surefap.org/publisher/ujinko
301 Moved Permanently 0 B URL HTTP/1.1 surefap.org/publisher/ujinko
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /publisher/ujinko HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23; path=/
Location: http://surefap.org/publisher/ujinko/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HfVfUguLxEvXz5VgFW9u2XvddASDT9Q12WTHBDogRcZEIIPmSZCrjTuAXGwg%2BWQwiSDLhuiarbaD0SHBDgzgHzA5NYN3UybtieigyDQmHYkG7T5dmM3Tg4KYpd2YaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 778b2e811e99b529-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358212db02ecc7c1fa088906bd2dba14
091a0688da9de609d97349215ba9e452dfc346a4
7486e512e4de8172ac07f07f47da3a96dd3ac7cb054b335f3e4929261440e672
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7486E512E4DE8172AC07F07F47DA3A96DD3AC7CB054B335F3E4929261440E672"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6674
Expires: Tue, 13 Dec 2022 04:04:52 GMT
Date: Tue, 13 Dec 2022 02:13:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b642ec5702fb818c5d1c67168cc68fdb
015146489a8e7fcb4ba0ba74cfe757a072705f93
4846d047a23903856bd113d02639ce7e08a1e40030151d302295b2d12df98ffc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5720
Expires: Tue, 13 Dec 2022 03:48:58 GMT
Date: Tue, 13 Dec 2022 02:13:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Tue, 13 Dec 2022 03:04:55 GMT
Date: Tue, 13 Dec 2022 02:13:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 01:33:44 GMT
content-type: application/json
age: 2394
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UcrBGTNWUas2GViXuIsshMN2Iw9y3O7iKI4+0FT8vwyagXOPOwFKZgNOxvA3FUMlRrWbw1agxl0=
x-amz-request-id: A4PT3EJSF1CZM1QK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 01:49:51 GMT
age: 1427
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:38 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
surefap.org/publisher/ujinko/
200 OK 24 kB URL HTTP/1.1 surefap.org/publisher/ujinko/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1845), with CRLF, LF line terminators
Hash 37139e502752cb8e970a82be70b49ecc
8e9450ac2145658a81dab50a7027c4586ca14f72
0b47929dbff088e0f018955c478325b2ba267f9e46d45c3c1c88a4b9d5186d87
Analyzer Verdict Alert fortinet Malware
GET /publisher/ujinko/ HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://surefap.org/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ju5pNVcgxDvfQqTG50Q6HTNooe9k%2BRJpKKI5MPxfxYRfsLUgMBvxAYNL7QHlPh95OzMJoPADgRfiDPncY8LJWLcsw8wU26uZdCQ2zdqwym2uOpnI0RyWWvEAwgYNog%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 778b2e835fa6b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
200 OK 626 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 10cbc450720b6e3661dc14177f6095bb
6898cb7b1725a4224a6e7fc6cfcf8dc634065608
2ee55a9a2b2f25dfbad0725e2b44a5ea758516c8589f2f0c2fe8c946287407af
GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5788
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ToRF6GReymSjrF5OY7vWJTKNOYE2mpCRujrqlAxYPB9riR7Fc1PWpmX3DiekD29kIYMlZj0tShwQDKKlyldlj12fLfXjYCSbleG9xV3ECWaScL9geDofYPSDUq3HA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e84f846b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
200 OK 1.6 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css
IP
File type ASCII text, with CRLF line terminators
Hash 3fcb0d88088f0e55c490573d9283c88a
6cfae6065bab40117fd241c536630c1c934c033c
1f91f493e9731afedede6c0626959993538cf13569434c5d0639273886b04075
GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5788
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mdj02N3aOR%2BlEQ%2BvXG7ByVFXblDh8dKetjOCTQfQMeio76Er%2BAXLAVje7fYRLGFvODIe%2FkSaEENohN3ctMlMqlulx8OMXDhqqk1Kw3bJr5ljF5BUmr7O8aYYaBsYEw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e84fb360b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/style.css
200 OK 6.7 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/style.css
IP
Hash 8754f3c381e72b8d256a0f26b09663e1
3c89aea4ebfadeb9791f9fe7fbe37d57952b3899
f70001c43657a392df622ad888a4cb3a62b4599fac8c6bfba3dd1a365be05646
GET /wp-content/themes/FinanceDesk/style.css HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 13 Feb 2021 23:55:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5788
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QUchSrjAjxSx1UmdeNi9j1nkp0OfelrnbhhCVpQYdOFPDhPpmKUZxmN0vaRbBvvaSAZpdIibP%2BIyy1zVEw6GN8nm6momjwmTrerpg9%2BKLHBkERqFserHTArlkFJJWg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85085c1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
200 OK 4.3 kB URL HTTP/1.1 surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash acceec62f949a07f1d1e07d4e88c0b76
b19d22f7b838357798be6a17ad9f30b4f114c41e
bbed1144be64bc962ce6ae0e94a8176e566ce7b3bfea999419de8da948b97219
