qJkanxtB-ruTgwehPve_e25jyQF-_EMrjCJRSRKTTJkin1lR32dZQQ==
age: 2216230
vary: Origin
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.164.56.167101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.164.56.167:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 67DPJzPUkVWNfKCgsveEhQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mqALu4W1qTfnOlKfBBfIMPgaE4c=
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b910875259ce40ea26e35bedc17c2c68
d1cc1930f86fe5e5de46b1f2bd97d069429e3342
07c046b6f9d6c9aefd4728d8361e6243e9e323542a3669834f7ac5c528a64263
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "07C046B6F9D6C9AEFD4728D8361E6243E9E323542A3669834F7AC5C528A64263"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5296
Expires: Wed, 21 Dec 2022 04:03:38 GMT
Date: Wed, 21 Dec 2022 02:35:22 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ff66c7afc98508565602d4177c88a8cc
59d6d5bc01c58620f9efabe090b1fa49913e33df
6ec35a3747d6a01e26d6b75cc0a81be35084da49511d0fdfdb7ea4022209fd86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6EC35A3747D6A01E26D6B75CC0A81BE35084DA49511D0FDFDB7EA4022209FD86"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14968
Expires: Wed, 21 Dec 2022 06:44:50 GMT
Date: Wed, 21 Dec 2022 02:35:22 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 6b4f92c3864427762f9709b06b5328f8
200c173f379e11237deee2c00ff9855496fc7dc3
a2a62338e0ca0c6828020f41b80fffb930e261e9e078338f93360b44b8570f6d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=138361
Date: Wed, 21 Dec 2022 02:35:22 GMT
Etag: "63a1ea63-1d7"
Expires: Thu, 22 Dec 2022 17:01:23 GMT
Last-Modified: Tue, 20 Dec 2022 17:01:23 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3lma_oHy2fy7hqwXhEV7rJFo65YrkxWdw5vLAmGEaihutj4cXuvCCA==
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3b10e6113bcc116a0c4708096dc549bf
58217335c00116682e5897715abd0891676d9bdb
3fd0b31a7426d1c1bfbe346721baa545d6bee8bffa2300af9b0ce5507da9e854
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FD0B31A7426D1C1BFBE346721BAA545D6BEE8BFFA2300AF9B0CE5507DA9E854"
Last-Modified: Tue, 20 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5686
Expires: Wed, 21 Dec 2022 04:10:08 GMT
Date: Wed, 21 Dec 2022 02:35:22 GMT
Connection: keep-alive
thaudray.com/tag.min.js
139.45.197.237200 OK 24 kB IP 139.45.197.237:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9c2d6b1489d7384ea1531272c490ed1e
daa14cf1f173e9c3cf9c99c788b18ce7bc7e2f96
6b26ddfd104337ca3705d7071110bcd9de793d32659ae80b8ee465a6fea35a60
GET /tag.min.js HTTP/1.1
Host: thaudray.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: text/javascript; charset=utf-8
content-length: 23551
content-encoding: br
x-trace-id: d042c5d197de8ee574bf7cff91c22a4a
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 16 Dec 2022 15:55:15 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 4817b81ef8edd224f655ec0203f639ac
99daacd43e1634623125fde39e1ba3d12eb99e46
80b8da6e967445dcb5db8bc6e57470b8b235be28bce7a3bed7f4a66bf9249b32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80B8DA6E967445DCB5DB8BC6E57470B8B235BE28BCE7A3BED7F4A66BF9249B32"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7360
Expires: Wed, 21 Dec 2022 04:38:02 GMT
Date: Wed, 21 Dec 2022 02:35:22 GMT
Connection: keep-alive
my.rtmark.net/gid.js?userId=2cd6a8aa98d04200a0d6735984d2cef1
139.45.195.8200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=2cd6a8aa98d04200a0d6735984d2cef1
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 3675fea9fd6d048ea6e8982ad4849e7b
35a21ea1c1e56bb48e2fb5b69ce820f57c65c8c4
f87e830fcbec20ebbb225e3b010ca4b7a411e2a78b27f85c4944a2abccf4b466
GET /gid.js?userId=2cd6a8aa98d04200a0d6735984d2cef1 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://papaflix.stream
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://papaflix.stream
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2cd6a8aa98d04200a0d6735984d2cef1; expires=Thu, 21 Dec 2023 02:35:22 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
216.239.38.178200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.239.38.178:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 21 Dec 2022 00:41:08 GMT
