GET rashcolonizeexpand.com/pixel/sbs?c=1
192.243.61.227200 OK 0 B URL GET rashcolonizeexpand.com/pixel/sbs?c=1
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:52 GMT
Content-Length: 0
Connection: keep-alive
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0174_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0174_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 2c51263f2c364355d9df80b7bb677e85
cd4dc5eecd6d7149ada84181c8c4de64fcc81acf
20e3124b7e484c5abeea1452e3dbf0f1c591a8d38b9560eca5c98be077a371dd
GET /photos/g/i/gingercoug/1000/gingercoug_0174_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38448
server: cloudflare
last-modified: Thu, 03 Jul 2025 13:30:50 GMT
etag: "6866860a-9630"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eivYpWhkvIdCveajP5BUNZrhxoTWMv7adid%2BtxPUjOc3Xpqc3J2vSeEznGaShEcpM2Cnqgu7q2j%2BKqfRyA9XTM1oOa0KtvQruWBgD6fS"}]}
cf-ray: 9599d8c5ef2b56c3-OSL
X-Firefox-Spdy: h2
GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/js/script.js
172.67.133.15200 OK 5.0 kB URL GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/js/script.js
IP 172.67.133.15:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
Hash d15d52790984d181d8ed3d780c9e34f7
41e06762278d164068d1f86768ba7f565f0171b0
617875da55dc95906395ba58122c022eac7fdfe4d1dbe4f39180d91faf11d926
GET /sb/notifications/cams/default/global/ios-adalt/1/js/script.js HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:52 GMT
content-type: application/javascript
content-length: 4984
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "65aa86c6-1378"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 35391
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=s1cLPCd2lOlcR32uAyM%2FClrl6eExq6OBpWJir4bmYVEGNwACaqhYsNeT5ZGAMHjsJnlJNVnF13n05gWeunoZIMXq8RQh%2BhZYqUF23cQd70jJ%2F%2FX%2B"}]}
cf-ray: 9599d8d51c4b5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0160_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0160_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x667, components 3
Hash 65a2087b48c96af1b9ea04cd2ef36f15
2dcc29fa914fb73a42434038af51869919aaf17e
103780b53a2f34b00d33d7f70c8d5580aa61f2a4357b3a15b6ad92a054a5d3ef
GET /photos/g/i/gingercoug/1000/gingercoug_0160_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38141
server: cloudflare
last-modified: Sun, 04 May 2025 14:48:49 GMT
etag: "68177e51-94fd"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fbDHTn2VJr832R9X%2FZsXekgG7rWA091A04SwMpst2Jh20CCEJMRmrVFEheCWXnJ4IaxC0U4n0O83Zh6Jl7Fs1QJOUstpN1GjNsI16i2N"}]}
cf-ray: 9599d8c5ff5156c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0155_s.jpg
104.26.8.56200 OK 32 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0155_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 4257d35aa617ab666311e009051bcfee
d7eaa2b3f4dd3cdf9bce3917804154ab808be8ff
6ad0a6dd38b8c6ad5fee600de9a51d434a1f10a9b5649347b004eb25ddd734eb
GET /photos/g/i/gingercoug/1000/gingercoug_0155_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 32200
server: cloudflare
last-modified: Tue, 08 Apr 2025 08:31:42 GMT
etag: "67f4deee-7dc8"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=J7Xm%2F6e56TnqXNPOCJi4PqWDg1%2B4OUgw6t88FheIrMMsy%2FIouXD8ketUY%2FOeraXA9jpAv8mLAn2RC67FD%2BBjR%2Fo7pp99pLcyMsCilVTi"}]}
cf-ray: 9599d8c60f6256c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0164_s.jpg
104.26.8.56200 OK 42 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0164_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash acee6768c431bfce57bf2e8adba0bbce
7dad771e83cf8ba28eb1345747def6a31b3bc2e0
fa4634e5a020778f84bc7beaf75eface230a05a79a48cac622d0d5cc42a05099
GET /photos/g/i/gingercoug/1000/gingercoug_0164_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 42488
server: cloudflare
last-modified: Sat, 10 May 2025 00:37:35 GMT
etag: "681e9fcf-a5f8"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2Ci4o3SbUaOfv%2Bnt7lOB3UjjTlmTt%2F%2BFnBCylkgXyTELSntXcIL0TyMPo37EFMSZ7Fx%2BPunqpLGodBWlDSmRygfTWcjIg%2BFDYJI%2FZfKS"}]}
cf-ray: 9599d8c5ff4556c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0154_s.jpg
104.26.8.56200 OK 42 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0154_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 84429b485480deac382801dff760ceb8
40ff1ed5bc188f1d59ee114e9e50daa5055022b7
376f812947d5461d67342521359774534c2a869aa15c70f2a8c9687d16812753
GET /photos/g/i/gingercoug/1000/gingercoug_0154_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 42196
server: cloudflare
last-modified: Fri, 04 Apr 2025 02:02:37 GMT
etag: "67ef3dbd-a4d4"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2iIq2ezeydbesn3d8IY3wHXaK%2BeZm9%2BCPBzE8BI2eKEKJ3O%2B0AQjJdOprZ9xKvZJGRraoxH69ZPMYxnD4cEtH77Ap2lhHK6huix2UaYE"}]}
cf-ray: 9599d8c60f6556c3-OSL
X-Firefox-Spdy: h2
GET professionaltrafficmonitor.com/stats
18.194.106.70200 OK 40 B URL GET professionaltrafficmonitor.com/stats
IP 18.194.106.70:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerAmazon
Subjectprotrafficinspector.com
Fingerprint5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
ValidityTue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 6664538147bd8953fb1811da13bfc262
9feae18f2f8cbde2ddb1106d475e37fe51ddbb5b
8bb244e03a98275cfd30457730b7aa306938e5078bd120cad91b4edc67d19abc
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://thefappening.plus
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=b330d134-639b-4bf5-b3cb-2242ebc50758:2:1; expires=Sun, 01 Jul 2035 22:33:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Findex.html&l=1573&fd=528
172.240.108.68200 OK 0 B URL GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Findex.html&l=1573&fd=528
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Findex.html&l=1573&fd=528 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:51 GMT
Content-Length: 0
Connection: keep-alive
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0156_s.jpg
104.26.8.56200 OK 32 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0156_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash a7baccaa8549199e205877551e8d5dc5
4951213d05d55f9c08b4b1eea07f1daa566df130
018093c786b2efabff823e02a81c687cc87940a0b198da80808b8c1f9f6f5d90
GET /photos/g/i/gingercoug/1000/gingercoug_0156_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 32002
server: cloudflare
last-modified: Tue, 08 Apr 2025 08:31:44 GMT
etag: "67f4def0-7d02"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FIMCTZn9KIPAcPRem344ew3a1fbXgmA34xCUTzBbOOss2A1pFYrIPJTQGpgN7RY4nNkmBn%2FtvNG7NGR31Peb4DxaxFy9qmLrMyQSPOgD"}]}
cf-ray: 9599d8c60f5a56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/b/a/baby-red/1000/baby-red_0043_s.jpg
104.26.8.56200 OK 51 kB URL GET thefappening.plus/photos/b/a/baby-red/1000/baby-red_0043_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, height=0, description=MM, orientation=[*0*], software=One Photo Viewer, width=0], baseline, precision 8, 402x350, components 3
Hash 277a3242e9f2f01ee93a23a2a637c734
b1ef347f7e50505dc78f6a1dc2c06bd78a8e002a
49ffe9acecb367a00c1c80890ee044a0beb81f64be6f7ae9a2bad5121a139029
GET /photos/b/a/baby-red/1000/baby-red_0043_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 51239
server: cloudflare
last-modified: Fri, 13 Oct 2023 09:36:18 GMT
etag: "65290f92-c827"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wB11g53InnD3RYp8jlGPD5TNae%2BGXxC4oX%2BqHgOa%2F%2FmvoYf7EmKtkNPzvFbEma7frurBzjjmX1rmv4V1tRurquNwifxVDuJ1Yb9MHGWz"}]}
cf-ray: 9599d8c61f7656c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/v/a/vanessxo/1000/vanessxo_0043_s.jpg
104.26.8.56200 OK 24 kB URL GET thefappening.plus/photos/v/a/vanessxo/1000/vanessxo_0043_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 350x438, components 3
Hash 2f5b304009fa11227fa686b6e982ba3f
2e312f9c0170d6351fe049d4b711d1c4a83be01d
f84634e228e08904cc446ec83044bd4cad17890b7de89fdcbbe09f8842e11615
GET /photos/v/a/vanessxo/1000/vanessxo_0043_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 24050
server: cloudflare
last-modified: Wed, 06 Sep 2023 02:41:39 GMT
etag: "64f7e6e3-5df2"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4fzQSkj5weQw%2FVT%2BLnNzuLs%2FOq298zMnzQf0YWcrnKyOjyP0gvQaJ7efihiBpwGYa0FWlaF5OBpSChubo8utkvyoJzH1pAGxfd%2B40ATk"}]}
cf-ray: 9599d8c60f6956c3-OSL
X-Firefox-Spdy: h2
POST adv.clickadu.net/solid.gif?z=2032664&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=rMXTrcdaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=677741633378816&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=2
