fairytail-pw.clan.su/index/8-409
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/index/8-409
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
Analyzer Verdict Alert fortinet Phishing
GET /index/8-409 HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:55 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/index/8-409
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Sat, 26 Nov 2022 07:58:54 GMT
Date: Sat, 26 Nov 2022 06:47:57 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5037
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:57 GMT
Last-Modified: Sat, 26 Nov 2022 05:24:00 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Sat, 26 Nov 2022 10:05:43 GMT
Date: Sat, 26 Nov 2022 06:47:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 06:17:30 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1827
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: s/sK6fU/cGAkizNnFRkG8uGOpt2QQ4iJzlIkV2SsuU7H9keA8RI79PVJrRF1ZWZ5zOb9xvgtb08=
x-amz-request-id: 18CJZQM0V8Z701W0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 06:44:08 GMT
age: 229
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:47:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fairytail-pw.clan.su/index/8-409
200 OK 7.5 kB URL HTTP/1.1 fairytail-pw.clan.su/index/8-409
IP
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1482)
Hash 6fb2c8615558589c609a8353eb53cfa9
dad40a9ebd15e4453c1cc5577eb93ca099deb30d
1cfe42de747bd7ac631a024c41404416ee9c82f652333c1433e9df0ad63ccc1b
Analyzer Verdict Alert fortinet Phishing
GET /index/8-409 HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 6fairytail-pwuCoz=; path=/; expires=Thu, 26-Nov-2020 06:47:56 GMT; Secure; HttpOnly; domain=.fairytail-pw.clan.su
6fairytail-pwuzll=1669445276; path=/; expires=Sun, 26-Nov-2023 06:47:56 GMT; Secure; domain=.fairytail-pw.clan.su
6fairytail-pwpushi=1; path=/; expires=Sun, 27-Nov-2022 05:47:56 GMT; Secure
Pragma: no-cache
Vary: host
Last-Modified: Sun, 24 Apr 2005 04:29:37 GMT
Cache-Control: no-cache,no-store, private
Content-Encoding: gzip
fairytail-pw.clan.su/?OMD%21wzNhJ2I6G%3Blt0k2hsg%5ESNMubiXVt4Q%5EKP6UeyphTF75eMf5Blj1aQRXA1d06k8%5E%21pRFl%21iwUtv10BcN378eqM9QVcC0kfn3iwxaIXCiNE6n0NSdubRsthgjBd8trPksiSfAYfxd%3BS9MWff1dhFEpKzmpmY8%21kdBigZPlLO4CkPNRB9tyHHiXQ3JWWGCE24X8MrcfwTfUtM0FFghluWmg0fEHewoo
200 OK 1.2 kB URL HTTP/1.1 fairytail-pw.clan.su/?OMD%21wzNhJ2I6G%3Blt0k2hsg%5ESNMubiXVt4Q%5EKP6UeyphTF75eMf5Blj1aQRXA1d06k8%5E%21pRFl%21iwUtv10BcN378eqM9QVcC0kfn3iwxaIXCiNE6n0NSdubRsthgjBd8trPksiSfAYfxd%3BS9MWff1dhFEpKzmpmY8%21kdBigZPlLO4CkPNRB9tyHHiXQ3JWWGCE24X8MrcfwTfUtM0FFghluWmg0fEHewoo
IP
Hash adb6737a9b1e0e50afb2ac28372fd55d
db3aec67515c36d05a27ec04964bdda7a0db21f1
188c12d645dfcc649262634cf45e7b0c63c112293270333a0752b79a22ae0531
Analyzer Verdict Alert fortinet Phishing
GET /?OMD%21wzNhJ2I6G%3Blt0k2hsg%5ESNMubiXVt4Q%5EKP6UeyphTF75eMf5Blj1aQRXA1d06k8%5E%21pRFl%21iwUtv10BcN378eqM9QVcC0kfn3iwxaIXCiNE6n0NSdubRsthgjBd8trPksiSfAYfxd%3BS9MWff1dhFEpKzmpmY8%21kdBigZPlLO4CkPNRB9tyHHiXQ3JWWGCE24X8MrcfwTfUtM0FFghluWmg0fEHewoo HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/_st/my.css
200 OK 3.6 kB URL HTTP/1.1 fairytail-pw.clan.su/_st/my.css
IP
File type assembler source, ASCII text
Hash 470d48cc98577a9496e08074d4693727
72a904d58e09e0624b4ed0b310cbce1b589c86db
b614e3e0141860276e3eebded809f3f4086282efe16e77b65fc3cceb4fe09da2
GET /_st/my.css HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/css
Last-Modified: Mon, 02 Jan 2012 14:53:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"4f01c4d9-40ed"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
fairytail-pw.clan.su/?NJKtOS%21IwU7sjjADPu30A3L4fsHOqY%3B%21M25rTLfXzZ2fScJ2RQcBzpQ%5ENq2WuS%3B%3BFmZ4vlPz%3BVCw%21SMQHMbd0hwSwmybEBryHMOKBRbcZFbyCR9b4JS%21ycrqekErL%5E41P%5Eh6bT4j5tjfWNwENX4xyxJIXyUB8mKOpGYQU6NgrzUvJBE1M%5EV936FnW8nG%3BFPd4FHzZJxpieV1pIrNhD3%21CpHp46GyjP%3Bo
200 OK 811 B URL HTTP/1.1 fairytail-pw.clan.su/?NJKtOS%21IwU7sjjADPu30A3L4fsHOqY%3B%21M25rTLfXzZ2fScJ2RQcBzpQ%5ENq2WuS%3B%3BFmZ4vlPz%3BVCw%21SMQHMbd0hwSwmybEBryHMOKBRbcZFbyCR9b4JS%21ycrqekErL%5E41P%5Eh6bT4j5tjfWNwENX4xyxJIXyUB8mKOpGYQU6NgrzUvJBE1M%5EV936FnW8nG%3BFPd4FHzZJxpieV1pIrNhD3%21CpHp46GyjP%3Bo
IP
Hash 4a33e7cd7558f3f5a86d0fc27aee8c90
50fc0ad44d3917690997ca278091e53d0d575362
d6304d22c2821d367e3697cb9fa4e6dbeb093b8634fccd35312664d30d72b330
Analyzer Verdict Alert fortinet Phishing
GET /?NJKtOS%21IwU7sjjADPu30A3L4fsHOqY%3B%21M25rTLfXzZ2fScJ2RQcBzpQ%5ENq2WuS%3B%3BFmZ4vlPz%3BVCw%21SMQHMbd0hwSwmybEBryHMOKBRbcZFbyCR9b4JS%21ycrqekErL%5E41P%5Eh6bT4j5tjfWNwENX4xyxJIXyUB8mKOpGYQU6NgrzUvJBE1M%5EV936FnW8nG%3BFPd4FHzZJxpieV1pIrNhD3%21CpHp46GyjP%3Bo HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
fairytail-pw.clan.su/.s/src/jquery-1.12.4.min.js
200 OK 34 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/jquery-1.12.4.min.js
IP
File type ASCII text, with very long lines (32077)
Hash eed194bd33958fd0768352b877915a40
db7a4073a53efb53155652219d948940efe6baa7
9eaac8a63f3851efef83bd151a558f6c8d8e6bb75c7725625cf8892b6312aa06
Analyzer Verdict Alert fortinet Phishing
GET /.s/src/jquery-1.12.4.min.js HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/javascript
Last-Modified: Thu, 01 Sep 2022 17:43:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"6310ef5e-17b8b"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
fairytail-pw.clan.su/.s/src/ulightbox/ulightbox.min.css
200 OK 1.4 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/ulightbox/ulightbox.min.css
IP
File type ASCII text, with very long lines (4552), with no line terminators
Hash 9c03edbcbefe3eea8902981444de96f7
ca39997a1765ab084fb7e6740858176b9385c4ca
8487aa6ee4bd261bdf1f5b681cf96d347cd980ed45183c5a2a9571db6c891a08
GET /.s/src/ulightbox/ulightbox.min.css HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/css
Last-Modified: Tue, 24 May 2022 12:36:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"628cd15d-11c8"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
fairytail-pw.clan.su/.s/src/base.min.css
200 OK 6.1 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/base.min.css
IP
File type ASCII text, with very long lines (24443), with no line terminators
Hash 629527310ba26cfc236c016e14662321
7a87daed5934db9729f12653e67c8de9d4365d58
134e836199a74c0b501c4e1a46dd3625f4696dc608d1052136ee455c2c2d2509
GET /.s/src/base.min.css HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/css
Last-Modified: Tue, 11 Oct 2022 13:44:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"63457347-5f7b"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
fairytail-pw.clan.su/.s/src/layer5.min.css
200 OK 5.3 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/layer5.min.css
IP
File type ASCII text, with very long lines (21806), with no line terminators
Hash 3619a14c1da4eb35222b9e474a73fd7b
41674d95bcf7e8e52d5459006307933859f83d61
154f9f83a0ee1dcd31826c52fcf835adea20152aca2c6a59d6c04e9a77808ea9
GET /.s/src/layer5.min.css HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/css
Last-Modified: Tue, 11 Oct 2022 12:50:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"63456685-552e"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
200 OK 579 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
IP
File type ASCII text, with very long lines (905), with no line terminators
Hash fe0e23ea2d335147e24f50690aa39c7c
ef74d6655ba8efb294f7ed55e6be16d315381edd
fcccb37edb611bf2580bf74646d25e4fb3660d305c66de3c8571bedfc2dac228
GET /recaptcha/api.js?onload=reCallback&render=explicit&hl=ru HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 26 Nov 2022 06:47:57 GMT
date: Sat, 26 Nov 2022 06:47:57 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 579
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fairytail-pw.clan.su/.s/src/social.css
200 OK 610 B URL HTTP/1.1 fairytail-pw.clan.su/.s/src/social.css
IP
File type ASCII text, with very long lines (442)
Hash af855dcd18719bcf0da15a9029755af1
d74d0ed8d96f2ebe46a7671564bf80eea6865103