expires: Wed, 21 Dec 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 6854
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2ba14c2a14e0da6ab806e141468e969f
0b756b2e6eb370d8916fd52094b2ba04f4b692db
44618aada32e9cc1ad6d991a89541babd51b737d1bb1a51822488be35f858999
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "44618AADA32E9CC1AD6D991A89541BABD51B737D1BB1A51822488BE35F858999"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14792
Expires: Wed, 21 Dec 2022 06:41:55 GMT
Date: Wed, 21 Dec 2022 02:35:23 GMT
Connection: keep-alive
dizipal223.com/i.js
104.21.11.79200 OK 45 kB IP 104.21.11.79:0
Hash 4f73633641764b257a1a97276b6e886e
e2f861528bc29b2567fa1808434319a692620de0
899d5e0bdd517ae36e604ec0151c1c31c4f0e0a31613a3a3abd74a6ab765750a
GET /i.js HTTP/1.1
Host: dizipal223.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: application/x-javascript
cache-control: public, max-age=2678400
expires: Wed, 28 Dec 2022 02:35:22 GMT
last-modified: Thu, 08 Dec 2022 12:31:07 GMT
etag: W/"f3-6391d90b-b95111f5ce25f2ed;;;"
platform: hostinger
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TPSZO1sw%2F7FWIp6OSeXY%2FF6KsdohOUeq6z3q1RuUkPMDbx9RzIf6shQgbgY1zIOAWBUxyX6GyDIxgTvIEzw4pmUAJJ1FZtFGj05ZjJvij4EUs0BAeRatqhFJO9IXh8LTfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cd3959cca3b51b-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
reypelis.tv/banner.gif
172.64.133.19200 OK 48 B IP 172.64.133.19:0
File type GIF image data, version 89a, 8193 x 8193\012- data
Hash 68dcef69c97cbfbd36b2fc9510199d44
762adef5f404536083859646db989a77ea49a7e0
e63297c0c3a02ca8a41cfe0d1702bc56004a57f19ef9a7a3cf5f07050bfdb45b
GET /banner.gif HTTP/1.1
Host: reypelis.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://reypelis.tv/i.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Dec 2022 02:35:23 GMT
content-type: image/gif
content-length: 48
cache-control: public, max-age=604800
expires: Tue, 27 Dec 2022 16:07:24 GMT
last-modified: Tue, 20 Dec 2022 15:32:08 GMT
etag: "30-63a1d578-3326a90559edc06a;;;"
platform: hostinger
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 37679
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FEjUIPWw7XyXIBSB9n%2BNHPgBDaiW8SKdz2%2F%2BCMGMEYW8KXUw8rKaJ4k9dMQyccW9Uv8b6Nkb%2BsaQok7uqDZ2sxoeDcDIl3p4z79KO0NjmMn4NDWAixeln8ElY3qxxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cd395ececd76c3-LHR
X-Firefox-Spdy: h2
thaudray.com/?rb=CFnUODiTgw3j0WBESpipOsfIjIOX2KBH4kDKol1Eu2rMpoJEBvJeSTjlf783qfE8QjjXJybIhBSvLi5dUOnvHjdTHFe41kFEdA8HTBhPJD09ZoXZlNb_x4wuE_2aMaOpmao-TDCP7jGPqd8zW4y01LKRFEXSR3L5Y4NH2JGtzR3ZmJ0y03g2oHuIX3mtS-OeOilRjbWvN2cunZbD0SC1snRr2Ro6_nK-5xZZjWNQn2kNqebl&request_ab2=96003&zoneid=5234798&js_build=iclick-v1.464.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fpapaflix.stream%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.464.1&bs=9461594a-98ae-4c5d-a1d3-fe2e4285e655&userId=2cd6a8aa98d04200a0d6735984d2cef1&m=link
139.45.197.237200 OK 2.4 kB URL HTTP/2 thaudray.com/?rb=CFnUODiTgw3j0WBESpipOsfIjIOX2KBH4kDKol1Eu2rMpoJEBvJeSTjlf783qfE8QjjXJybIhBSvLi5dUOnvHjdTHFe41kFEdA8HTBhPJD09ZoXZlNb_x4wuE_2aMaOpmao-TDCP7jGPqd8zW4y01LKRFEXSR3L5Y4NH2JGtzR3ZmJ0y03g2oHuIX3mtS-OeOilRjbWvN2cunZbD0SC1snRr2Ro6_nK-5xZZjWNQn2kNqebl&request_ab2=96003&zoneid=5234798&js_build=iclick-v1.464.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fpapaflix.stream%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.464.1&bs=9461594a-98ae-4c5d-a1d3-fe2e4285e655&userId=2cd6a8aa98d04200a0d6735984d2cef1&m=link
IP 139.45.197.237:0
Hash 0349276906bcd59730abaa5884165f9f
25dcdc5ccb70b3d817efc58b45b0cb276d814081
4c6fb16ebce718814ecab9ed72e0f80fd955e3f3c6e896dfe8f6448e0fa6b912
GET /?rb=CFnUODiTgw3j0WBESpipOsfIjIOX2KBH4kDKol1Eu2rMpoJEBvJeSTjlf783qfE8QjjXJybIhBSvLi5dUOnvHjdTHFe41kFEdA8HTBhPJD09ZoXZlNb_x4wuE_2aMaOpmao-TDCP7jGPqd8zW4y01LKRFEXSR3L5Y4NH2JGtzR3ZmJ0y03g2oHuIX3mtS-OeOilRjbWvN2cunZbD0SC1snRr2Ro6_nK-5xZZjWNQn2kNqebl&request_ab2=96003&zoneid=5234798&js_build=iclick-v1.464.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fpapaflix.stream%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.464.1&bs=9461594a-98ae-4c5d-a1d3-fe2e4285e655&userId=2cd6a8aa98d04200a0d6735984d2cef1&m=link HTTP/1.1