104.19.157.23200 OK 43 B URL POST adv.clickadu.net/solid.gif?z=2032664&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=rMXTrcdaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=677741633378816&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=2
IP 104.19.157.23:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerDigiCert Inc
Subjectclickadu.net
FingerprintA3:93:4F:E4:01:3D:E9:48:8F:06:22:9B:EF:D3:04:DF:7D:EC:FA:92
ValidityFri, 06 Dec 2024 00:00:00 GMT - Fri, 05 Dec 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=2032664&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=rMXTrcdaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=677741633378816&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=2 HTTP/1.1
Host: adv.clickadu.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 200 OK
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
UID=2507031733161c624300cc4419817f985d3d; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 9599d8d099f5568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fcss%2Fanimate.css&l=78689&fd=81
172.240.108.68200 OK 0 B URL GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fcss%2Fanimate.css&l=78689&fd=81
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fcss%2Fanimate.css&l=78689&fd=81 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:52 GMT
Content-Length: 0
Connection: keep-alive
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/img/mes.jpg
172.67.133.15200 OK 6.5 kB URL GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/img/mes.jpg
IP 172.67.133.15:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x188, components 3
Hash 86e4939be0b6bb60b8aef6305c8310e9
b89e5b80ba6dfc41b5ca8236d99b1e7c130455fd
69ac163f2a914cd85f4c928339180a53f4ed429e11ccb20f361c7040f09c280b
GET /sb/notifications/cams/default/global/ios-adalt/1/img/mes.jpg HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:52 GMT
content-type: image/jpeg
content-length: 6489
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "65aa86c6-1959"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 38970
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uEDbHV4i96PvuY5nydUL6vTuIauKClbBxInJZqoOiqGeqf1xw9ZGXaoiA6m5DT55TaDzpVGsLYVg%2BvXmiMh4gzIIU%2Bhvb7AVqjWZClFKrwVgQduH"}]}
cf-ray: 9599d8d47bc45693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0177_s.jpg
104.26.8.56200 OK 44 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0177_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 535e9ee2c1254655f7ec349b95e6eebe
c98e4c26f83ab43b97947c19d681a6ae56f8a3ba
2a6cabd46a44da714ec27d427939d27a5067b97cbbb4f1f1e9735558d6bd4f0c
GET /photos/g/i/gingercoug/1000/gingercoug_0177_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 44089
server: cloudflare
last-modified: Thu, 03 Jul 2025 13:31:19 GMT
etag: "68668627-ac39"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4%2Fb6isFh7szymSJVCJRZfb9tKN7L13oMHWbyKJjgpt%2BrvXXAu%2BYbx3EgLp8pg%2FznUx5BXg85FxHhLeu2A6JdUTTS2OLgVe4CTwyopJRE"}]}
cf-ray: 9599d8c5df2156c3-OSL
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/anticslab/v16/bWt97fPFfRzkCa9Jlp6IacVcWQ.ttf
142.250.74.35200 OK 31 kB URL GET fonts.gstatic.com/s/anticslab/v16/bWt97fPFfRzkCa9Jlp6IacVcWQ.ttf
IP 142.250.74.35:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hash 27b14ae4b78a83afd6dd7d1e09eb52d9
e3d286b97dff24643b5250ec4104e5a7bf8d417b
e6f8607331d8367bafbd395a47c07a2af6ca2f2055b108e3b4ba72de2d3a4d80
GET /s/anticslab/v16/bWt97fPFfRzkCa9Jlp6IacVcWQ.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17733
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Jul 2025 10:23:07 GMT
expires: Fri, 03 Jul 2026 10:23:07 GMT
cache-control: public, max-age=31536000
age: 43843
last-modified: Tue, 19 Apr 2022 18:27:57 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.show-sb.com/sb/notifications/cams/default/global/ios-adalt/1/index.html
172.67.170.115200 OK 1.6 kB URL GET cdn.show-sb.com/sb/notifications/cams/default/global/ios-adalt/1/index.html
IP 172.67.170.115:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectshow-sb.com
FingerprintDF:A8:5A:11:E9:7E:8B:0E:2E:08:20:FB:02:FE:C4:E3:E7:97:E8:3A
ValidityThu, 12 Jun 2025 07:26:41 GMT - Wed, 10 Sep 2025 08:25:04 GMT
File type HTML document, Unicode text, UTF-8 text
Hash bfb55fab910316ca52fc910c7a98ce24
814874f58dcda04751f2857e888e5d581966879b
febfdf3fb69a6e55ad587b14bd1303a84dc940d03e5312a15597ba95f25e63c9
GET /sb/notifications/cams/default/global/ios-adalt/1/index.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: text/html
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FdxHhwu4XNsS7KJCUVDo1URjPoKKaYqA58LcCuaElU%2F43EUrFyu8Xhp1Dykat1kwavVqJ7fLy3WUKM%2F2zCwjjIDNsY6V02gHWq9GhBY%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9599d8d01d2c0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thefappening.plus/wp-content/themes/Avada/assets/fusion2.css
104.26.8.56200 OK 627 kB URL GET thefappening.plus/wp-content/themes/Avada/assets/fusion2.css
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 627 kB (626972 bytes)
Hash 238bdcd986406ad2e22fc92f44bfab1b
23c89f6f50137cc4c2c8c8ba43aa2ddd8d662b0c
fccc8e42afa5cc19cab98b3b97de0f8240696ae31fd28b42abb16d6fa99020ae
GET /wp-content/themes/Avada/assets/fusion2.css HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: text/css
server: cloudflare
last-modified: Wed, 12 Feb 2025 13:02:24 GMT
vary: Accept-Encoding
etag: W/"67ac9be0-9911c"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ni%2F%2FldWz%2FJkwQrjP59LP1uUYobl%2Ff9yZqeuHZpt75%2BEf9zd2d5Age0FrU9RIOjjAw1eZWRCQzx5z5JChfYqawIOHDsgzEJ%2FXGqnYHM%2Be"}]}
cf-ray: 9599d8c5cf1556c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=5.7.1
104.26.8.56200 OK 32 kB URL GET thefappening.plus/wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=5.7.1
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JavaScript source, ASCII text, with very long lines (31951)
Hash 7968856d98214bc817032c7e7b4a4731
f3727ae87c0a3502adadc6eafa2b0ad9b0f2fa8f
9cb8140635d6cdab5d102fa8681ec5528bb165fdf7747b6fbd78a65075cc0abc
GET /wp-content/themes/Avada/assets/min/js/general/avada-header.js?ver=5.7.1 HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 18 Aug 2023 10:34:56 GMT
vary: Accept-Encoding
etag: W/"64df4950-7d54"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=m8aIgkpm%2FctaS3G%2FNuXcOMVvG56Pe7wnpRQNvAiA4BDUqsAts21vN%2BhVtqZoT2omXV6GMRFZGPIn603hq99nibgVryTWctXXV3d47XGo"}]}
cf-ray: 9599d8c62fb656c3-OSL
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KEwA.ttf
142.250.74.35200 OK 98 kB URL GET fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KEwA.ttf
IP 142.250.74.35:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type TrueType Font data, 17 tables, 1st "GPOS", 8 names, Microsoft, language 0x409
Hash db9cccb8b4cda76feb48468084cd43fc
0321c1bed286339fc4e18e7d2ae77e8b4809b22f
6a1942e230c185642ddd8e8d9e3bbb10f5a50bcdfb3f99f3a011a2cb6c2768bb
GET /s/ptsans/v17/jizaRExUiTo99u79D0KEwA.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 60123
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Jul 2025 10:40:11 GMT
expires: Fri, 03 Jul 2026 10:40:11 GMT
cache-control: public, max-age=31536000
age: 42819
last-modified: Wed, 27 Apr 2022 16:11:08 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET thefappening.plus//wp-content/themes/Avada/fav/apple-touch-icon.png
104.26.8.56200 OK 57 kB URL GET thefappening.plus//wp-content/themes/Avada/fav/apple-touch-icon.png
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced
Hash d4c8337d558c1286605b82fe57dc706e
1453fbd5a55d29e4640b2ab29078d7d3448ade45
408480c3b8a751c4ffe108282a86dc0387ee942915f9fc4daef1f9b4e180a6d5
GET //wp-content/themes/Avada/fav/apple-touch-icon.png HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Cookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; dom3ic8zudi28v8lr6fgphwffqoz0j6c=b330d134-639b-4bf5-b3cb-2242ebc50758%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:50 GMT
content-type: image/png
content-length: 57339
server: cloudflare
last-modified: Thu, 31 Aug 2023 10:01:27 GMT
etag: "64f064f7-dffb"
expires: Sun, 03 Aug 2025 22:33:50 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6JpdD9dQ45iP2IwCQX4t1Z1CDlxQxxj1PFnqdL5l1enM9HmuwwZIyUc4U%2BBoirl7r2CDoBj41QMMgvOFW8YVcrnlTtK8UjcKBmybMdcH"}]}
cf-ray: 9599d8cd188856c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0169_s.jpg
104.26.8.56200 OK 37 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0169_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 622x350, components 3
Hash e8eefd5f424cf21468154f6a78e76006