9add1a323772a7c09260b63a21732472cb0204105c1d2bee763ea1429f0e26e9
GET /.s/src/social.css HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Dec 2021 11:13:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"61a758f3-9b8"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
fairytail-pw.clan.su/.s/src/ulightbox/ulightbox.min.js
200 OK 7.6 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/ulightbox/ulightbox.min.js
IP
File type ASCII text, with very long lines (22291), with no line terminators
Hash 3bb3aaa5262067cec461b32298975b05
4e11bfe49cd05fcdbd1e692fc87788da07e62161
61fa91bb508bfda7ee487ffaf0e38aa71cfab1ce78bb108d6c6140dc9b35ab22
Analyzer Verdict Alert fortinet Phishing
GET /.s/src/ulightbox/ulightbox.min.js HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/javascript
Last-Modified: Tue, 24 May 2022 12:36:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"628cd15d-5713"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
s44.ucoz.net/cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.814312974395762
200 OK 0 B URL HTTP/1.1 s44.ucoz.net/cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.814312974395762
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.814312974395762 HTTP/1.1
Host: s44.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/.s/src/uwnd.min.js
200 OK 57 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/uwnd.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 20adfead3a54ad11599adb1bab3d6fc6
23bb516448d5c643cb186ad9aec426388aa79dfd
b49b11429b509cf608a66bbcebc13cf63fa444b998c1a678d1bebfe33f7c2ff4
Analyzer Verdict Alert fortinet Phishing
GET /.s/src/uwnd.min.js HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/javascript
Last-Modified: Mon, 25 Apr 2022 10:32:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"626678ba-3334b"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
fairytail-pw.clan.su/.s/img/fr/ajax3.gif
200 OK 1.1 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/img/fr/ajax3.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash d700ad83d0a3c70488805e3ed515bf15
2e48c5d8842adf6064eeb4d08cead686595dde40
9777513b1dee8fbb0942cc13160510ff06cd1e868bd5dd24d060930871443ce6
GET /.s/img/fr/ajax3.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 1079
Last-Modified: Mon, 21 Nov 2022 12:38:03 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "637b712b-437"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/17.gif
200 OK 636 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/17.gif
IP
File type GIF image data, version 89a, 15 x 15\012- data
Hash 2cc623be842887357f9f139234f083c8
043a16084418abe99421080b88cb0f7d73e9cec2
779ff579aa0dba6ab7e7ef5f185c42cf6722bf28accab0e41f984d1a9fdd4371
GET /.s/t/995/17.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 636
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-27c"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/12.jpg
200 OK 1.6 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/12.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 53x32, components 3\012- data
Hash da9e0e50d386bf7dd0606ced419e6be3
502839133b82be7cf308546fe96dfcd75f6265f6
2cf3c2eece339596cd94aacda979aaadea9d50eb8f7ff0ccaa2cc57137df634f
GET /.s/t/995/12.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 1551
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-60f"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/26.gif
200 OK 511 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/26.gif
IP
File type GIF image data, version 89a, 10 x 10\012- data
Hash 8325b2ea74ae7990e90a640677df07d7
40e2cd0d6e773b098bf089453d07c5c0254a20e9
0347b00a0095ad476eed86f2b5ea33525ecc14cce561b4fdc8c5b10a36056afa
GET /.s/t/995/26.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 511
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-1ff"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/1px.gif
200 OK 43 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/1px.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /.s/img/1px.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 21 Nov 2022 12:37:50 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "637b711e-2b"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/19.gif
200 OK 636 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/19.gif
IP
File type GIF image data, version 89a, 15 x 15\012- data
Hash 279969684cad96ffe859e4278e6ecc8c
2cde74771bd8907e818fb082e3191651cc218813
cb73fbd4f1001772f5ee6e92dd97b001350784ec5724471e0711c7fec98e0430
GET /.s/t/995/19.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 636
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-27c"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/22.gif
200 OK 636 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/22.gif
IP
File type GIF image data, version 89a, 15 x 15\012- data
Hash f442310ab6ba45ebd8f1b2e20907ae5b
33ca841d3a6906f41d924d0d8a0f4703980c2964
c98fc7c5658b4af388bd8fd2c12e5c86dd144238ec0f501db003c7cd49ed72ca
GET /.s/t/995/22.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 636
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-27c"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/6.gif
200 OK 510 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/6.gif
IP
File type GIF image data, version 89a, 10 x 10\012- data
Hash d5d89e9fd80a31a722eaf71ec4c953d6
960daaef8d13241a7b826b271d83172d6c1034c4
14b37f3a4efda44cc4ca38ae56bacaf0db91117f7c983ea5fde4a0bee0517ca8
GET /.s/t/995/6.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 510
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-1fe"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/24.gif
200 OK 636 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/24.gif
IP
File type GIF image data, version 89a, 15 x 15\012- data
Hash a838cfb21e238a8645173e61bd9b4b94
b64d54660210e82e0d9f6c2720d8746dc8673c6f
e59373858da05515d0a5e94fcf651a681f557d25b4ef8ec64de5ccdf5bea8b84
GET /.s/t/995/24.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 636
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-27c"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/13.jpg
200 OK 1.5 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/13.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 53x32, components 3\012- data
Hash 8c212944ed2860b6e685455bc7d75fca
f0cba6b82615822909fb16de0ee95a74965239d0
b476de1bf1ddd956418b2a1072a57757f3cebc98e0bad2244c2b654dbd886dbc
GET /.s/t/995/13.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 1548
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-60c"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/3.gif
200 OK 27 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/3.gif
IP
File type GIF image data, version 89a, 115 x 239\012- data
Hash f33276e299a74b4fdf7b50c9827eb2fa
6710b32d2b744f82d816bda09572915c5ddd4d86
7a71c2cdec7fa7a6daf4f115072ffe0fea348dc614deda8304c2c80aa7f5742c
GET /.s/t/995/3.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 26991
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-696f"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/28.gif
200 OK 510 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/28.gif
IP
File type GIF image data, version 89a, 10 x 10\012- data
Hash 195dbb574ce589919c75fbce4524f502
0fc7d561e5825e840c3a205e6e9e9cc563950047
c53a36c9c66186171f84f9fdbea210d4a208cef26230b95d482c6ecc7280aace
GET /.s/t/995/28.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 510
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-1fe"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/fr/mcr.gif
200 OK 348 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/fr/mcr.gif
IP
File type GIF image data, version 89a, 13 x 15\012- data
Hash c7c13b5cc1fd1f2003801cc36fb9668c
e491ea081d73cefca91571475b7f3de403b08145
b1532fbb9c546fdee5b45583c446f24f089035298f95f4ad2ac166d5f1eb8a2e
GET /.s/img/fr/mcr.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 348
Last-Modified: Mon, 21 Nov 2022 12:38:03 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "637b712b-15c"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/16.jpg