Host: thaudray.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://papaflix.stream/
Origin: https://papaflix.stream
Connection: keep-alive
Cookie: OAID=2cd6a8aa98d04200a0d6735984d2cef1; oaidts=1671590122
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: application/json
x-trace-id: 8917183c4b7fa5c949ab81ec251e9416
access-control-allow-origin: https://papaflix.stream
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=2cd6a8aa98d04200a0d6735984d2cef1; expires=Thu, 21 Dec 2023 02:35:22 GMT; path=/; secure; SameSite=None
oaidts=1671590122; expires=Thu, 21 Dec 2023 02:35:22 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 28 Dec 2022 02:35:22 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/url?q=https%3A%2F%2Fenwrapquai.com%2Fi929rGRpBcgWqES%2F55380&sa=D&sntz=1&usg=AOvVaw1SSQPRxviAgj2l_1Dv47Ku
142.250.74.132200 OK 388 B URL HTTP/2 www.google.com/url?q=https%3A%2F%2Fenwrapquai.com%2Fi929rGRpBcgWqES%2F55380&sa=D&sntz=1&usg=AOvVaw1SSQPRxviAgj2l_1Dv47Ku
IP 142.250.74.132:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 90d9e32da626a9c3a219b947a68c88be
06639cddd8ca15249f8d04e9f656d8354419bd6f
48e2e0816ac0d8339dc0f97921514e61cca86e5b4faa75fc1cfa9cadf140399a
GET /url?q=https%3A%2F%2Fenwrapquai.com%2Fi929rGRpBcgWqES%2F55380&sa=D&sntz=1&usg=AOvVaw1SSQPRxviAgj2l_1Dv47Ku HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
location: https://enwrapquai.com/i929rGRpBcgWqES/55380
cache-control: private
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Wed, 21 Dec 2022 02:35:23 GMT
server: gws
content-length: 388
x-xss-protection: 0
expires: Wed, 21 Dec 2022 02:35:23 GMT
set-cookie: __Secure-ENID=9.SE=h_yc4t9Xd11adcogy9xrAy_eoacluU9ijKI4eQSXc1rDRCrej0ESwIZc4WlX0OJ-6ZlPjgjzH9voNxR7yIU0mbrlC9vFIqdVhgiKJ3vqt74zLx7LLxsr9kugDZY7adoQRHzoax0RK8ArJEgyAM7MHLzaEoyUiH69CUFkF38Y0Sg; expires=Sat, 20-Jan-2024 18:53:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+624; expires=Fri, 20-Dec-2024 02:35:23 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 97216d9347c0d3c1bab297df919688d5
61eca83749fd58d5ce753bf65419435d522c2ce5
7277b81f23f6516aa706c00202e0705421837431095d5b1f7fb0f283ab5736ff
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Dec 2022 02:35:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5391
Expires: Wed, 21 Dec 2022 04:05:14 GMT
Date: Wed, 21 Dec 2022 02:35:23 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5391
Expires: Wed, 21 Dec 2022 04:05:14 GMT
Date: Wed, 21 Dec 2022 02:35:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2429
Expires: Wed, 21 Dec 2022 03:15:52 GMT
Date: Wed, 21 Dec 2022 02:35:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2429
Expires: Wed, 21 Dec 2022 03:15:52 GMT
Date: Wed, 21 Dec 2022 02:35:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fa8a62f-ea22-4322-aa22-949d8110171e.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fa8a62f-ea22-4322-aa22-949d8110171e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da9b0930ee2249c6e7e1f83890414427
f064f1c66751a7fd57cc2e5bd4de7f0056280201
51f358162f132a7df1894f1f55e14a49facda33efa4339310cc4be2c30fb3bec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fa8a62f-ea22-4322-aa22-949d8110171e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7928
x-amzn-requestid: 7ac71ec7-3ebb-4564-909f-5cd431e52cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dBW08HOJoAMFr5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6396d1b9-3ccebae6692c2e0878bb0368;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 07:01:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IawMW-biuiDSx4ywTV8rReeK0gyGWYqnknJvRbQhhCxyk0Yq2A0JmA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 08:06:56 GMT
age: 66507
etag: "f064f1c66751a7fd57cc2e5bd4de7f0056280201"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c78fc8f-aea2-449f-9a81-c0a596eb2a5d.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c78fc8f-aea2-449f-9a81-c0a596eb2a5d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f544a43069d3e7ef3c9e81be2eae38c