c68823000bfe32b657d20e94b0f6ca2ef57e2f4c
059380f4b43f119c83e58b83a390ef50149d4a006a1cc000efe361338b22b5a8
GET /photos/g/i/gingercoug/1000/gingercoug_0169_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 37230
server: cloudflare
last-modified: Tue, 17 Jun 2025 02:36:43 GMT
etag: "6850d4bb-916e"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yq%2B0thzA6sYZLmoK5idJO%2B6JOrw1MeoRv340AETWnaUdGvvJg%2Buvzot%2FKk5%2BUlHlBVrc150yiE5mTasA%2FO2ZL6w41p5FlVhorQd1bVHi"}]}
cf-ray: 9599d8c5ef3356c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0168_s.jpg
104.26.8.56200 OK 36 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0168_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x624, components 3
Hash 509530d39d13c2dd00166557ddb01363
4fd6c52f837d3ea7522aa39a716012094d6f060f
70a67ba9c814a36a448ddbd3d3450f0c2aebf60517b312ebcdc13dbb5d986ecd
GET /photos/g/i/gingercoug/1000/gingercoug_0168_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 36399
server: cloudflare
last-modified: Tue, 17 Jun 2025 02:36:40 GMT
etag: "6850d4b8-8e2f"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5uqrAtwqQ9VvNbHUoMo%2B5rvgX7PHZpsE23BQfbRzyNpIb1na6rg2RW8AGGFG06oKl54rqveQfICtwSQlFux4mGokhj3B5j%2BmkK0vkaae"}]}
cf-ray: 9599d8c5ef3956c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0152_s.jpg
104.26.8.56200 OK 40 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0152_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 7facbf6dc08f41698f1d81941797fecd
ebf632ccb350c50566a03905bf68e25b4254bb8c
137ed632f40154d5219a34de64b1bacd33ab7a21bde467dc85f77927fd058610
GET /photos/g/i/gingercoug/1000/gingercoug_0152_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 39775
server: cloudflare
last-modified: Fri, 04 Apr 2025 02:02:32 GMT
etag: "67ef3db8-9b5f"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7OkxC0kOKPl7RYs%2B%2FSLReFVbZucCckBhAK2U9BzCiMm%2BxJIx0l5P4wFaOB5goYEifJL%2BYzamTn2EXgNivrr62phq3PZwtTudZgUrozGj"}]}
cf-ray: 9599d8c60f6756c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0153_s.jpg
104.26.8.56200 OK 39 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0153_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 0cbc5f3dc2a8efeb348b8581f26ee302
7908fe20888902928309da6fae0f02591cf0c28d
ef86a1796dd139f5460ab41db0ede509a75a52d1e335f20f0e4c8a43e0053c75
GET /photos/g/i/gingercoug/1000/gingercoug_0153_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38946
server: cloudflare
last-modified: Fri, 04 Apr 2025 02:02:34 GMT
etag: "67ef3dba-9822"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dP9eK4sPD5l7NzPvpX7S39zAXvvdt0%2BJH0qAsANpDVCmG9Lhh9z4m9xghbzx2ji8GcVkl23frvYISQ90sbgZAtTJyURAArsKzeLLCl8j"}]}
cf-ray: 9599d8c60f6656c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0173_s.jpg
104.26.8.56200 OK 31 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0173_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 2e4dcb3615fcd4310cc778ab8c27546d
733c41e89235e611ea6221926427dfec42cf5cc6
b833fa5ebf30c9f793903674fb3f37149c7279939eb0d8373c936d4420a899ab
GET /photos/g/i/gingercoug/1000/gingercoug_0173_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 31124
server: cloudflare
last-modified: Wed, 25 Jun 2025 00:48:24 GMT
etag: "685b4758-7994"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GsdTObt3UPeBfG6eHb%2BgyB7xisyfJHpvp1s4zuaqYcrnejmeuMJNLFtBRRih%2B2%2Bmaf88z1UAmdGN8Jr7faZIflvCUElgeX5ja1tbS%2FS5"}]}
cf-ray: 9599d8c5ef2c56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/e/b/ebonyastrology/1000/ebonyastrology_0015_s.jpg
104.26.8.56200 OK 34 kB URL GET thefappening.plus/photos/e/b/ebonyastrology/1000/ebonyastrology_0015_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 350x499, components 3
Hash 798070a7805193291212ebf60fa2e12c
174e28280a8e0cd3410a5b5c40b2853bafdc3252
a729edc86f446ba0b1fcb53a648826e815144b3b5b18024f5fc512021895818a
GET /photos/e/b/ebonyastrology/1000/ebonyastrology_0015_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 34537
server: cloudflare
last-modified: Wed, 11 Oct 2023 10:09:50 GMT
etag: "6526746e-86e9"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XIhW4GHPRcfYdjfwsURLtAJWWqW5lXBjAQhvEau%2BVF6E4ucyKFs%2Fhs25GaJ0ZbBiN%2FJ1IfXjbC6JrdgTO6oP1gp3FFdkVFVlsShz10s3"}]}
cf-ray: 9599d8c61f7056c3-OSL
X-Firefox-Spdy: h2
GET adv.clickadu.net/get/2032664?id=2032664&jp=_clzamzqriiqllherjublhl&dr=49&cuaa=1&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=rMXTrcdaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=677741633378816&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=2&uf=0
104.19.157.23200 OK 2.1 kB URL GET adv.clickadu.net/get/2032664?id=2032664&jp=_clzamzqriiqllherjublhl&dr=49&cuaa=1&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=rMXTrcdaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=677741633378816&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=2&uf=0
IP 104.19.157.23:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerDigiCert Inc
Subjectclickadu.net
FingerprintA3:93:4F:E4:01:3D:E9:48:8F:06:22:9B:EF:D3:04:DF:7D:EC:FA:92
ValidityFri, 06 Dec 2024 00:00:00 GMT - Fri, 05 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (2086), with no line terminators
Hash 4f9673b22fce88c641b41c9a0a7120a2
a56832de66cffb705807dab2758ec637d1096eda
a33bbf6e02ac90a9e914d3185e212c4568a2079f924290c2a144537773f9463f
GET /get/2032664?id=2032664&jp=_clzamzqriiqllherjublhl&dr=49&cuaa=1&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=rMXTrcdaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=677741633378816&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=2&uf=0 HTTP/1.1
Host: adv.clickadu.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=250703173363bc6d14c0de424da5122a1679; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
cf-cache-status: DYNAMIC
priority: u=3,i=?0
server: cloudflare
cf-ray: 9599d8d0aa06568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0170_s.jpg
104.26.8.56200 OK 34 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0170_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 5db63babb965d6019c0c82376f4c2b68
fab49db67489e797f6b91dfe585ba28d632d1c19
013a5eea1b6c11af18bea4aa093696d6f32da1c2da1de6d8dda86edbbdacfa4a
GET /photos/g/i/gingercoug/1000/gingercoug_0170_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 33742
server: cloudflare
last-modified: Tue, 17 Jun 2025 02:36:45 GMT
etag: "6850d4bd-83ce"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Kecv5cd01WqQxpl5JHKtNSGAQna2Bwrp0ebJgpJp03W%2B6WUoGZ47uFedWAOrKp1RZQ2cDa534hbeogmRMJMT%2FbxhLCrIIev7ywHwekWm"}]}
cf-ray: 9599d8c5ef3256c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0162_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0162_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 5064029934ed840775a98a084e99ea36
d6ddb655b51619a83b1321423c12165ed4eb4bdc
a70b92bd3a03cfd9010ea252b5241553a439424abd6b01d1c95856bbfe6c5151
GET /photos/g/i/gingercoug/1000/gingercoug_0162_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38268
server: cloudflare
last-modified: Sat, 10 May 2025 00:37:29 GMT
etag: "681e9fc9-957c"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tzm%2ByLVCPD%2BDOhE0OYkaaOZ9LlleJl2fNqLoqz%2B7m90Y0nYCmbZOSwU2UsPvzs4Dlh64eLJhcBMDLcHkiQRSbudmvmqHW2UVgYtwTfed"}]}
cf-ray: 9599d8c5ff4b56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/wp-content/themes/Avada/assets/css/style.min.css?ver=5.7.1
104.26.8.56200 OK 209 kB URL GET thefappening.plus/wp-content/themes/Avada/assets/css/style.min.css?ver=5.7.1
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 209 kB (208841 bytes)
Hash 451632ddb243c0ea7faa7f9069e728bc
b7e4f68125c4ea37de811efce180cf1af881ae43
7e2f4d1f00797f7c2b4d30f46b2dc6a4a9d3a09d32bce2c33eeb63e36c79d915
GET /wp-content/themes/Avada/assets/css/style.min.css?ver=5.7.1 HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: text/css
server: cloudflare
last-modified: Fri, 18 Aug 2023 10:34:56 GMT
vary: Accept-Encoding
etag: W/"64df4950-32fc9"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=L0JSMzRR6IWp98%2Fx3oZG9nLsBUowv7qpAWgglUkPTzPY15beRhhLpNLsGJ5l9YMrweIaDQbc8vmrqs40JcrWtn9Uwb0vdWNHTxxs9OBr"}]}
cf-ray: 9599d8c5cf1156c3-OSL
X-Firefox-Spdy: h2
GET unseenreport.com/pxf.gif?uuid=b330d134-639b-4bf5-b3cb-2242ebc50758&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=c9a2facf619000e91da49ea0efcf22d3&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22
192.243.59.12200 OK 0 B URL GET unseenreport.com/pxf.gif?uuid=b330d134-639b-4bf5-b3cb-2242ebc50758&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=c9a2facf619000e91da49ea0efcf22d3&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint70:62:DC:6C:0A:F4:AA:56:4E:74:DC:EF:DA:CC:60:5A:C4:34:CE:F2