200 OK 778 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/16.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 178x6, components 3\012- data
Hash 5fcc224efe8814b27c4c669080d96a6d
6e3e597ec3844dd19a1186ff6013bc4eb8328dbc
e0ce8c2248372a74045951eee2c69ab2f8f647a67987fc690dfb45550ac78a63
GET /.s/t/995/16.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 778
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-30a"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/4.gif
200 OK 26 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/4.gif
IP
File type GIF image data, version 89a, 134 x 239\012- data
Hash db40e9af33b5afc2347bc09b29c35c10
9da336f1adc94f928d1eed90e83e38ee607c4728
7623f59811e2789a71ae9a3de598e8890827a0e05f7ce932251989b8f25f3ed3
GET /.s/t/995/4.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 25791
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-64bf"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/5.gif
200 OK 16 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/5.gif
IP
File type GIF image data, version 89a, 167 x 239\012- data
Hash 0f337dcd78b72026e76c6a07bf2074f6
8a71ed03e73d3faa1d0a3a6a7da2110c4174697b
2f19eb635071d1758ac8009ec9c1f6b4032d5f1c18e0db0e37e9362327153301
GET /.s/t/995/5.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 16105
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-3ee9"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/8.gif
200 OK 510 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/8.gif
IP
File type GIF image data, version 89a, 10 x 10\012- data
Hash 691e5ff9d9c8a403d94be0e2fbbf1bb3
c90c50115c249d62dafa2177d5d2f3a9a308cad8
ea84f5c71cf3852d9f4bdb083a2b91acb238d37319b5b5d18e9a79c17c937ea0
GET /.s/t/995/8.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 510
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-1fe"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/2.gif
200 OK 18 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/2.gif
IP
File type GIF image data, version 89a, 134 x 239\012- data
Hash 9867a0e093631eb0fcaf5a0fa4219ac3
67f638b9e28f104b9068e7b0a93b1d1137faa938
9bc842beace298bc654a6e4dd4a8410f235d2a7cc36a0ee97429fba8b1f93fd3
GET /.s/t/995/2.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 17725
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-453d"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/1.jpg
200 OK 8.2 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 116x215, components 3\012- data
Hash 73993ecbc82e38814c8c1e6f2485aebc
595de92acacd3453bd98418edcd92fd1059fb8cb
3983bb67908824d6e37e97ab46bb3707add5a4029090b51a9f98bd8915dfc687
GET /.s/t/995/1.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 8191
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-1fff"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/7.gif
200 OK 2.8 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/7.gif
IP
File type GIF image data, version 89a, 221 x 10\012- data
Hash b31dff102a0917e2d4684d2155aef402
d92f26df34d67fab5de5e42b7d89b916e1590528
79599590af1a6a987c848651c146d13e63b167876f0e58329c21f40ebaa90d3f
GET /.s/t/995/7.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 2774
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-ad6"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/9.gif
200 OK 2.9 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/9.gif
IP
File type GIF image data, version 89a, 10 x 221\012- data
Hash d7e16f889b0a61a0dd3fc24c659f0441
1b2ffd282506ad8238f3579e4771cc2d2893a4c1
9c729b2c17d5e9b3eedab6a9d083031d21700528596a3a599107df919a8a8cfd
GET /.s/t/995/9.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 2925
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-b6d"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/10.jpg
200 OK 4.9 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/10.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 181x181, components 3\012- data
Hash 200c26d7d483a66967d7046edb5e07c5
d79243bdccfcd5602f9479ea1821ccf3d3678a21
ccfe5a2b445a388f8fdb5b38c27ce51c93d6f9cfb3cac0b322b702ba5a08f5f9
GET /.s/t/995/10.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 4858
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-12fa"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/11.jpg
200 OK 3.8 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/11.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 459x32, components 3\012- data
Hash a70f5be6afee0acfbc27cc38ec5ce01d
17c6867f167aeba354724a2297206ab9ab81b134
f809cf141e1aa924610b596c7bc6d03ced6f0c8a380fa8f65a0ecf0665f626e3
GET /.s/t/995/11.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 3839
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-eff"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 06:08:54 GMT
cache-control: public,max-age=3600
age: 2344
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
fairytail-pw.clan.su/.s/img/sh/wait.gif
200 OK 265 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/sh/wait.gif
IP
File type GIF image data, version 89a, 32 x 8\012- data
Hash c44da6bb38458d2c57e23104c53d8e05
5e9352aa3d0b522fff659c48299d1b3006c78f47
163da6b91f78ccad8c824ef31e5dbd2a89fb8d93f2381d43faa96acf502ca3e8
GET /.s/img/sh/wait.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/base.min.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 265
Last-Modified: Mon, 21 Nov 2022 12:38:13 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "637b7135-109"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/30.gif
200 OK 281 B URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/30.gif
IP
File type GIF image data, version 89a, 8 x 8\012- data
Hash a1b5460205ee53ae3cf631738aa87e02
1cf9b43bffff98ee7684078da34413a2946fa6d6
f950ad3a9c09b6ceda9d01b89c7f649ba732b7ad0111789ebfb94c105f95e9c1
GET /.s/t/995/30.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/_st/my.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 281
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-119"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/14.jpg
200 OK 1.8 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/14.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 178x33, components 3\012- data
Hash eafd6bf5ab21e242572232828bf49cb3
0aa0aa67d85494f89726588cad74445dfd7cc527
8c14dce9acfc7fffb3b423167831f898c39b627e63eeb70cce7316df53785cc5
GET /.s/t/995/14.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 1800
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-708"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/mchat/
200 OK 2.5 kB URL HTTP/1.1 fairytail-pw.clan.su/mchat/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (348)
Hash 7bcd3a16ea827cb5c484aa7d59a9be74
d1e60e1a7a8d88962c7ac86f474302619396445f
1eadf017e7e1ee71a7b95d2ae8fc33da69099939a10c8523377bd66acd931b2b
Analyzer Verdict Alert fortinet Phishing
GET /mchat/ HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 6fairytail-pwuCoz=; path=/; expires=Thu, 26-Nov-2020 06:47:57 GMT; Secure; HttpOnly; domain=.fairytail-pw.clan.su
Pragma: no-cache
Cache-Control: no-cache,no-store, private
Content-Encoding: gzip
fairytail-pw.clan.su/.s/t/995/15.jpg
200 OK 4.1 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/15.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 178x128, components 3\012- data
Hash 5023291a3cc2a13ac7fa3945f2634911
bccd66c08d81716b1e282868e6530897373353ba
b560baf07e6d996d297ac3b6e7b363e771f1664ef6dcf729f3de8031f8301495
GET /.s/t/995/15.jpg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/jpeg
Content-Length: 4053
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-fd5"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/18.gif
200 OK 2.9 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/18.gif
IP
File type GIF image data, version 89a, 260 x 15\012- data
Hash 39be6355a908a51ba716914338e4a486
635d42054d3743d01f33e9c8a4bc7a982b21d706
c88f8df43212b1d3d8eb0dce3709fb081837dfd194ed9c0f768c6e15f6f2a07a