2e99a97efcff24112b95676f2d9c3dbc815edc58
8ce3a265ec7d56944f787f868563d7626fdaecac25312ef82a408d89d3b737cd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c78fc8f-aea2-449f-9a81-c0a596eb2a5d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8963
x-amzn-requestid: 397ea1cc-f004-4152-b528-fca162be7036
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_DElEoAMFyNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-70d4068264436d7f3b3c5be0;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: OayP0-AAqDlhtTg9PHz2MdZq6Vh3iZTAW2ZbgaXmaV34t91ax9bhCA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:37:41 GMT
age: 17862
etag: "2e99a97efcff24112b95676f2d9c3dbc815edc58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0e09193-cc07-43ac-889e-3940948814ce.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0e09193-cc07-43ac-889e-3940948814ce.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edba09e5cf977de85bbc878f27d6b124
b18cca6c0dfec057305ac3ef231f74887183ebbc
286f14f7d39d91168860d610fc08efe93967781e759eedfac86f29fcf85e9d12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0e09193-cc07-43ac-889e-3940948814ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4729
x-amzn-requestid: 02b65dca-78b1-4e7a-b6cc-2d9b7f3b9759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_BHgSoAMFZjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-024fa06264a6b85424f74ae4;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: r4j0S_ZGeww3h1mKQ5QcwGF2llgP5xBrn1kxw1RyPz3GySghhXzZWA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:37:41 GMT
age: 17862
etag: "b18cca6c0dfec057305ac3ef231f74887183ebbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29b3c04e-49ca-4940-930e-747e6dec930f.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29b3c04e-49ca-4940-930e-747e6dec930f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 52b73d002ffbdebcf194c56f16138981
04a8f8ee413da353fca1058b9f7a4f7e8d08503b
093582d579d2dcba0a25bac60de27af1bd6e4c54287bc2107c7ffedada0a4616
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29b3c04e-49ca-4940-930e-747e6dec930f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4746
x-amzn-requestid: cdafdc0a-0aa9-4fd9-9aa3-12b4ba0b5ac2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddubDHEwoAMF2Aw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a22aac-41f4751c24bfdd0d3dd23792;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:35:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RbuAmZvYSoVhzOpvGNR1CYJ-j4nH_r_u7s6PvLoacKYrQEkB8iup3g==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:49:50 GMT
age: 17133
etag: "04a8f8ee413da353fca1058b9f7a4f7e8d08503b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdefad689-8a78-41c9-8774-f0b8a1135d15.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdefad689-8a78-41c9-8774-f0b8a1135d15.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8f5b2e482a0944dfc0de3a69659fa002
64dd897d9163a6eceadc0c5460cdd135d323abb3
feb1a63a27859b88257d50c3c8723131978fd1f363a6f9e1297b91549b4aed9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdefad689-8a78-41c9-8774-f0b8a1135d15.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9044
x-amzn-requestid: 981a0010-ec53-4659-818b-4cfa39fa8cd5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbuhqGUbIAMF_QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a15e0a-65b084547c4d2b4414236f84;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 07:02:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 3SH8qUN_iP2S3P8mJfIcDIPbFSR8IA9nj25-UuZwRcs63Jr6vS7NyA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 07:02:34 GMT
age: 70369
etag: "64dd897d9163a6eceadc0c5460cdd135d323abb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0191e-7441-4083-843d-18a9446de816.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0191e-7441-4083-843d-18a9446de816.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3bd6359db3b908389343275ee839466b
9094f8e9275252a8e9d5e65fd3e87851b2f80bd7