ValiditySat, 17 May 2025 22:34:21 GMT - Fri, 15 Aug 2025 22:34:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=b330d134-639b-4bf5-b3cb-2242ebc50758&eb=56a3745424804a23b12899170f9076de&te=9c9b2bc1fcb866fe34b4078d4dc2b749&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=c9a2facf619000e91da49ea0efcf22d3&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 03 Jul 2025 22:33:51 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: unseenreport.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 5ae5388dbb62ab824d24a1445d428b26
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0166_s.jpg
104.26.8.56200 OK 28 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0166_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 7830b06dbba5adc9acd3063b3324c5e6
24498b93c2ded7a9e15c99bd94dc5152513e251f
7cef25c3a72b28198b964e431aa64b392865e09dbb47706bfa02e65690691fb5
GET /photos/g/i/gingercoug/1000/gingercoug_0166_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 28195
server: cloudflare
last-modified: Tue, 17 Jun 2025 02:36:34 GMT
etag: "6850d4b2-6e23"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YnIMRgL0cV8WdhlXSMhPCeQDHGKRiyOksJM00uhC8upN4vQaEoOfTvjvViYdjqF4hy2joczQPINGP9DchEWBkVNM%2FlBCe2XPBA2riHqD"}]}
cf-ray: 9599d8c5ff4056c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/l/o/lola-myluv/1000/lola-myluv_0039_s.jpg
104.26.8.56200 OK 42 kB URL GET thefappening.plus/photos/l/o/lola-myluv/1000/lola-myluv_0039_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 525x350, components 3
Hash 33910fc424b99a14950d54e99f309ee4
705e81a134ae3192776dbb12f6c29accc79ca99a
ab82ff9a0d068663d488d13cb1220d6808b25feca53c9285716c4a99a1387564
GET /photos/l/o/lola-myluv/1000/lola-myluv_0039_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 41853
server: cloudflare
last-modified: Fri, 15 Dec 2023 10:46:11 GMT
etag: "657c2e73-a37d"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2T21htgvk3Tw0L%2BpoSwF%2BMQIVMsHgmm9q64JDY1LPr%2Bt686WZbLjYJLXiVBBM5gDdiXKrOLxVUzhTA9oZBYVMoZmnh9eVGjk5pOmZhdc"}]}
cf-ray: 9599d8c61f8d56c3-OSL
X-Firefox-Spdy: h2
GET rashcolonizeexpand.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYscVRR9NYm6cKEGcSNCg4IKTk99dc-UWUhiMhISMyEfBHQR3lf1vMzreuV7VV2dXgUHNLjqbMRlzemZjB8hOLgWpEfcBJS0q1lkNv4EIeBOeqah9S7uveeeKjj3vPvFVnlIYpT04MrHZqC0pkutpt9456bKhKlc4_L1RuA3_dONmyprx6cb_WmyvfeDKG767zY-knzDLIV-4PuBHzRWlZWp6S8dsVD5wyRoJn4zDptBK0bf_h-70oOjHkTvkJyCEpOX_ko_heJjZN0fz0m3UZj8vfPdUtPCWPTE7o1sIzNVhu68Ta2HNNudfQ3jJoR8swCT7c42gOltTzcAUxOy8NpTsGx3JhOst3OslGnIDEy8iKo3htRjKDoGN5tQ4gkBuMDlNWTdB5eNreidY5ZO2Qk5-exvqGpCTj59FVn30Vmt-o1rRpeFMplDP62h-mOozhh5uY9isABV7YMXn0OJ38nSs0vIuttrThsocfAWiyJfBFG82I4SthiztLXIIs4WwzAOJeMtf7m1cmSRSsfQcgjqFlA6D6XyUKYeytxDVxw0Yn8l5gGN2mki-LIf0zgWkvnJSuj7NOHLKPlU_xBFPgTXQ3B7F7m9iw11f0LIHxK2_AVuvYYTHlxB0BM1KklQOYKKElSKoCoIql69I7QLXf1AaFeyYFbDWY3qkSk6W3THFB2ZEVA7hBX1tso_c5vgxYnRIHViZKaJsmJv9fyZ6zeunr-2GMbt5VvBLX9Emai38kPyytRw7_bXF7EhDxo8oWFKedoOEt_3ZRIIGieS-jLlaRiKCE7VUG4B1HkYqAlpj79CribkxG_fgtF9OL0Prl4GLd8ArWrQ9RqDbK9YlynNc5mprNPMdekgTI28OInijrelD8nrR-_-ydtfQvLHZBbgtkZua9xWvxJ09L3RVVOR7aumcmRvLS9UVw3o9CauFbSQz39_Ud6pjBUXzrnhd2f4lJi2D69LV1yimVBZx5EfziohpF01lkvy8wV3U7IrpVs_W9qszC9d-XD1Qje30jllsjGoevJmCK4m5NSjn46uPfznBSg7hi1rdMu5UmXG4PlduHw-c4bA6jlmuYeqrEc2ZPOhVgRazjFlNdx_MJv3I0unf1NVb7l76FgPtNhE1q3RszV6ugbVQ7jyxKjI7eMP_oyOAkx7I6att8201fePTXbqoNEKWdReWWnLtC3SSERhJJKWL5OYJu04iVso3GS989zavwEAAP__UzSOcs8EAAA=
172.240.108.68200 OK 0 B URL GET rashcolonizeexpand.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYscVRR9NYm6cKEGcSNCg4IKTk99dc-UWUhiMhISMyEfBHQR3lf1vMzreuV7VV2dXgUHNLjqbMRlzemZjB8hOLgWpEfcBJS0q1lkNv4EIeBOeqah9S7uveeeKjj3vPvFVnlIYpT04MrHZqC0pkutpt9456bKhKlc4_L1RuA3_dONmyprx6cb_WmyvfeDKG767zY-knzDLIV-4PuBHzRWlZWp6S8dsVD5wyRoJn4zDptBK0bf_h-70oOjHkTvkJyCEpOX_ko_heJjZN0fz0m3UZj8vfPdUtPCWPTE7o1sIzNVhu68Ta2HNNudfQ3jJoR8swCT7c42gOltTzcAUxOy8NpTsGx3JhOst3OslGnIDEy8iKo3htRjKDoGN5tQ4gkBuMDlNWTdB5eNreidY5ZO2Qk5-exvqGpCTj59FVn30Vmt-o1rRpeFMplDP62h-mOozhh5uY9isABV7YMXn0OJ38nSs0vIuttrThsocfAWiyJfBFG82I4SthiztLXIIs4WwzAOJeMtf7m1cmSRSsfQcgjqFlA6D6XyUKYeytxDVxw0Yn8l5gGN2mki-LIf0zgWkvnJSuj7NOHLKPlU_xBFPgTXQ3B7F7m9iw11f0LIHxK2_AVuvYYTHlxB0BM1KklQOYKKElSKoCoIql69I7QLXf1AaFeyYFbDWY3qkSk6W3THFB2ZEVA7hBX1tso_c5vgxYnRIHViZKaJsmJv9fyZ6zeunr-2GMbt5VvBLX9Emai38kPyytRw7_bXF7EhDxo8oWFKedoOEt_3ZRIIGieS-jLlaRiKCE7VUG4B1HkYqAlpj79CribkxG_fgtF9OL0Prl4GLd8ArWrQ9RqDbK9YlynNc5mprNPMdekgTI28OInijrelD8nrR-_-ydtfQvLHZBbgtkZua9xWvxJ09L3RVVOR7aumcmRvLS9UVw3o9CauFbSQz39_Ud6pjBUXzrnhd2f4lJi2D69LV1yimVBZx5EfziohpF01lkvy8wV3U7IrpVs_W9qszC9d-XD1Qje30jllsjGoevJmCK4m5NSjn46uPfznBSg7hi1rdMu5UmXG4PlduHw-c4bA6jlmuYeqrEc2ZPOhVgRazjFlNdx_MJv3I0unf1NVb7l76FgPtNhE1q3RszV6ugbVQ7jyxKjI7eMP_oyOAkx7I6att8201fePTXbqoNEKWdReWWnLtC3SSERhJJKWL5OYJu04iVso3GS989zavwEAAP__UzSOcs8EAAA=
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC_1RSTYscVRR9NYm6cKEGcSNCg4IKTk99dc-UWUhiMhISMyEfBHQR3lf1vMzreuV7VV2dXgUHNLjqbMRlzemZjB8hOLgWpEfcBJS0q1lkNv4EIeBOeqah9S7uveeeKjj3vPvFVnlIYpT04MrHZqC0pkutpt9456bKhKlc4_L1RuA3_dONmyprx6cb_WmyvfeDKG767zY-knzDLIV-4PuBHzRWlZWp6S8dsVD5wyRoJn4zDptBK0bf_h-70oOjHkTvkJyCEpOX_ko_heJjZN0fz0m3UZj8vfPdUtPCWPTE7o1sIzNVhu68Ta2HNNudfQ3jJoR8swCT7c42gOltTzcAUxOy8NpTsGx3JhOst3OslGnIDEy8iKo3htRjKDoGN5tQ4gkBuMDlNWTdB5eNreidY5ZO2Qk5-exvqGpCTj59FVn30Vmt-o1rRpeFMplDP62h-mOozhh5uY9isABV7YMXn0OJ38nSs0vIuttrThsocfAWiyJfBFG82I4SthiztLXIIs4WwzAOJeMtf7m1cmSRSsfQcgjqFlA6D6XyUKYeytxDVxw0Yn8l5gGN2mki-LIf0zgWkvnJSuj7NOHLKPlU_xBFPgTXQ3B7F7m9iw11f0LIHxK2_AVuvYYTHlxB0BM1KklQOYKKElSKoCoIql69I7QLXf1AaFeyYFbDWY3qkSk6W3THFB2ZEVA7hBX1tso_c5vgxYnRIHViZKaJsmJv9fyZ6zeunr-2GMbt5VvBLX9Emai38kPyytRw7_bXF7EhDxo8oWFKedoOEt_3ZRIIGieS-jLlaRiKCE7VUG4B1HkYqAlpj79CribkxG_fgtF9OL0Prl4GLd8ArWrQ9RqDbK9YlynNc5mprNPMdekgTI28OInijrelD8nrR-_-ydtfQvLHZBbgtkZua9xWvxJ09L3RVVOR7aumcmRvLS9UVw3o9CauFbSQz39_Ud6pjBUXzrnhd2f4lJi2D69LV1yimVBZx5EfziohpF01lkvy8wV3U7IrpVs_W9qszC9d-XD1Qje30jllsjGoevJmCK4m5NSjn46uPfznBSg7hi1rdMu5UmXG4PlduHw-c4bA6jlmuYeqrEc2ZPOhVgRazjFlNdx_MJv3I0unf1NVb7l76FgPtNhE1q3RszV6ugbVQ7jyxKjI7eMP_oyOAkx7I6att8201fePTXbqoNEKWdReWWnLtC3SSERhJJKWL5OYJu04iVso3GS989zavwEAAP__UzSOcs8EAAA= HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e7e2f52ebf1a7c87a10f57bd08e6690a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0172_s.jpg
104.26.8.56200 OK 33 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0172_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 3aa1b916787ab9d7034d2853d6c3f061
1dbfbe8dc48c5740e3095e2d4b4d6f4d9c384536
74bbdd34aafde17c951822033248ca06b4b99847c5a3f629777ae2976ff7c421
GET /photos/g/i/gingercoug/1000/gingercoug_0172_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 32931
server: cloudflare
last-modified: Wed, 25 Jun 2025 00:48:21 GMT
etag: "685b4755-80a3"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4UK8bfEMi1iA7av2WdlY7U1te1P9CVjWCpRuDoHgAIw1fl3Eg4TJfU05KzS6BAa9CjSAJvOUoeoPCoNr8JiWEcvFhN6q5GO2pTdCZu09"}]}
cf-ray: 9599d8c5ef2d56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0161_s.jpg
104.26.8.56200 OK 35 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0161_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 624x350, components 3
Hash d1d5b52720677642248329fafd4615ec
b0abcba2b2a374133b6bf35d06b8c654959a6cbf
c5dbce789de43dcbd54c6a3dcc916d14ac20210caf7a697e91c7f5f298cad467
GET /photos/g/i/gingercoug/1000/gingercoug_0161_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 35019
server: cloudflare
last-modified: Sat, 10 May 2025 00:37:27 GMT
etag: "681e9fc7-88cb"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kLYLUJW%2BM%2Fkdm9%2B1iccfRvOr9lU0A6bgZBEeA4iA6BQ8nJqb9t44PqTwq%2FV49ullKTs%2Fsk6al%2FzHdbzq6V4fUTRzSaZel%2Bg%2B57yO8tQM"}]}
cf-ray: 9599d8c5ff4c56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0159_s.jpg
104.26.8.56200 OK 43 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0159_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x624, components 3
Hash b9ef941e47d729697a2e2d04afd446cc
4545c834ad81e8c763fdfa6171bece9bd01445e4
f5d0c1955d08cc9fcbdec7a9d974f0d7363a5db293f251f29c769066925c9386
GET /photos/g/i/gingercoug/1000/gingercoug_0159_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 42648
server: cloudflare
last-modified: Sun, 04 May 2025 14:48:47 GMT
etag: "68177e4f-a698"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h8zzt7h6%2FK5EWFD6b4%2FmwDZIopwTTR9knyh7jTHlEICeOvlNWBHYF0M5G2BnthTgc00QUwxMmMKGvQ6glD8%2FOFSURacEoaSyWj0m8jYa"}]}
cf-ray: 9599d8c5ff5256c3-OSL