GET /.s/t/995/18.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 2863
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-b2f"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/20.gif
200 OK 3.1 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/20.gif
IP
File type GIF image data, version 89a, 15 x 260\012- data
Hash f173916ab1f2ab9fa335f7b10e5855ea
abe8d25f5eb57bcafb957050290cb16100e12ce7
5573289b5620afa9a04eceaf8999c54e43d3bcf1fcbae45f37603276e3c43645
GET /.s/t/995/20.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 3079
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-c07"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/21.gif
200 OK 3.1 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/21.gif
IP
File type GIF image data, version 89a, 15 x 260\012- data
Hash 203e3a9f2062dc79a1f784ed28d451ac
21e1a017e91455fa493097acf61d99687c4c64b1
47789cb8d2368cff326d9d2c76f5ccd6d653b92c1f66024105d27f2f403fc01f
GET /.s/t/995/21.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 3146
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-c4a"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/23.gif
200 OK 2.9 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/23.gif
IP
File type GIF image data, version 89a, 260 x 15\012- data
Hash e2ee54f7879f06ed261cdd6be096c714
80563580457c1eff842e82e1e7de147b81a816df
4540e84688af87d409f8bf0c16061b14a72f2ea7349a37e1b951cca35a9a893b
GET /.s/t/995/23.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 2861
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-b2d"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/icon/social/vk.svg
200 OK 772 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/social/vk.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7c4eb8cae0b565c023c4406add5f8041
079ce5d3277df672b57a73476a28d0bf0b1c1fe2
05a3f8587400860aa87bb18c9a9cd5b22a45ca4fc4a37a7922d29e48549b2fc9
Analyzer Verdict Alert fortinet Phishing
GET /.s/img/icon/social/vk.svg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/social.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/svg+xml
Content-Length: 772
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-304"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/icon/social/u.svg
200 OK 612 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/social/u.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 1e726893f02be39b70d24d502a3a9998
98c6fcf43a67426ed7e9c7a839e8115494ca8072
d0608cf0c4aff79f20a198427f7df73300d643face9bea72b8d406b432b84df9
Analyzer Verdict Alert fortinet Phishing
GET /.s/img/icon/social/u.svg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/social.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/svg+xml
Content-Length: 612
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-264"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/icon/social/fb.svg
200 OK 611 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/social/fb.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash d178cc46dcbcf2b6f19445674fe3fe58
26f9747489d9e796926f7bbe11817c420afda3af
a9265d79c9ff74d4deeab5dce9643ed838018a6b4346605e002867858534f4bf
Analyzer Verdict Alert fortinet Phishing
GET /.s/img/icon/social/fb.svg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/social.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/svg+xml
Content-Length: 611
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-263"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/icon/social/ya.svg
200 OK 660 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/social/ya.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7676c3eee5bd955efe08fd05367a443b
595e4e8dbf5ff472606434d0f45806d088de4c0c
b72d3f61ac56b4aa27bad5769589705004aff1f0ad341785ca72dc46ba16de5b
Analyzer Verdict Alert fortinet Phishing
GET /.s/img/icon/social/ya.svg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/social.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/svg+xml
Content-Length: 660
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-294"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/icon/social/gp.svg
200 OK 550 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/social/gp.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (534), with no line terminators
Hash 10d296226de121de55180e5b1b7d9d49
5980293f4f290734d09459d068a8c3996e43fe40
a657a4d5d05c6cd9b9f881ab6941e71f725c7eb451c9f37ceb514e45fdfd441d
Analyzer Verdict Alert fortinet Phishing
GET /.s/img/icon/social/gp.svg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/social.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/svg+xml
Content-Length: 550
Last-Modified: Fri, 01 Feb 2019 12:57:26 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c544236-226"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/img/icon/social/ok.svg
200 OK 1.9 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/social/ok.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 08bbc2fa9b08463b0d061041d62b408e
370c53ccc3edd296cd35fb9e3de20dabfdae78d9
e1369586f1d82834ecc0ccab2f5f1a6f7565f2c715243d956bd7eb1404c8fba9
Analyzer Verdict Alert fortinet Phishing
GET /.s/img/icon/social/ok.svg HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/.s/src/social.css
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/svg+xml
Content-Length: 1858
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-742"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/25.gif
200 OK 2.9 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/25.gif
IP
File type GIF image data, version 89a, 10 x 221\012- data
Hash e53cb0ff6092e2d87137889f42659902
38f153f3f36df1ae0486970618f6cbec9f209594
fb01ebe688ca0f0b295ab426ba13274d1039f8ab0310e0e26983c10e65959507
GET /.s/t/995/25.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 2923
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-b6b"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/.s/t/995/27.gif
200 OK 2.8 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/t/995/27.gif
IP
File type GIF image data, version 89a, 221 x 10\012- data
Hash 1d8751d671540d68a77fe17cfa32bdc1
77dbefd9d17a22a0388fb61fa0f6998300996b97
c44ee5e731551de8068001fb3d805c206ea73254f15ff959c326f19f578550b6
GET /.s/t/995/27.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/gif
Content-Length: 2782
Last-Modified: Wed, 03 Dec 2014 12:38:53 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f045d-ade"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2570
Cache-Control: max-age=97303
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:58 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:49:41 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
fairytail-pw.clan.su/?mLzSyO2IvMpmR%3BJGfF8GY56Ksk0QLzDQXL%3BEvg%21piW20pUGwPKQlPZeukuTusrcm0YpNv1ci1fIK3jwh5xFnjCFT1eRmH%3Boo
200 OK 798 B URL HTTP/1.1 fairytail-pw.clan.su/?mLzSyO2IvMpmR%3BJGfF8GY56Ksk0QLzDQXL%3BEvg%21piW20pUGwPKQlPZeukuTusrcm0YpNv1ci1fIK3jwh5xFnjCFT1eRmH%3Boo
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a43c82cd9298207322109d4fd807a916
f047dbda9b7db9700d92f8a29376ea36e8fe5e0b
c2f96046cdb40222bc3da6d7293697be1337e96a47d777617bea17b350ec21bf
Analyzer Verdict Alert fortinet Phishing
GET /?mLzSyO2IvMpmR%3BJGfF8GY56Ksk0QLzDQXL%3BEvg%21piW20pUGwPKQlPZeukuTusrcm0YpNv1ci1fIK3jwh5xFnjCFT1eRmH%3Boo HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
fairytail-pw.clan.su/.s/src/uwnd.min.js?2
200 OK 57 kB URL HTTP/1.1 fairytail-pw.clan.su/.s/src/uwnd.min.js?2
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 20adfead3a54ad11599adb1bab3d6fc6
23bb516448d5c643cb186ad9aec426388aa79dfd
b49b11429b509cf608a66bbcebc13cf63fa444b998c1a678d1bebfe33f7c2ff4
Analyzer Verdict Alert fortinet Phishing
GET /.s/src/uwnd.min.js?2 HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/mchat/
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/javascript
Last-Modified: Mon, 25 Apr 2022 10:32:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"626678ba-3334b"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