7380590a93f8a21907c39ddce2f51c599161f219522df4099e9c1a82bcd1e40e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0191e-7441-4083-843d-18a9446de816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9069
x-amzn-requestid: 103b5caf-fa82-4d66-97e6-99c77027f759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_DG_hoAMFoKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-1a4accb80dbf5e9f2f696c85;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: D8V_RlBCxL1RHxtCyWkX7_IsCCrOdv2o1Wdic0N_aUz0qguhANp88A==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:37:41 GMT
age: 17862
etag: "9094f8e9275252a8e9d5e65fd3e87851b2f80bd7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
thaudray.com/5/5234798/?oo=1&aab=1
139.45.197.237200 OK 1.8 kB URL HTTP/2 thaudray.com/5/5234798/?oo=1&aab=1
IP 139.45.197.237:0
Hash f4f10f9003e809538d4fab18e30309e8
14ff68c8d6d1f4e6c24a7b62eb3e14e1bab70541
40b0cccd6607e929d8b09b14d9c866ce3965358c9c1cd7cf5aa2709e4e0e8104
GET /5/5234798/?oo=1&aab=1 HTTP/1.1
Host: thaudray.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://papaflix.stream
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: application/json
x-trace-id: bdd5aa0026e1e19105899f8f3c2b9973
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://papaflix.stream
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=2cd6a8aa98d04200a0d6735984d2cef1; expires=Thu, 21 Dec 2023 02:35:22 GMT; path=/; secure; SameSite=None
oaidts=1671590122; expires=Thu, 21 Dec 2023 02:35:22 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
enwrapquai.com/i929rGRpBcgWqES/55380
23.109.248.169200 OK 7.5 kB URL HTTP/1.1 enwrapquai.com/i929rGRpBcgWqES/55380
IP 23.109.248.169:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (19327)
Hash 49fa2707af4f9d5c1d4143ee269ca3ad
2fbfc722aedb4e8e2312d315480bd088f6b320f5
3678539727c440a4160613e2e38e7a942d2214471fc8d65c500b81628a6658fe
Analyzer Verdict Alert quad9 Sinkholed
GET /i929rGRpBcgWqES/55380 HTTP/1.1
Host: enwrapquai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 21 Dec 2022 02:35:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Thu, 22-Dec-2022 02:35:23 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Thu, 22-Dec-2022 02:35:23 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9c47588e57378b2eb8cc6d03c4a856f2
aa8ba4e84c5513beade849c64488a08b62c7bd01
8a732403942c8f47bc3a1ee25735abb751fd02005cb45c5454cb30e46d5ce5e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8A732403942C8F47BC3A1EE25735ABB751FD02005CB45C5454CB30E46D5CE5E5"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4574
Expires: Wed, 21 Dec 2022 03:51:38 GMT
Date: Wed, 21 Dec 2022 02:35:24 GMT
Connection: keep-alive
syenitetatler.tech/cuid/?f=https%3A%2F%2Fenwrapquai.com
23.109.170.52200 OK 0 B URL HTTP/1.1 syenitetatler.tech/cuid/?f=https%3A%2F%2Fenwrapquai.com
IP 23.109.170.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /cuid/?f=https%3A%2F%2Fenwrapquai.com HTTP/1.1
Host: syenitetatler.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://enwrapquai.com/
Origin: https://enwrapquai.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 21 Dec 2022 02:35:24 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://enwrapquai.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6bb118bcb28842da514b65c598e82138
ea91d5fda6fba02c4f2a9c5bba6e10e4c644e904
be2774cfa2443654e81cbccd8446d18c4396941cb3d2651a83500f230d45481d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE2774CFA2443654E81CBCCD8446D18C4396941CB3D2651A83500F230D45481D"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4209
Expires: Wed, 21 Dec 2022 03:45:33 GMT
Date: Wed, 21 Dec 2022 02:35:24 GMT
Connection: keep-alive
syenitetatler.tech/cuid/?f=https%3A%2F%2Fenwrapquai.com
23.109.170.52200 OK 32 B URL HTTP/1.1 syenitetatler.tech/cuid/?f=https%3A%2F%2Fenwrapquai.com
IP 23.109.170.52:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 89dba48abf0429a6702fffc82c6625d4
53f7cfaf1ca5e2c78a59d6b5fc02878fee789dd1
1ccc03f673b7b64169b0ecf9aad2b833be6b5fde6b69d08519215d1b46921361
Analyzer Verdict Alert quad9 Sinkholed
POST /cuid/?f=https%3A%2F%2Fenwrapquai.com HTTP/1.1