X-Firefox-Spdy: h2
GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/css/style.css
172.67.133.15200 OK 3.7 kB URL GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/css/style.css
IP 172.67.133.15:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
Hash 714f13bb96ced8f9fbf223350296593a
38c33cd7ed42d86754d9215fc28da7050310852f
08da3445141cb2ea61f42755b12cb6b4c8d35929fd454ac593bc58523d234042
GET /sb/notifications/cams/default/global/ios-adalt/1/css/style.css HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: text/css
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"65aa86c6-e5a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
age: 35391
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5dbWORhT0HnyBziSrbBXzQGQcEMYGo%2BRm9xy148D3NXG%2ByrN6MtYn6GpTIYkQ2SUc76ctRJ%2Bh99Xqlhpum6eswIfmyNRsr5v%2Fdta1cPjkaKXRI3%2F"}]}
cf-ray: 9599d8d3cb375693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET adv.clickadu.net/check.html
104.19.157.23200 OK 926 B URL GET adv.clickadu.net/check.html
IP 104.19.157.23:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerDigiCert Inc
Subjectclickadu.net
FingerprintA3:93:4F:E4:01:3D:E9:48:8F:06:22:9B:EF:D3:04:DF:7D:EC:FA:92
ValidityFri, 06 Dec 2024 00:00:00 GMT - Fri, 05 Dec 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 088dba8e97eede53134c93219f7ebbae
adb707654d1fe0af7d0d7a9f55660d22bd3625e4
6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: adv.clickadu.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 03 Jul 2025 22:33:50 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 30 Jun 2025 09:44:32 GMT
vary: Accept-Encoding
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 9599d8ca5a2e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET recordedthereby.com/sfp.js
185.196.197.71200 OK 85 kB URL GET recordedthereby.com/sfp.js
IP 185.196.197.71:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrecordedthereby.com
Fingerprint43:76:D8:56:43:66:8A:49:51:DC:E6:8E:5A:E9:35:93:29:07:37:C1
ValidityMon, 05 May 2025 21:20:39 GMT - Sun, 03 Aug 2025 21:20:38 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash a7a3e992059fa9d57cde442897200fff
0c5e6902d0431e7df5fca3852c98b964a29ec14e
c95964506739cccd2108ac681126f65e845fe0c400a3cfe427a0cdaac84f6eaf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:50 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28255
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: recordedthereby.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: cd8f022e021b1a3c85515081ee895e10
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/img/close.png
172.67.133.15200 OK 4.5 kB URL GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/img/close.png
IP 172.67.133.15:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced
Hash 3065e1b797b8b9862d14105085f7bf2f
92824dd1a0771326f22d1de3487c66f3009db8a0
549435338ea0eff50d5f4d59b939cbcc97f74e2c8fb527a3c17caf0b3d8ff5c0
GET /sb/notifications/cams/default/global/ios-adalt/1/img/close.png HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:52 GMT
content-type: image/png
content-length: 4508
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "65aa86c6-119c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 38969
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DS1ZbvYEbDZHSYinANbBwJ%2BAqpmoBVyYOMZ%2BeV7Zwh%2FnNbhZV0r2rIVAvAUQZvt%2BXT7vmCM7%2FoQ26%2FHZnSSwaBsCO32plg9Aqa1T3d%2FQE1BwGhnM"}]}
cf-ray: 9599d8d47bca5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thefappening.plus/wp-content/themes/Avada/assets/jquery.js?ver=1.12.4-wp
104.26.8.56200 OK 97 kB URL GET thefappening.plus/wp-content/themes/Avada/assets/jquery.js?ver=1.12.4-wp
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JavaScript source, ASCII text, with very long lines (31997)
Hash 49edccea2e7ba985cadc9ba0531cbed1
f8747f8ee704d9af31d0950015e01d3f9635b070
1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
GET /wp-content/themes/Avada/assets/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 18 Aug 2023 11:25:51 GMT
vary: Accept-Encoding
etag: W/"64df553f-17a69"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9wjUEnN1tdgrBG73wAZV4eBTuOKVh3PZWtEiz3nHdV4QLdj936XHQGd6qMJkHfoQgJogQ3pQE2u4Jg3SIH4qYyNelHKf9OtCTCZkJhJ%2B"}]}
cf-ray: 9599d8c5cf1756c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/e/v/eva-vee/1000/eva-vee_0011_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/e/v/eva-vee/1000/eva-vee_0011_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=[*0*], xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x467, components 3
Hash 420d316a5dcfb604095611020ddae592
5b6a3d3e295b03d2134e499d5706041ddb629c19
0362eb261dc78980fdf1f3aab53c56fb752b555cda95e710499d0ab20e1d53a0
GET /photos/e/v/eva-vee/1000/eva-vee_0011_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38369
server: cloudflare
last-modified: Thu, 14 Dec 2023 15:02:27 GMT
etag: "657b1903-95e1"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IdSIuSIdsC9qHMwQPr%2BmsE2rfWObyjYS%2BlFTilS0iCQ9sKFZzcn%2BAWcpycFAbGbU7WgoMRW7v9MJtx98cOuayI74tsxgD%2FDvklj5ChR2"}]}
cf-ray: 9599d8c61f8256c3-OSL
X-Firefox-Spdy: h2
GET adv.clickadu.net/get/2032664?id=2032664&jp=_clzamzqriiqllherjublhl&dr=49&cuaa=1&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=54EnRdsaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=1522166563585536&eclog=0&snc=0&ssc=1&vp=0&pi=W1oqmg&dto=2&im=1&noch=1&de=0&cs=2&uf=0
104.19.157.23200 OK 3.6 kB URL GET adv.clickadu.net/get/2032664?id=2032664&jp=_clzamzqriiqllherjublhl&dr=49&cuaa=1&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=54EnRdsaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=1522166563585536&eclog=0&snc=0&ssc=1&vp=0&pi=W1oqmg&dto=2&im=1&noch=1&de=0&cs=2&uf=0
IP 104.19.157.23:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerDigiCert Inc
Subjectclickadu.net
FingerprintA3:93:4F:E4:01:3D:E9:48:8F:06:22:9B:EF:D3:04:DF:7D:EC:FA:92
ValidityFri, 06 Dec 2024 00:00:00 GMT - Fri, 05 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (3593), with no line terminators
Hash b33c9997559635990b7a4152aee91353
c19e07dc89378980564ce33c8039cc0b1f7477a3
7ae01eeff2310e73410eabcc9940b060ba2d6c739317bd2884ef1d3a37afdd1d
GET /get/2032664?id=2032664&jp=_clzamzqriiqllherjublhl&dr=49&cuaa=1&nojs=0&bavar=0&febuild=1.0.562-st&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=xMrM6dpczxPn68RrIcTT9cZ1&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=54EnRdsaHR0cHM6Ly90aGVmYXBwZW5pbmcucGx1cy9naW5nZXJjb3VnLw&afid=1522166563585536&eclog=0&snc=0&ssc=1&vp=0&pi=W1oqmg&dto=2&im=1&noch=1&de=0&cs=2&uf=0 HTTP/1.1
Host: adv.clickadu.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Cookie: cart=1; cart_p=2; CHCK=1; UID=250703173363bc6d14c0de424da5122a1679
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
cf-cache-status: DYNAMIC
priority: u=3,i=?0
server: cloudflare
cf-ray: 9599d8d25c1e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET thefappening.plus/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
104.26.8.56200 OK 3.3 kB URL GET thefappening.plus/wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type ASCII text, with very long lines (3332), with no line terminators
Hash 0141159f230d7a043f55f64ae88f0a11
6b19862298c4266fe93f7a8f7cd1b04a2a07f846
14736cc84994f28ff5106f6b8e6f017f38f94c2b42fc69f3b4e43522882c7422
GET /wp-content/themes/Avada/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3 HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 18 Aug 2023 10:34:56 GMT
vary: Accept-Encoding
etag: W/"64df4950-d04"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Nm4q8ZZ%2BymTdW3%2FJd33RMLhHZdJhCo5hwS8QpKz%2B90H4cBYzVy5fnYccfcB7pDJ27%2FoUEDrBiy6LdpXODrvTpw%2F8YGWbDYfigHqD9qhb"}]}
cf-ray: 9599d8c62fb456c3-OSL
X-Firefox-Spdy: h2
GET generousenjoyed.com/sbar.json?key=c9a2facf619000e91da49ea0efcf22d3&abt=FEATURES-2467_1_0&uuid=b330d134-639b-4bf5-b3cb-2242ebc50758%3A2%3A1
172.240.108.68200 OK 5.7 kB URL GET generousenjoyed.com/sbar.json?key=c9a2facf619000e91da49ea0efcf22d3&abt=FEATURES-2467_1_0&uuid=b330d134-639b-4bf5-b3cb-2242ebc50758%3A2%3A1
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectgenerousenjoyed.com
Fingerprint50:39:65:DA:26:0C:70:C0:23:DA:5A:C5:87:93:C3:EC:A0:13:90:3E
ValiditySun, 25 May 2025 21:37:37 GMT - Sat, 23 Aug 2025 21:37:36 GMT
Hash 9f7cd906c0486557e30d309141e035f1
8c96003c6c06e26eac1f643778c337cacca87770
8275fb4cfe1599372cd5451888c4d7caab5e1a7c887f3822f352f8d32ca7f0c3
GET /sbar.json?key=c9a2facf619000e91da49ea0efcf22d3&abt=FEATURES-2467_1_0&uuid=b330d134-639b-4bf5-b3cb-2242ebc50758%3A2%3A1 HTTP/1.1