s44.ucoz.net/adv/dummy/000/css/style.css
200 OK 1.6 kB URL HTTP/1.1 s44.ucoz.net/adv/dummy/000/css/style.css
IP
Hash 50406c447ccad47ca9e5d53eff612ffb
16e3921585135a87a1066689c9c67a312d96c92d
01a0732bba96fb38be885a1d233fecf52e32c7e07e48cd05f6f07a3690ea304c
GET /adv/dummy/000/css/style.css HTTP/1.1
Host: s44.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2019 14:28:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"5c9a36f9-19eb"
Content-Encoding: gzip
fairytail-pw.clan.su/smile3/neko-1-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-1-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-1-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-1-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/.s/img/icon/profile.png
200 OK 676 B URL HTTP/1.1 fairytail-pw.clan.su/.s/img/icon/profile.png
IP
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash f063cf2f9ab83f2ca68327c0927a7b7a
e84b2105d2b47127d5cf8366a5606639f27684cd
f5d62b58ed22f77bea1a87ce4e204e2b213459746f74ee5e0be91f22851420cf
GET /.s/img/icon/profile.png HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/mchat/
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: image/png
Content-Length: 676
Last-Modified: Mon, 21 Nov 2022 12:38:09 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "637b7131-2a4"
Expires: Fri, 16 Dec 2022 06:47:56 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-7-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-7-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-7-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-7-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile3/neko-20-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-20-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-20-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-20-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-5-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-5-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-5-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-5-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-26-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-26-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-26-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:56 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-26-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-10-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-10-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-10-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-10-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-20-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-20-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-20-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-20-.gif
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b265dffaa2c792174b252208015f7d47
024e33c2d6f604830e1cffb8d15644902586ab9c
0f542a9c56088e4286617e5669f380cd54a8a7f2c0ade9f8b35bd9ccd80fd984
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0F542A9C56088E4286617E5669F380CD54A8A7F2C0ADE9F8B35BD9CCD80FD984"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2924
Expires: Sat, 26 Nov 2022 07:36:42 GMT
Date: Sat, 26 Nov 2022 06:47:58 GMT
Connection: keep-alive
fairytail-pw.clan.su/smile3/neko-40-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-40-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-40-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-40-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-21-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-21-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-21-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-21-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile3/neko-7-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-7-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-7-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-7-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-17-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-17-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-17-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-17-.gif
X-Frame-Options: SAMEORIGIN
rot.spotsniper.ru/?src=ujs6
200 OK 1 B URL HTTP/1.1 rot.spotsniper.ru/?src=ujs6
IP
ASN #44066 diva-e Datacenters GmbH
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6 HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
fairytail-pw.clan.su/smile3/neko-9-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-9-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-9-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-9-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/favicon.ico
200 OK 894 B URL HTTP/1.1 fairytail-pw.clan.su/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data
Hash 27b22c21262b3bd722800aeed002d8b2
8ae0891226129da77c30dafc84b8c3af8c4ba9c5
6fe4856a7db457f2fee4c5e0a5af461a9c8676a14da349d4f226a39a72609cc7
GET /favicon.ico HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/index/8-409
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/x-icon
Content-Length: 894
Last-Modified: Sun, 12 Sep 2010 17:40:41 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4c8d1099-37e"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-14-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-14-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-14-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-14-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-4-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-4-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-4-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-4-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-23-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-23-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-23-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-23-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-21-.gif
200 OK 9.9 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-21-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 70d082e4f98f6569b7c524d6113faba2
4fe2709a06698a66ffa3cc7e15d589925cad5fd2
365c29ef0c8e97c71b130eaf5554163c4fcb7c2424bd2a4db010b37cd0df05ff
GET /smile2/0-21-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 9877
Last-Modified: Fri, 09 Dec 2011 15:06:39 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223ff-2695"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YOwrFvVur7uk9RxUH1mvZg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VESLdz66wUZXZWtNoxqqik7PvJA=
fairytail-pw.clan.su/smile2/0-14-.gif
200 OK 6.5 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-14-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash b1871c08b6c3c8116ed5a8c6532e5321
247e28b57258fe7d6de17afa4e0aaf5cb0531e44
c72ffa59ea3830c8e53a707313a899db48868d3b91fcf9f281ed64ef6fc61d44
GET /smile2/0-14-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 6547
Last-Modified: Fri, 09 Dec 2011 15:06:00 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223d8-1993"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile3/neko-35-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-35-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-35-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-35-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-19-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-19-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-19-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-19-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-39-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-39-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-39-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-39-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-30-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-30-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-30-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-30-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile3/neko-12-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-12-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-12-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-12-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-12-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-12-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-12-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-12-.gif