Host: syenitetatler.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enwrapquai.com/
Content-Type: application/json
Origin: https://enwrapquai.com
Content-Length: 10
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 21 Dec 2022 02:35:24 GMT
Content-Type: application/json
Content-Length: 32
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://enwrapquai.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: a97fa794a0f9=67edab11a820c649561df7; expires=Sun, 24 Apr 2050 12:39:59 GMT; domain=syenitetatler.tech; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfe03159562f57ed8890cfe5861b4898
8725f75afe8950dcf004fa6bbf0804c448ab1391
6f3f7b0c034e9a91b7477c5282377b1971c3e2f20e8be9aeaa75be306d13a5b9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F3F7B0C034E9A91B7477C5282377B1971C3E2F20E8BE9AEAA75BE306D13A5B9"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15089
Expires: Wed, 21 Dec 2022 06:46:53 GMT
Date: Wed, 21 Dec 2022 02:35:24 GMT
Connection: keep-alive
naggedhechtia.tech/imp/55380?md=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&pdc=e85RF3D8yQPBuzhCBV7POz*wwgNE9Dk69Gn6m376mNc
23.109.170.54200 OK 58 B URL HTTP/1.1 naggedhechtia.tech/imp/55380?md=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&pdc=e85RF3D8yQPBuzhCBV7POz*wwgNE9Dk69Gn6m376mNc
IP 23.109.170.54:0
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash c0d656e325525f28dbe969397135c07b
8b71f15a24f3440f3406fa845f5656752c873605
defa02d1919451c6ce4e510588e0b2f084c9f8154e8972ce0695fe9aefe900a3
Analyzer Verdict Alert quad9 Sinkholed
GET /imp/55380?md=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&pdc=e85RF3D8yQPBuzhCBV7POz*wwgNE9Dk69Gn6m376mNc HTTP/1.1
Host: naggedhechtia.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enwrapquai.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 21 Dec 2022 02:35:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Thu, 22-Dec-2022 02:35:24 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Thu, 22-Dec-2022 02:35:24 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
bedrapiona.com/5/5234798/?oo=1&js_build=iclick-v1.464.1
139.45.197.234200 OK 0 B URL HTTP/2 bedrapiona.com/5/5234798/?oo=1&js_build=iclick-v1.464.1
IP 139.45.197.234:0
GET /5/5234798/?oo=1&js_build=iclick-v1.464.1 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://papaflix.stream
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: application/json
x-trace-id: 000dce14587c00d434c52b0697cf16db
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://papaflix.stream
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=48227131f95d484bbdd31b572404cb13; expires=Thu, 21 Dec 2023 02:35:22 GMT; path=/; secure; SameSite=None
oaidts=1671590122; expires=Thu, 21 Dec 2023 02:35:22 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
papaflix.stream/
188.114.96.1200 OK 0 B IP 188.114.96.1:0
GET / HTTP/1.1
Host: papaflix.stream
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 21 Dec 2022 02:35:21 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://papaflix.stream/wp-json/>; rel="https://api.w.org/"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2BvMpNBjHOd7nKEKXZ9uLbGZ4WQwAr12L5darVox1t%2B1%2BRtl1AXNfE7BJ43DcOYdgG2h3ZkcH2pEsiuIDBiYAY9wQbA6RoXGUPNMSQRe6wNe5hGORN%2FYt6YxX4F8%2BZimgEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cd39540a411c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
inklinkor.com/tag.min.js
104.21.91.63200 OK 0 B IP 104.21.91.63:0
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://papaflix.stream/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Dec 2022 02:35:22 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 6457b79d7fd5005613455d1aa703aeae
cache-control: max-age=86400
last-modified: Fri, 16 Dec 2022 15:53:36 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Thu, 22 Dec 2022 01:59:28 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QsKQH1kAv8lQeqG4lvqZOqrHkDGW9AsZF094dRl4T9xUhgCHczdmykt4yr3cfU4OIcVE%2FHSa2aljeFHsE5nnIdBFrdSakJfX4ToHkT0bq%2F8opGwL%2FPUn1HSzFkAogapO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cd39592b7eb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2