Host: generousenjoyed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:51 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://thefappening.plus
access-control-allow-credentials: true
set-cookie: uid_id2=b330d134-639b-4bf5-b3cb-2242ebc50758:2:1; expires=Thu, 10 Jul 2025 22:33:51 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Fri, 04 Jul 2025 22:33:51 GMT; path=/; secure; SameSite=None
uncs=1; expires=Fri, 04 Jul 2025 22:33:51 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Fri, 04 Jul 2025 22:33:51 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Fri, 04 Jul 2025 22:33:51 GMT; path=/; secure; SameSite=None
u_pl23762507=1; expires=Fri, 04 Jul 2025 22:33:51 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 208
Host: generousenjoyed.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 891d1635aca17528a109769f9212a2a4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0171_s.jpg
104.26.8.56200 OK 35 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0171_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 06550cf701a73c00e260c9b07d5bf1ed
fed4d52d7af6760d76553afaf268adcb5b13c369
b19db75c11dd063e809cd3808b3c7c8ffd2357ba1ba49c87ad11eef086bbb9b1
GET /photos/g/i/gingercoug/1000/gingercoug_0171_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 34595
server: cloudflare
last-modified: Wed, 25 Jun 2025 00:48:18 GMT
etag: "685b4752-8723"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yxrcrTS3vhzYP8hKRjUtmmYZ5fqritV05245fb%2Fib8hs4KGaFjPEBQL7iz1fcJyr9aHJydmHKsA%2BnWs0KXcQyp0%2FzG7dQg%2FRGc7qYpWC"}]}
cf-ray: 9599d8c5ef2f56c3-OSL
X-Firefox-Spdy: h2
GET xritipdme.com/en/bcy/ow/bra?foyj=gp&hf=oym&hbb=1&oxqsc=rxhgu&id=2032664&wn=_rpjdnjuuksckzemcvliiexg&bh=806787&ue=nkanh&wjcypf=iisf&jp=zuytgf&fs=3
94.242.247.32200 OK 2.1 kB URL GET xritipdme.com/en/bcy/ow/bra?foyj=gp&hf=oym&hbb=1&oxqsc=rxhgu&id=2032664&wn=_rpjdnjuuksckzemcvliiexg&bh=806787&ue=nkanh&wjcypf=iisf&jp=zuytgf&fs=3
IP 94.242.247.32:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerBuypass AS-983163327
Subject
FingerprintD5:2F:C7:6E:98:E3:AE:D9:7B:BE:11:0B:59:CC:91:0E:5F:C2:22:95
ValidityWed, 28 May 2025 09:26:05 GMT - Sun, 23 Nov 2025 22:59:00 GMT
File type ASCII text, with very long lines (2073), with no line terminators
Hash 64691f4c40a5db404e30430b2bd7e2a0
d9e617b566709d411af0a9d3249e3b5f21e86e94
98f914d375bb7e171e9ebc7773057057a03463a3e68c9c804964e15ed5ee4743
GET /en/bcy/ow/bra?foyj=gp&hf=oym&hbb=1&oxqsc=rxhgu&id=2032664&wn=_rpjdnjuuksckzemcvliiexg&bh=806787&ue=nkanh&wjcypf=iisf&jp=zuytgf&fs=3 HTTP/1.1
Host: xritipdme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2507031733f3d48ea6939f4ecf9d8bbcfbe4; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Thu, 06 Aug 2026 22:33:51 GMT; Secure; SameSite=None
content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fcss%2Fstyle.css&l=3674&fd=81
172.240.108.68200 OK 0 B URL GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fcss%2Fstyle.css&l=3674&fd=81
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fcss%2Fstyle.css&l=3674&fd=81 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:52 GMT
Content-Length: 0
Connection: keep-alive
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fjs%2Fscript.js&l=4466&fd=31
172.240.108.68200 OK 0 B URL GET rashcolonizeexpand.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fjs%2Fscript.js&l=4466&fd=31
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fcams%2Fdefault%2Fglobal%2Fios-adalt%2F1%2Fjs%2Fscript.js&l=4466&fd=31 HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:52 GMT
Content-Length: 0
Connection: keep-alive
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0165_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0165_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 415620a8a1b5c87f67acb71f2c0e92f1
fb5bdd34f625251665edadd5442e19289bff6003
b0199fd55a198d0c9b8d3e5ebed8b5ef58f66e0e40f345121e1ee2540138968a
GET /photos/g/i/gingercoug/1000/gingercoug_0165_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 37888
server: cloudflare
last-modified: Sat, 10 May 2025 00:37:37 GMT
etag: "681e9fd1-9400"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9mWW9ReX%2FzKkeKUcnjsJz81iMxNbDxVexCD1N8xnqnztCYpdDtuAvXrCzB%2BF78QJ8%2BbgEqD%2FDJjNeAAGkMjAWmzjjmtqfiQ25bosQaVq"}]}
cf-ray: 9599d8c5ff4356c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0176_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0176_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 622660e42ae18b3aa7c853a4e7a57d4d
93b2edf64d31b381f28a89df1cef65d363382f7e
84bf7b377560ea54efa9d36c8bdc3834a9f3c30cabf83067e475f0df82a95d1e
GET /photos/g/i/gingercoug/1000/gingercoug_0176_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38252
server: cloudflare
last-modified: Thu, 03 Jul 2025 13:31:09 GMT
etag: "6866861d-956c"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hyzHnbaLemPRLaFhmbGE3ff7TnKR3mC3WaaeoElVoIs9ekrK3InI%2B30BZ1mcqQRjW%2BBx1MgRyIeFiU6L89lZy%2FPM3A%2FxjbxgL55X06oA"}]}
cf-ray: 9599d8c5ef2756c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0158_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0158_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash c22bc95b458d4defde911632726c6fb1
2015ee61f07dcdd8de52ad73a1e834e42b9ef7a7
733db273c16adff2ec69d0d8fccc6c95b400acde7945b1b700b496cb057db694
GET /photos/g/i/gingercoug/1000/gingercoug_0158_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 38147
server: cloudflare
last-modified: Sun, 04 May 2025 14:48:45 GMT
etag: "68177e4d-9503"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=k3ifSZ5tontp0K%2BglfyP2no0LdhYKXKqa4boATsS2xKj975lJ1aupBakFpHKsu%2FZJqEZmspZn8Df5ELrPfHcZRXZ2SXkRCSvNoYQ%2BjVq"}]}
cf-ray: 9599d8c60f5556c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/t/i/tinyhini/1000/tinyhini_0162_s.jpg
104.26.8.56200 OK 48 kB URL GET thefappening.plus/photos/t/i/tinyhini/1000/tinyhini_0162_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=FUJIFILM, model=X-T2, xresolution=126, yresolution=134, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 9.0 (Windows), datetime=2019:11:13 21:34:35], baseline, precision 8, 350x525, components 3
Hash cad62b830ea2dad7015ed2fde0465cea
789e40657a0b72d6fc6ada1e463215232343cd14
7b5f8e7a5d5e0204125f4219ed2eb6836bb47ee5c4f976759ac1a2242c69ed8c
GET /photos/t/i/tinyhini/1000/tinyhini_0162_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 48292
server: cloudflare
last-modified: Thu, 30 May 2024 01:51:22 GMT
etag: "6657db9a-bca4"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MTAtCNhegXqZjSKV%2FtMtuwwAEymRk21WvaeH7fH0ipb7KBVvriatBr2PSxy9VbT3xzvt8qxPO7VzjVi0o76nmJSHwNMgrpKNprsVCJHc"}]}
cf-ray: 9599d8c61f9556c3-OSL
X-Firefox-Spdy: h2
GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/css/animate.css
172.67.133.15200 OK 79 kB URL GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/css/animate.css
IP 172.67.133.15:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
Hash 3d4123dbfb33d27a5cfdfcfa91df6783
e7d0eeeec54b848f0bc3da8685fa3bc88429d660
cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
GET /sb/notifications/cams/default/global/ios-adalt/1/css/animate.css HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:51 GMT
content-type: text/css
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"65aa86c6-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
age: 35391
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yWOBxqnpH9ygxUbFZvRHjNcllNs0K2z4j7o7W1PAeCRB%2FIulrVAtEHZaDx1XPr2UeCKOiMtLhZya92VuEBYVi9nNej8mEAZ5lnMgvYiiUJ93YVGj"}]}
cf-ray: 9599d8d3cb335693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0175_s.jpg
104.26.8.56200 OK 39 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0175_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 14d1bdd3b459c8afa3fa619e6b52dcfd
7e8ac521ac2199779cc5beb1d87aeb8432677f8d
81d821fcb66b3acbd7dfac831a09704472be42d822ee05a74ee088083fdc2b79
GET /photos/g/i/gingercoug/1000/gingercoug_0175_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 39043
server: cloudflare
last-modified: Thu, 03 Jul 2025 13:30:58 GMT
etag: "68668612-9883"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2I%2F9DjHPiFFntQ4sEr5f22Ee9R5WzQSmhRWFsPatLofP4x7pVLUodzRG4KE8UvN0LRqee%2Fqp%2BvqveILe2Z%2FaSvX4V8zrijltfmrqOD%2Bz"}]}
cf-ray: 9599d8c5ef2956c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0167_s.jpg
104.26.8.56200 OK 44 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0167_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 2490c302838cf4b09658573564978f54