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-2-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-2-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile2/0-2-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile2/0-2-.gif
X-Frame-Options: SAMEORIGIN
s44.ucoz.net/adv/dummy/000/img/ucoz-logo.png
200 OK 4.6 kB URL HTTP/1.1 s44.ucoz.net/adv/dummy/000/img/ucoz-logo.png
IP
File type PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced\012- data
Hash 14d37a3409afc2c450c62b97bc8019da
43fc12bf16a292d6d10b17ab7d1e37785288858c
fc4f998c5fcacc6cf161f1bedf46ec55e56273670ecce8b59e947b68d3c5bdb2
GET /adv/dummy/000/img/ucoz-logo.png HTTP/1.1
Host: s44.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/png
Content-Length: 4585
Last-Modified: Tue, 26 Mar 2019 14:28:09 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c9a36f9-11e9"
Accept-Ranges: bytes
fairytail-pw.clan.su/smile3/neko-11-.gif
301 Moved Permanently 178 B URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-11-.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /smile3/neko-11-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://fairytail-pw.clan.su/smile3/neko-11-.gif
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile3/neko-1-.gif
200 OK 6.8 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-1-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash f39785492b99039274174b06011b7dd2
3b0c4f285528d395f73726f6319da4a20d14aa5f
1e25c91cb7436cc69bbe92878a1f0cbb6bca8d6b69904020e2d7ceedfdac3c9b
GET /smile3/neko-1-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 6795
Last-Modified: Mon, 12 Dec 2011 11:07:44 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e080-1a8b"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-7-.gif
200 OK 28 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-7-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 7569bb8ea0d0e7b7609013765fd6cde5
ac72b741698b887b39d542cfe334b42e7f077f75
285cb5ec5ab7cd99c3f1fd87faa97113c36312c695ea72c9fa247cfa9d8bcade
GET /smile2/0-7-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 28137
Last-Modified: Fri, 09 Dec 2011 15:05:22 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223b2-6de9"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__ru.js
200 OK 167 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__ru.js
IP
File type ASCII text, with very long lines (1329)
Size 167 kB (167119 bytes)
Hash e269c265007dcb5ecc3f2aa6155bc52a
cb8eed3b2684c2767bf45d652f6d630740051d04
85d7f1b40b063a3a07449151918eb63b85f2c6ff5d54936618a1a737ab5c7dbf
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fairytail-pw.clan.su
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 167119
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:40:52 GMT
expires: Fri, 24 Nov 2023 17:40:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 133626
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash b0281711a2901996f5c9db474da7dd27
a58cffb96c549f714dba7bdef62c416c6d86916f
f9e8d53459f51d4d17b5518893484fee85826a702d48eaee269b458f5273a85d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 30 Nov 2022 04:47:08 GMT
ETag: "a58cffb96c549f714dba7bdef62c416c6d86916f"
Last-Modified: Sat, 26 Nov 2022 04:47:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3492
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700acffad4bb503-OSL
fairytail-pw.clan.su/smile2/0-26-.gif
200 OK 2.2 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-26-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash f37d04771a5e2bb7e6994e643f31d880
f3d146b5c9bcd6de682479080371ec28ec1c04db
dc78a9d02c12fe02256d528975114ca4517f9253f039c6600738aa55ed766dbc
GET /smile2/0-26-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 2249
Last-Modified: Fri, 09 Dec 2011 15:06:39 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223ff-8c9"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221669431432522%22
200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221669431432522%22
IP
File type JSON data\012- , ASCII text, with very long lines (21675), with no line terminators
Hash ea03d5317b8603ecb3e688bccb4f2ebf
44561c5d52f29d99fb156f0c458076664c48e0d1
e1c36b08648f69f97433e0bf626d7fb667db060285ea239e8e729e607e83569c
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221669431432522%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21675
via: 1.1 google
date: Sat, 26 Nov 2022 06:02:06 GMT
cache-control: public,max-age=3600
age: 2752
last-modified: Sat, 26 Nov 2022 02:57:12 GMT
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash b0281711a2901996f5c9db474da7dd27
a58cffb96c549f714dba7bdef62c416c6d86916f
f9e8d53459f51d4d17b5518893484fee85826a702d48eaee269b458f5273a85d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 30 Nov 2022 04:47:08 GMT
ETag: "a58cffb96c549f714dba7bdef62c416c6d86916f"
Last-Modified: Sat, 26 Nov 2022 04:47:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3492
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700acffc96ab511-OSL
fairytail-pw.clan.su/smile3/neko-20-.gif
200 OK 4.7 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-20-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash 4f86061ec55148e6ebb110fe49cf5173
f4aef6a37d0c2576e8735ca6996a776aebffa762
7430fa73ae2e9e4c67152a78847dc7c980c5ceb071ab8b722a49a3cf67d40ffb
GET /smile3/neko-20-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 4695
Last-Modified: Mon, 12 Dec 2011 11:09:42 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e0f6-1257"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-5-.gif
200 OK 11 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-5-.gif
IP
File type GIF image data, version 89a, 50 x 50\012- data
Hash f5a135ee930540bb69c6d4b82e03bc43
f43ff832dd9ecef4581329dc7439866c5f21a815
cfbd2fb5aa002033a71b878d564a9543c7bf617587fa2acdd6bbb7ddb84985a7
GET /smile2/0-5-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 11356
Last-Modified: Fri, 09 Dec 2011 15:05:22 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223b2-2c5c"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
counter.yadro.ru/hit;ucoznet?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445276928
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;ucoznet?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445276928
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;ucoznet?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445276928 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Thu, 25 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rot.spotsniper.ru/?src=ujs6&s_subid=btn
200 OK 1 B URL HTTP/1.1 rot.spotsniper.ru/?src=ujs6&s_subid=btn
IP
ASN #44066 diva-e Datacenters GmbH
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6&s_subid=btn HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
counter.yadro.ru/hit;ucoz_desktop_ad?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445276930
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;ucoz_desktop_ad?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445276930
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;ucoz_desktop_ad?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445276930 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Thu, 25 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
fairytail-pw.clan.su/smile2/0-20-.gif
200 OK 14 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-20-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash d454e6d6062c8a984fa3169815491052
f5c17968de264a9cae96a52b9f253344cd51312f
4d254b1657b57ba5c662de68d73cf480dcafdf7458c4a4faf3a998df99a2fbdb
GET /smile2/0-20-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 14296
Last-Modified: Fri, 09 Dec 2011 15:06:39 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223ff-37d8"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash b0281711a2901996f5c9db474da7dd27
a58cffb96c549f714dba7bdef62c416c6d86916f
f9e8d53459f51d4d17b5518893484fee85826a702d48eaee269b458f5273a85d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 30 Nov 2022 04:47:08 GMT
ETag: "a58cffb96c549f714dba7bdef62c416c6d86916f"
Last-Modified: Sat, 26 Nov 2022 04:47:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3492
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ad004dadb503-OSL
fairytail-pw.clan.su/smile2/0-10-.gif
200 OK 19 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-10-.gif
IP
File type GIF image data, version 89a, 50 x 50\012- data
Hash 089cafa84b910c2de1e61f6eac0a8525
ffa814fc4176f3e1b4de33b009e40f0a6ec553fc
576884258bc79aade1014505c4e3719e6b8879abb9fba1c04a966a9f81a99a2e
GET /smile2/0-10-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 18570
Last-Modified: Fri, 09 Dec 2011 15:06:00 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223d8-488a"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile2/0-4-.gif
200 OK 8.9 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-4-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 451d046ef19d3276577a34dd79144fb6
8bfad23814e07179cb89e0564dfcc99320e3ffca
bef6bfa6da633fde5e7ba5e26c8ca498fb9895da6c667405082b0a2100b746ae
GET /smile2/0-4-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 8850
Last-Modified: Fri, 09 Dec 2011 15:05:22 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223b2-2292"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile3/neko-40-.gif
200 OK 12 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-40-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash 31b1a973414f0f2f9e9dcc6dd7304358
24b2bf08e014c43809dc351d60580102b2e73afd
6130e8aad22655ed9115ff37455435422c71c4ebd92e12dacd68591b54dc0a0c
GET /smile3/neko-40-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 11615
Last-Modified: Mon, 12 Dec 2011 11:11:09 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e14d-2d5f"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-12-.gif
200 OK 5.4 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-12-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 49c41208e22670002fcb2483c3ad6c88
ff48ea3e22b4b0fd08a9fee4beb55d51082fa6a6
cf42f7675b4fc960186372ff07b05f609256d99ec5c175f301586932acc7b28a
GET /smile2/0-12-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 5408
Last-Modified: Fri, 09 Dec 2011 15:06:00 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223d8-1520"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
counter.yadro.ru/hit;clickgate08?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445277272
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;clickgate08?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445277272
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;clickgate08?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445277272 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Thu, 25 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
fairytail-pw.clan.su/smile3/neko-7-.gif
200 OK 14 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-7-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash b26b9396253e59bdb11248eeb4dd4df0
85c1349782189882b79f3f10e60c01c3fa117a43
36e79b36e48474ff84187ef817901af68354447dd8b1af6e15250996c5df58bf
GET /smile3/neko-7-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 13789
Last-Modified: Mon, 12 Dec 2011 11:07:44 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e080-35dd"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
200 OK 60 kB URL HTTP/2 themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
IP
File type Web Open Font Format, TrueType, length 60332, version 1.1\012- data
Hash 0d6d6ae28614efe13ec053eaeef473c1
20cd1c419ba0763bb4bbb1435bc0aed00452af2e
5dfdd878d2d6bdd50f37fde1800a044753dd00bac3c3a30a35f999b422a48ee1
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fairytail-pw.clan.su
Connection: keep-alive
Referer: https://s44.ucoz.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 60332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:09:24 GMT
expires: Wed, 22 Nov 2023 15:09:24 GMT
cache-control: public, max-age=31536000
age: 315514
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s44.ucoz.net/adv/dummy/000/img/bg.gif
200 OK 1.3 kB URL HTTP/1.1 s44.ucoz.net/adv/dummy/000/img/bg.gif
IP
File type GIF image data, version 89a, 485 x 3\012- data
Hash b19967d808ed7c42b41316d6c8474f55
18d80748bd4041b13a3373a429281ec65347a0e2
16c9962c4ecd52efc16d9d639d52fc60b9e427b6e454190d162f1aa1d220ad50
GET /adv/dummy/000/img/bg.gif HTTP/1.1
Host: s44.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s44.ucoz.net/adv/dummy/000/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 1268
Last-Modified: Tue, 26 Mar 2019 14:28:09 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c9a36f9-4f4"
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-17-.gif
200 OK 8.2 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-17-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 5dcbd8e45c26efabd59b40bd1a6e1282
af5727bb44566369a267e5ad7e114efcecab32e7
b623f47963feb94391bbff63523f2c0d75f3044f848bc61bca5a8118c17984d6
GET /smile2/0-17-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 8244
Last-Modified: Fri, 09 Dec 2011 15:06:00 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223d8-2034"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile3/neko-35-.gif
200 OK 8.5 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-35-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash 65fa8d19bad3a52949d8a49d4b288113
bb07018a2bd382c0cdc5e844f76aa073cfdbc7cc
85219c5bdecc42b7671ed1b41367ae8bbf3960ed2fa909add92fbd3ac9793246
GET /smile3/neko-35-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 8463
Last-Modified: Mon, 12 Dec 2011 11:10:18 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e11a-210f"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-23-.gif
200 OK 21 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-23-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash b8c2af5ad1572ca1aeccda232c6ea903
e4bced27eb1a203dd71b244fbab8635199d49f67
4ceca5c98c10f411ebc96b607158f22c584fdb6bed2472e8d25cbe794c6619db
GET /smile2/0-23-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 21036
Last-Modified: Fri, 09 Dec 2011 15:06:39 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223ff-522c"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
counter.yadro.ru/hit;ucoz_topline_worldwide?rhttps%3A//fairytail-pw.clan.su/index/8-409;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/%3FmLzSyO2IvMpmR%253BJGfF8GY56Ksk0QLzDQXL%253BEvg%2521piW20pUGwPKQlPZeukuTusrcm0YpNv1ci1fIK3jwh5xFnjCFT1eRmH%253Boo;1669445277966
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;ucoz_topline_worldwide?rhttps%3A//fairytail-pw.clan.su/index/8-409;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/%3FmLzSyO2IvMpmR%253BJGfF8GY56Ksk0QLzDQXL%253BEvg%2521piW20pUGwPKQlPZeukuTusrcm0YpNv1ci1fIK3jwh5xFnjCFT1eRmH%253Boo;1669445277966
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;ucoz_topline_worldwide?rhttps%3A//fairytail-pw.clan.su/index/8-409;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/%3FmLzSyO2IvMpmR%253BJGfF8GY56Ksk0QLzDQXL%253BEvg%2521piW20pUGwPKQlPZeukuTusrcm0YpNv1ci1fIK3jwh5xFnjCFT1eRmH%253Boo;1669445277966 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 06:47:58 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Thu, 25 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
fairytail-pw.clan.su/smile3/neko-12-.gif
200 OK 9.5 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-12-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash 288b2330ffebaf196958a19d4b5b92ba
bcf452d07ae82353d50fc0734635691ef9d1d7df