b5de3897f750837039bb331a6a20fe935eeb66e9
89918de6e5b709c9640123da268ff3e60dc5acabd036215c65b2aa56d51efc91
GET /photos/g/i/gingercoug/1000/gingercoug_0167_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 43737
server: cloudflare
last-modified: Tue, 17 Jun 2025 02:36:37 GMT
etag: "6850d4b5-aad9"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=r%2BaG6hqzv8t8GJ1ooizyaKxTuyDJkEWkdd0hRdezvAUg31aBzgg%2B04Y5NNMza6Sx%2BVHcaxOjROjKo49K4bInbbfkKawVElQ2%2BhkKrT1V"}]}
cf-ray: 9599d8c5ef3e56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=5.7.1
104.26.8.56200 OK 35 kB URL GET thefappening.plus/wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=5.7.1
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JavaScript source, ASCII text, with very long lines (31997)
Hash 60ec1fe831745b903ef014e478e629b7
15798d7d5aedaaf1a1559f86284a4e8f4c8e97af
f937cef662cf12641922dee29ba5124cfc909ee6d1d3c2896c462f0c43d9c46b
GET /wp-content/themes/Avada/assets/min/js/general/avada-menu.js?ver=5.7.1 HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 18 Aug 2023 10:34:56 GMT
vary: Accept-Encoding
etag: W/"64df4950-88fa"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cVZHuXqFNSh%2F9p39C3CkYUwOmSArxfwt29KhXn91Iyfg39xbXriFn0Y%2F3uGlal%2B0K7s5OPClJDKnumsZyuHabxJ%2FBXOSsO3Tayk6XZ8%2B"}]}
cf-ray: 9599d8c62fb756c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0163_s.jpg
104.26.8.56200 OK 46 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0163_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash b4d888cf8a08d40cf854b75f21613fde
2027cdb78f327a04dc1e876ed598596b56242cdf
82db6e2129f53ab31029e81205d13f17511c218342507783083ca40b8a6306af
GET /photos/g/i/gingercoug/1000/gingercoug_0163_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 45693
server: cloudflare
last-modified: Sat, 10 May 2025 00:37:32 GMT
etag: "681e9fcc-b27d"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=V3qkV2Few1pZFM1Qddl0cDQTOkp%2FYkfeuB%2F3iVwTBx6zT3zLubQ1ykK04Pm3Sv1hCSLEzh941No6fZnRIWMQQrXC2cZi0183yn6U4wUw"}]}
cf-ray: 9599d8c5ff4856c3-OSL
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tKA.ttf
142.250.74.35200 OK 101 kB URL GET fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tKA.ttf
IP 142.250.74.35:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type TrueType Font data, 17 tables, 1st "GPOS", 8 names, Microsoft, language 0x409
Size 101 kB (100776 bytes)
Hash cc5212736abf1349d6267168d756a0e5
91eaa27dad4dd1c8c722790198e62338ee3ef95d
ff21cda8b487479cc81d87fb8e95f77671f7656e5c9be549b6362db8d8834794
GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tKA.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thefappening.plus
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 62256
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Jul 2025 10:14:03 GMT
expires: Fri, 03 Jul 2026 10:14:03 GMT
cache-control: public, max-age=31536000
age: 44387
last-modified: Wed, 27 Apr 2022 16:55:52 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/js/jquery.min.js
172.67.133.15200 OK 84 kB URL GET cdn.creative-stat1.com/sb/notifications/cams/default/global/ios-adalt/1/js/jquery.min.js
IP 172.67.133.15:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectcreative-stat1.com
FingerprintEA:78:8B:9D:53:DF:84:5F:BA:B0:1B:CB:77:59:D8:9B:CC:8C:CC:86
ValidityWed, 11 Jun 2025 22:34:34 GMT - Tue, 09 Sep 2025 23:32:59 GMT
File type JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators
Hash 6326c600df01e3bfb9b40e1aa08176f8
6b4fb754d29b297b539bf62ba9b4eaf0f33f314a
df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3
GET /sb/notifications/cams/default/global/ios-adalt/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:52 GMT
content-type: application/javascript
content-length: 84384
server: cloudflare
last-modified: Fri, 19 Jan 2024 14:27:18 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "65aa86c6-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 38969
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iVoWolz4kKCK2EchS5dXbdkpKZwCiIrbTKX9JEsMUM5ycVW8D8yg8ct5GJ%2BxN0FaZ2W3UI2reD%2FMUsom0tPaa%2BLl%2BbTrxDqj1DJ1b4xlcOHEPzkb"}]}
cf-ray: 9599d8d47bcb5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0157_s.jpg
104.26.8.56200 OK 38 kB URL GET thefappening.plus/photos/g/i/gingercoug/1000/gingercoug_0157_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x622, components 3
Hash 43dd7493cfad86387c4f9c6d46212f8a
101f6c4e9ebafb24e15122baa32826589b7eeaf5
619708b940490fa19f92f98d3e162ad9c084d404974903472739d9e3142929ff
GET /photos/g/i/gingercoug/1000/gingercoug_0157_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 37981
server: cloudflare
last-modified: Tue, 08 Apr 2025 08:31:47 GMT
etag: "67f4def3-945d"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Br%2BMA%2BguisVmpzKBwqFBKPYFMPLF5qWR2bIPXMdZFp7aiiYErJhyclKR7B9pkvUpevWuugOhQaLeXgsB%2FgF%2Fzb7AIDTVjrEycyMHtV6I"}]}
cf-ray: 9599d8c60f5856c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/gingercoug/
104.26.8.56200 OK 35 kB URL User Request GET thefappening.plus/gingercoug/
IP 104.26.8.56:443
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (7573), with CRLF line terminators
Hash c70dafb2229360596ee56777f96553a1
28cb73b5d42feb619da8fd4e49ede1c5c8a60adb
63102ef20203b233519bbd2d47904ef408d4474e6e828c6391c0177f036fb213
GET /gingercoug/ HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rZ7x8iz0k7ymaB62N2FtOh92irDkjO70nCaR3cNOnt8lTIBtGHGvAapxdIFXujB8ViVEsi9v%2F%2Bs2rvz7RBvWeYYiZp9vdQIoGdu2tVYL"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9599d8c27ad956c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus//wp-content/themes/Avada/fav/favicon-16x16.png
104.26.8.56200 OK 13 kB URL GET thefappening.plus//wp-content/themes/Avada/fav/favicon-16x16.png
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash 840e38e7720fe4c99c95829e2190b89f
5c3c273b61d4ab67e13203af2076d0087405cb13
27d32e9f2306abe4589addd89a8d60631bcce5db9517867c07d190cb5ca67e0e
GET //wp-content/themes/Avada/fav/favicon-16x16.png HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Cookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; dom3ic8zudi28v8lr6fgphwffqoz0j6c=b330d134-639b-4bf5-b3cb-2242ebc50758%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:50 GMT
content-type: image/png
content-length: 13381
server: cloudflare
last-modified: Thu, 31 Aug 2023 10:01:29 GMT
etag: "64f064f9-3445"
expires: Sun, 03 Aug 2025 22:33:50 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JWmmtelO0HmwNVhrMBYVCJTYPk0rje7%2BSdjLxHpbyXx2HsFcTz7h%2BSo4Tr0pigktAv5mYI1eR1fcTPIPswKSc07B%2BR54qHXGsjRZa8Q9"}]}
cf-ray: 9599d8cd188b56c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/photos/c/y/cynthia-slam/1000/cynthia-slam_0037_s.jpg
104.26.8.56200 OK 26 kB URL GET thefappening.plus/photos/c/y/cynthia-slam/1000/cynthia-slam_0037_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 526x350, components 3
Hash 9cb92ead18d87fa041c71b20f4990d2c
e5717d1612ec64f02342734cf33ef8669a31a8ec
28ff0af5a79c1ef9c999f403a825850f5356079497eb01f59db3412a00b4b2d3
GET /photos/c/y/cynthia-slam/1000/cynthia-slam_0037_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 26307
server: cloudflare
last-modified: Thu, 20 Jun 2024 03:26:33 GMT
etag: "6673a169-66c3"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=SMgrNx739fohFLcKjCNGwwzz9eChpuUgba%2BCLWwJbijO8RAFSIbVtUrK0SNhIbSILYpE505lvkZjvV7csgcMruhbhpb8uTC%2FC9XY3MYJ"}]}
cf-ray: 9599d8c61f9756c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus/wp-content/themes/Avada/assets/min/js/general/avada-vertical-menu-widget.js?ver=1
104.26.8.56200 OK 1.9 kB URL GET thefappening.plus/wp-content/themes/Avada/assets/min/js/general/avada-vertical-menu-widget.js?ver=1
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JavaScript source, ASCII text, with very long lines (1882), with no line terminators
Hash af78eab6b18d1d32feb36aba5eb558df
1e251edccbbea946640742444f8b8be4c5927e84
4a7b353345f28b2f6473cf4b09bd8630b109184e31e8d999ccea5d7e741e4351
GET /wp-content/themes/Avada/assets/min/js/general/avada-vertical-menu-widget.js?ver=1 HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 18 Aug 2023 10:34:56 GMT
vary: Accept-Encoding
etag: W/"64df4950-75a"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sJPK6ZsDzNBh2zuQVBbQ6x%2B4F11mt6UxIWKNSzgPMRE7349DmhsLdeBbtMSBjg4U2bDQGnoxBqTHi7az8t7ft9J7xhTmhrZBJnhevSJc"}]}
cf-ray: 9599d8c62fa556c3-OSL
X-Firefox-Spdy: h2
GET thefappening.plus//wp-content/uploads/2018/11/thefappening_logo.png
104.26.8.56200 OK 1.4 kB URL GET thefappening.plus//wp-content/uploads/2018/11/thefappening_logo.png
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type PNG image data, 257 x 26, 8-bit colormap, non-interlaced
Hash 2befd1812109e29608a854c6d5716348
809c3c82d9165467c0b46f0bb4f92aa5eb2dd6bd
dca2ed1d938b5383585c75ef4d68c3a650f2997113c8c092c450e5567e599f76
GET //wp-content/uploads/2018/11/thefappening_logo.png HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/png
content-length: 1358
server: cloudflare
last-modified: Fri, 16 Oct 2020 06:48:19 GMT
etag: "5f894233-54e"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=s2WGJh7D%2FELdSYvvJJqUXV4UkdjGZfqbjry5JC5vk0v9ATHQ58owrjODLyEj9yHOQqapiXDXMOopAZFvVt8ZdvxhyQqUNlQCTygeZvm%2B"}]}
cf-ray: 9599d8c5df1c56c3-OSL
X-Firefox-Spdy: h2
GET rashcolonizeexpand.com/impr.gif?sid=H4sIAAAAAAAC_1RSTYscVRR9NYm6cKEGcSNCg4IKTs-rj-npNgtJTEZCYibkg4Auwvuqnpd5Xa98r6qr06tgQIOrzkZc1pyeZPwIweBakB5xE1DSrmaR2fgThIA76UlD613ce889VXDuefeL7fKAJCjZ_oWP7VAbw1ZWm7TxzlWdSVv5xvnLjZA26fHGVZ21kuONwSy5_vthnDTpu42PlNiyKxENKQ1p2FjXTqV2sHLIQuf3O2GzQ5tJ1AxXEwzc_7EvA3gWQPYPyDFoOX3pr_RTaDFB1vvxlPJbhc3fO90rDSusQ1_uXsm2Mltl6C3a1AVIs93517B-Ssg3S7DZ7nwD2P7ObANwPSVLrz0Bz3bnMsH7d58p5QYqA5cvoupPoMwEmk0g7C1o-ZgAQuL8BrLevfPWVezGM5bN2Ck5-vRv6GpKjj55FVnvwUmjB41L1pSFtpnHIK2hBxPo7gR5uYdiuARd7UEUn0PL38nK03PIejsb3lhouf8Wj2MqwzhZbsUdvpzwdHWZx4IvR1ESKS5W6dpq-9AinU5g1AjML6H0AUodoEwDlHmAntxvJLSdiJDFrbQjxRpNWJJIxWmnHVHKOmINpZjpH6HIRxBmBOFuInc3saXvTAn5Q8GVv8Bv1vAygC8I-rJGpQgqT1AxgkoTVAVB1a_vSuMjX9-Txpc8nNdoXuN6bIvuNrtri67KCJgbwcl6R-ef-VsQxZHxMPVybGeJ8eLh-ukTl69cPH1pOUpaa9fCa3TMuKy38wPyyszw4PrXZ7Gl9huiw6KUibQVdiilqhNKlnQUoyoVaRTJGF7X0H4JzAcY6ilpTb5CrqfkyG_fgrM9eLMHoV8GK98Aq2qwzRrD7GGxqVKW5yrTWbeZm9JD2hp5cRTFjWDbHJDXD9_9k7e_hBKPyDwgXI3c1biufyXomtvji7YiOxdt5cnDjbzQPT1ks5u4VLBCPf_9WXWjsk6eOeVH350QM2LW3r-sfHGOZVJnXU9-OKmlVG7dOqHIz2f8VcUvlH7zZOmyMj934cP1M73cKe-1zSZg-vGbEYSekmMPfjq89uifF6DdBK6s0SsXSrWdQOQ34fPFzFsCZxaY5wGqsh67iC-GRhMYtcCM1_D_wXzRjx2b_c10ve1vo-sCsOIWsl6NvqvRNzWYGcGXR8ZF7h598Gd8GOAmGHPjgh1unLnzzGSv9xtprCJBaXutFcbtVIVxIkW62k46ssVoHCsUfrrZfW7j3wAAAP__r1werM8EAAA=
172.240.108.68200 OK 0 B URL GET rashcolonizeexpand.com/impr.gif?sid=H4sIAAAAAAAC_1RSTYscVRR9NYm6cKEGcSNCg4IKTs-rj-npNgtJTEZCYibkg4Auwvuqnpd5Xa98r6qr06tgQIOrzkZc1pyeZPwIweBakB5xE1DSrmaR2fgThIA76UlD613ce889VXDuefeL7fKAJCjZ_oWP7VAbw1ZWm7TxzlWdSVv5xvnLjZA26fHGVZ21kuONwSy5_vthnDTpu42PlNiyKxENKQ1p2FjXTqV2sHLIQuf3O2GzQ5tJ1AxXEwzc_7EvA3gWQPYPyDFoOX3pr_RTaDFB1vvxlPJbhc3fO90rDSusQ1_uXsm2Mltl6C3a1AVIs93517B-Ssg3S7DZ7nwD2P7ObANwPSVLrz0Bz3bnMsH7d58p5QYqA5cvoupPoMwEmk0g7C1o-ZgAQuL8BrLevfPWVezGM5bN2Ck5-vRv6GpKjj55FVnvwUmjB41L1pSFtpnHIK2hBxPo7gR5uYdiuARd7UEUn0PL38nK03PIejsb3lhouf8Wj2MqwzhZbsUdvpzwdHWZx4IvR1ESKS5W6dpq-9AinU5g1AjML6H0AUodoEwDlHmAntxvJLSdiJDFrbQjxRpNWJJIxWmnHVHKOmINpZjpH6HIRxBmBOFuInc3saXvTAn5Q8GVv8Bv1vAygC8I-rJGpQgqT1AxgkoTVAVB1a_vSuMjX9-Txpc8nNdoXuN6bIvuNrtri67KCJgbwcl6R-ef-VsQxZHxMPVybGeJ8eLh-ukTl69cPH1pOUpaa9fCa3TMuKy38wPyyszw4PrXZ7Gl9huiw6KUibQVdiilqhNKlnQUoyoVaRTJGF7X0H4JzAcY6ilpTb5CrqfkyG_fgrM9eLMHoV8GK98Aq2qwzRrD7GGxqVKW5yrTWbeZm9JD2hp5cRTFjWDbHJDXD9_9k7e_hBKPyDwgXI3c1biufyXomtvji7YiOxdt5cnDjbzQPT1ks5u4VLBCPf_9WXWjsk6eOeVH350QM2LW3r-sfHGOZVJnXU9-OKmlVG7dOqHIz2f8VcUvlH7zZOmyMj934cP1M73cKe-1zSZg-vGbEYSekmMPfjq89uifF6DdBK6s0SsXSrWdQOQ34fPFzFsCZxaY5wGqsh67iC-GRhMYtcCM1_D_wXzRjx2b_c10ve1vo-sCsOIWsl6NvqvRNzWYGcGXR8ZF7h598Gd8GOAmGHPjgh1unLnzzGSv9xtprCJBaXutFcbtVIVxIkW62k46ssVoHCsUfrrZfW7j3wAAAP__r1werM8EAAA=
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectrashcolonizeexpand.com
FingerprintC7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92
ValiditySat, 28 Jun 2025 22:10:41 GMT - Fri, 26 Sep 2025 22:10:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC_1RSTYscVRR9NYm6cKEGcSNCg4IKTs-rj-npNgtJTEZCYibkg4Auwvuqnpd5Xa98r6qr06tgQIOrzkZc1pyeZPwIweBakB5xE1DSrmaR2fgThIA76UlD613ce889VXDuefeL7fKAJCjZ_oWP7VAbw1ZWm7TxzlWdSVv5xvnLjZA26fHGVZ21kuONwSy5_vthnDTpu42PlNiyKxENKQ1p2FjXTqV2sHLIQuf3O2GzQ5tJ1AxXEwzc_7EvA3gWQPYPyDFoOX3pr_RTaDFB1vvxlPJbhc3fO90rDSusQ1_uXsm2Mltl6C3a1AVIs93517B-Ssg3S7DZ7nwD2P7ObANwPSVLrz0Bz3bnMsH7d58p5QYqA5cvoupPoMwEmk0g7C1o-ZgAQuL8BrLevfPWVezGM5bN2Ck5-vRv6GpKjj55FVnvwUmjB41L1pSFtpnHIK2hBxPo7gR5uYdiuARd7UEUn0PL38nK03PIejsb3lhouf8Wj2MqwzhZbsUdvpzwdHWZx4IvR1ESKS5W6dpq-9AinU5g1AjML6H0AUodoEwDlHmAntxvJLSdiJDFrbQjxRpNWJJIxWmnHVHKOmINpZjpH6HIRxBmBOFuInc3saXvTAn5Q8GVv8Bv1vAygC8I-rJGpQgqT1AxgkoTVAVB1a_vSuMjX9-Txpc8nNdoXuN6bIvuNrtri67KCJgbwcl6R-ef-VsQxZHxMPVybGeJ8eLh-ukTl69cPH1pOUpaa9fCa3TMuKy38wPyyszw4PrXZ7Gl9huiw6KUibQVdiilqhNKlnQUoyoVaRTJGF7X0H4JzAcY6ilpTb5CrqfkyG_fgrM9eLMHoV8GK98Aq2qwzRrD7GGxqVKW5yrTWbeZm9JD2hp5cRTFjWDbHJDXD9_9k7e_hBKPyDwgXI3c1biufyXomtvji7YiOxdt5cnDjbzQPT1ks5u4VLBCPf_9WXWjsk6eOeVH350QM2LW3r-sfHGOZVJnXU9-OKmlVG7dOqHIz2f8VcUvlH7zZOmyMj934cP1M73cKe-1zSZg-vGbEYSekmMPfjq89uifF6DdBK6s0SsXSrWdQOQ34fPFzFsCZxaY5wGqsh67iC-GRhMYtcCM1_D_wXzRjx2b_c10ve1vo-sCsOIWsl6NvqvRNzWYGcGXR8ZF7h598Gd8GOAmGHPjgh1unLnzzGSv9xtprCJBaXutFcbtVIVxIkW62k46ssVoHCsUfrrZfW7j3wAAAP__r1werM8EAAA= HTTP/1.1
Host: rashcolonizeexpand.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 3
Host: rashcolonizeexpand.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e6f0f76641fc36c08102e67aa89b3914
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET adv.clickadu.net/on.js
104.19.157.23200 OK 148 kB IP 104.19.157.23:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerDigiCert Inc
Subjectclickadu.net
FingerprintA3:93:4F:E4:01:3D:E9:48:8F:06:22:9B:EF:D3:04:DF:7D:EC:FA:92
ValidityFri, 06 Dec 2024 00:00:00 GMT - Fri, 05 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (147713 bytes)
Hash a53932d999d14d40f2a38a08258325ab
1c36914684bca5369f1498073b7cf70705236fb2
1ee19abd5ca5d72500ae0facf60a69d13bef17e6abb1ef2141d9bbe2d8c5bffe
GET /on.js HTTP/1.1
Host: adv.clickadu.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 30 Jun 2025 09:49:14 GMT
vary: Accept-Encoding
etag: W/"68625d9a-24101"
expires: Thu, 10 Jul 2025 22:33:49 GMT
cache-control: max-age=604800
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 9599d8c5fd45569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET generousenjoyed.com/c9/a2/fa/c9a2facf619000e91da49ea0efcf22d3.js
172.240.108.68200 OK 65 kB URL GET generousenjoyed.com/c9/a2/fa/c9a2facf619000e91da49ea0efcf22d3.js
IP 172.240.108.68:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerLet's Encrypt
Subjectgenerousenjoyed.com
Fingerprint50:39:65:DA:26:0C:70:C0:23:DA:5A:C5:87:93:C3:EC:A0:13:90:3E
ValiditySun, 25 May 2025 21:37:37 GMT - Sat, 23 Aug 2025 21:37:36 GMT
File type JavaScript source, ASCII text, with very long lines (65018), with no line terminators
Hash bfb2aded7f9856761774933c607964c9
a280e61ac325eacc6a042a6341fd9dea15f8cdfc
978d39ea2e661865bdc698bb6123dca716ec4c58847aebf440f51f238cac0b59
GET /c9/a2/fa/c9a2facf619000e91da49ea0efcf22d3.js HTTP/1.1
Host: generousenjoyed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 03 Jul 2025 22:33:50 GMT
Content-Type: application/javascript
Content-Length: 23664
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2467_1=0; expires=Thu, 03 Jul 2025 22:33:50 GMT; secure; SameSite=None
x-envoy-upstream-service-time: 7
Host: generousenjoyed.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 47e71afbe4a28200b912d2dae9132aa4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET thefappening.plus/photos/n/u/nuninal-22/1000/nuninal-22_0020_s.jpg
104.26.8.56200 OK 22 kB URL GET thefappening.plus/photos/n/u/nuninal-22/1000/nuninal-22_0020_s.jpg
IP 104.26.8.56:443
Requested by https://thefappening.plus/gingercoug/
Certificate IssuerGoogle Trust Services
Subjectthefappening.plus
FingerprintFC:D4:AE:A7:7E:BB:15:5E:B5:29:6A:F8:A7:EE:C5:DE:6E:F9:D6:E4
ValidityThu, 12 Jun 2025 09:54:57 GMT - Wed, 10 Sep 2025 10:54:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 467x350, components 3
Hash cd436c3b4dfbfa3850fd4d0a93cf9539
30c6620b39e55dbcfd2de7928b7ea3fd9c93e15b
29a89589cf15f81a0e9af9f79b48a6c52128b1eb88ce88951b29679f3ad325c3
GET /photos/n/u/nuninal-22/1000/nuninal-22_0020_s.jpg HTTP/1.1
Host: thefappening.plus
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thefappening.plus/gingercoug/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Jul 2025 22:33:49 GMT
content-type: image/jpeg
content-length: 21613
server: cloudflare
last-modified: Sat, 30 Mar 2024 00:56:24 GMT
etag: "66076338-546d"
expires: Sun, 03 Aug 2025 22:33:49 GMT
cache-control: max-age=2678400, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vHByZF%2Ft%2B%2BwhAjaJOjoNaVjZR1tZiGQo%2B4fS%2BUmsajlEO8OBA8aMojBrbG5p95OmBZa9UJiekawkZo3jVLudIGebgSDAokYR0H%2BUejjY"}]}
cf-ray: 9599d8c61f9256c3-OSL
X-Firefox-Spdy: h2