8c05edd83c57038a9eb2032bdd402c37fa721b2182f6d579f8d3cb1d6b207c02
GET /smile3/neko-12-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 9517
Last-Modified: Mon, 12 Dec 2011 11:08:38 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e0b6-252d"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fairytail-pw.clan.su/smile3/neko-9-.gif
200 OK 6.3 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-9-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash 9cf9e3391d5c856697f3578448bbb044
2b9ff94891332ac0786733664e168900bdb98e0c
b8b8f52792d24a1c8c6c154b351a7fdf82e3c3b597c89d953cacceea38ff8169
GET /smile3/neko-9-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 6284
Last-Modified: Mon, 12 Dec 2011 11:07:44 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e080-188c"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-2-.gif
200 OK 3.1 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-2-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash a3c089c359accfe6aeb8e95bbed2713f
80703e496ef786536578040e2909b627ba68bc5d
8fe8bf0cc774a2954226c99695e9c95b2d65a7fe608fd7f69fdc5d8100d8a977
GET /smile2/0-2-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 3064
Last-Modified: Fri, 09 Dec 2011 15:05:22 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223b2-bf8"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-39-.gif
200 OK 15 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-39-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash c348b52b006a3514b7f731cd2ac443eb
6f6c4df29f85ad4419fd4d276bc72f2f3c26614e
535d7b0f18d71fb45099e989cb7363a8e9988de4afb4a3dd2d7dc9b3b3d8ef7d
GET /smile2/0-39-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 14776
Last-Modified: Fri, 09 Dec 2011 15:07:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee22425-39b8"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-30-.gif
200 OK 5.5 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-30-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 25477e01d91990d62fcdc6e22a09285b
15c44cc503eaf988c4c136f1d6473b770bb53613
ba5f71deff753369332f6920f7b7591402fa29c3dddcf85583b1df858cbb9a2d
GET /smile2/0-30-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 5527
Last-Modified: Fri, 09 Dec 2011 15:07:10 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee2241e-1597"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile2/0-19-.gif
200 OK 9.1 kB URL HTTP/1.1 fairytail-pw.clan.su/smile2/0-19-.gif
IP
File type GIF image data, version 87a, 50 x 50\012- data
Hash 108ff369a4401a20a3e60abc662407ec
500e1bc66cad0b6cf7adb6f677c6120ec0e7af0b
493aa6fd1e29c5f6fe8b5cf5907a9e8c0c708202e3f9c0940ae078e453f258d3
GET /smile2/0-19-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 9122
Last-Modified: Fri, 09 Dec 2011 15:06:39 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee223ff-23a2"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fairytail-pw.clan.su/smile3/neko-11-.gif
200 OK 22 kB URL HTTP/1.1 fairytail-pw.clan.su/smile3/neko-11-.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Hash 6233bd2a00cb1f581995dbccf2c2bd41
27d70b0c431daf9586bf2dfed44ba9720e58f09b
1715b75d7a4c95c71671f0ab2c63f30e8df74fc3518dee390ef7033da79ba248
GET /smile3/neko-11-.gif HTTP/1.1
Host: fairytail-pw.clan.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6fairytail-pwuzll=1669445276; 6fairytail-pwpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:57 GMT
Content-Type: image/gif
Content-Length: 22164
Last-Modified: Mon, 12 Dec 2011 11:08:38 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4ee5e0b6-5694"
Expires: Fri, 16 Dec 2022 06:47:57 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 23:13:18 GMT
expires: Sat, 25 Nov 2023 23:13:18 GMT
cache-control: public, max-age=31536000
age: 27281
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 584161
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6957
Expires: Sat, 26 Nov 2022 08:43:57 GMT
Date: Sat, 26 Nov 2022 06:48:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5088223f5973e3cd56f03f50a1e84b79
0b6c9b51d10762a4747286ab5b1c2354fa39c622
8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LDrq5UcFhG63XFZhmeS5Z_mEkwrvuQ2bLfT8hV9I3E1s1lJLZF5Dww==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
age: 32496
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f470fab0957e148a9c58dfeedc72463
2f88534696701cfdaf7e2aa78f6d4b8766a2b77f
c2c5617f8fbf3860578a9bcf821dea13e3225ccd02774f29f4bf022e4abd9ff9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11186
x-amzn-requestid: 67dbfbd2-ba7f-4540-8d2c-5c2c4de21cae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUf7HGdIAMFhow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813465-36b0d8fc4bdb5faf328bd99d;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:21 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aWg_mLQcRYtCNYfaypt-rqwKNbzd4FOFd3mMT8sSQU_dmO7KP29Rsw==
via: 1.1 7b00c3fd9220034414107b03e53b1b8e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:01:51 GMT
age: 31569
etag: "2f88534696701cfdaf7e2aa78f6d4b8766a2b77f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b72976b3f013ace345c85b0bdfea5f76
3e9004d90ed72f3034eae5cddd476eb50ac63ea6
068a487b9ae3d7461ef16e04cee8802a7b76a2bce19bf66df48b2b1cdb0c772c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6382
x-amzn-requestid: e1e4c180-7f90-4d4b-a5f4-094e5f542a18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLacUFC4oAMFayA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813de8-09efee9d0604d16c61e3d452;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 22:12:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SR2His1pCOwZHi7bBtnG8QeCtZQsCMeJxs-UCpd79SK_77eM5fWeog==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:24:51 GMT
age: 30189
etag: "3e9004d90ed72f3034eae5cddd476eb50ac63ea6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 32664
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:20:28 GMT
age: 80852
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 6212
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
counter.yadro.ru/hit;desktop_click_load?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445279935
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;desktop_click_load?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445279935
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;desktop_click_load?r;s1280*1024*24;uhttps%3A//fairytail-pw.clan.su/index/8-409;1669445279935 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 06:48:00 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Thu, 25 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66a809304670591e28394bcf6a42cc56
7a13b9948a8f5cc4c1fd048e4e5f2b8f397b5457
04ea73306171d585ec2d5b9f786af867320e73f692cbb93ff0d318bba2a7d857
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04EA73306171D585EC2D5B9F786AF867320E73F692CBB93FF0D318BBA2A7D857"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8336
Expires: Sat, 26 Nov 2022 09:06:56 GMT
Date: Sat, 26 Nov 2022 06:48:00 GMT
Connection: keep-alive
absoluteroute.com/bens/vinos.js?23433&u=null&a=0.8365241857557759
200 OK 140 kB URL HTTP/1.1 absoluteroute.com/bens/vinos.js?23433&u=null&a=0.8365241857557759
IP
ASN #6681 Rozetka Sp. z o.o.
File type ASCII text, with very long lines (727)
Size 140 kB (140149 bytes)
Hash 73a5e3926c4b2c392cce9ba3b0eae5d2
83f7ba3a7f39942b1a82e62abae7f6898943aebb
4bba2cbda87cb1ac0890b96725b32b3ebbd78d5305af628e7a72b9282bc431a8
GET /bens/vinos.js?23433&u=null&a=0.8365241857557759 HTTP/1.1
Host: absoluteroute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fairytail-pw.clan.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:48:00 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NON DSP COR CURa TIA"
Set-Cookie: uuid=16694449351532635802; expires=Mon, 25-Nov-2024 06:48:00 GMT; Max-Age=63072000; path=/; samesite=None; domain=.absoluteroute.com; secure
195.216.243.44
216.58.207.195
193.200.64.20
23.36.76.226
93.184.220.29
104.18.20.226
31.172.81.159