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fXx8C7GHKDlSqo4Ub7iun9%2BP3Y7y74g3bjuRfwT0gG%2BwH1A88%2F7OtKtJfpPYMqgGk2rvD%2BQgg4ruZdJxJUR2Hfq1iAhj4rRk5Y2sVEo2lJCMwt%2BHJ3OVimGo1sCpHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8509491c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
200 OK 433 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82
IP
Hash c459cce9b7bfe8874065f27071c0fa5d
9c48040bd8aed19832c1c6093ddb4d4adef71bda
6b41fda0c20e0aa799c788122491afb3ac541bbe574f4e492d13168a8b2d42ad
GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7WwREFCqrBZxxkOZZqamgnjpIBgD9Ma1HsxDH0F3JzFpokX3rx6XJ1ONtXICN4XMpl5Co08m8R7b0nfmYXbGkVPU4RdYCsKCxKmyikBNXPbWhKlYWwfz2cHZAVGDhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e851b4cb50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
200 OK 521 B URL HTTP/1.1 surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16
IP
Hash 2291cad033de47da5bf45d44d3fb1c09
ef8ed11bba4cd1b1f649bbd3d64f79f1702e0851
a67c9a95aebe4a4dd8839404fdd77a4ee64f7a65e5859a1dd2255379ddf80235
GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bIkNRDZCDBemonO4STMsaX6LQHUybchnox8hKcGBpEFuJ2akDuiIjvfGNNkHdbMpsbucuD59BwpUSU4n0nu6Oqv1xjg4h0S2DzGOEeBxUms2usmfBfDGsc53n2I%2Bjw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e851cd1b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
200 OK 489 B URL HTTP/1.1 surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3
IP
File type ASCII text, with CRLF line terminators
Hash c8ad5eb64f1140cbe2df28519b376aa2
2782b2ec1b9dd5f9a25eec3b2f7f53de9a3b83c0
766695e386f4d4860ded979bf96717fa000ba7a1da95d900a48f5ddbeff95344
GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UrFumcR6BFKOfpHrDK8MviZKec2PHusrOkyopbODmC0kC7jaGgvX4o6tIwl9%2B7t%2FAJBcI7gBCi96se%2FA02EKHCptXeD99k93iUo9iguPuMMew%2FCPsY2fTqpHdGY1pQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e851850b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
200 OK 464 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0
IP
Hash e4a982df8ef82dfca6e739af2f2c70c9
0ec97ae743cb03849eee9c6f1c0539eec7c737ac
c9f369c77f62349d1a42f1e9ed7b3bd82c29ac23a13cda519eb9cb79689271a9
GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p2qH%2FRgdfleG75WvGCps4Lu%2FOtRAJZhfbiqZzL1qIBP0rnI4VwDSMIvMvEduD8vrKikxaRSL262U4%2FClUxeTcCbkGE51W3croOM%2FO4OdwfiztLgKVHDiWqNbSWW41A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e852b3e0b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417
IP
File type ASCII text, with very long lines (10082)
Hash ec17f8a80c23d0b8fc814fcbdb52653e
512c64d495ed700b16d5ccd79a753dd8cfd118e4
883e795f544da6c4b3b39643b9c84aa49d86f0bdeb511de4a790f63152fd89e8
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9thDLOaqGMRMNy0jJMOSXv5RSSHF4N9sEBOu7osnNnwIhUr8UNMjMQQFDPP5fWSdQ9ATFP8LZmlU13U%2BGau6Jms6DLUbozQBa58Mv7EkJmHNu5jrzJw%2FahYCFg0lwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8528621c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 9805483db0b3d5fd0639186799348f34
eb28f7ec752038cbd9425c66b54c339ad1236695
9dca4af372f7b1d8d1af5a3c18ed6a827e4f8f358e8404b64fa7a2ff961b5c60
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SYRb913bCq5cIuLEz8B%2FHzaUN3TJqV4qnVb2Mn%2F%2FoLbhLlZhYySLs5fn80YgOoMwmrabnKQdidBJ9K%2Fcq%2BHx49kKozGqA3ZM9TYl3cOytGXBOfltlDyOeIfzgFcZZA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85395f1c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
200 OK 831 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16
IP
Hash e9dddc3f35ae0107e1cf0cf680a251a7
26e702e6ed363dbd7508cdfaebfb3c37b51e966b
3c114642de150576617c3e8c9a5ca94d0f351e0d653a069bb269c444fdf80bfd
GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i9V%2BB1nLC9VW4hjjClay1vV0vykk9CSYjqzxgMwlUIejWoajIGa89gMY%2B72mDZ9sWrH21qtmfww7OBvCTK8rknrQi9Y26CDPgaBncgZgcWur1zXUd0htqYJ6SbXsjA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85385ab529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/1.1 surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 2f89b08855471c7476435ce0bec33ba7
970533f152623df03b5fc6fb793b21889e4e0349
d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Oct 2021 05:21:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHlkusVGU%2BN%2BcBQmk%2FklX9ws%2FlhmSfE5ZGynywxhXBCzHjWX%2BKK0Nz7OI1ioL3i3xu3FeW%2FAdBeu0Jlf62J8sXHgQC%2F37jAEN5M%2BV7AvWv0wzhG%2Bbc%2BJv51a0LTvIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e853b62b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
200 OK 1.5 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16
IP
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SqOFFmt73YxcCJeyqq61T6cs%2Fp%2BGayd4blLt0Ouj1zhfHUq54ZWYdImstWtWaRP6JdLBiAAa%2FRXMijp4jUytk%2BKywjv%2BBrxiywO2ugU2heDPAQAeX7tf6mzGS6FS2g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e853ceab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/ljekdimdzcz.php
200 OK 11 kB URL HTTP/1.1 surefap.org/ljekdimdzcz.php
IP
File type ASCII text, with very long lines (10335)
Hash 815d886dfe373fdf856c5b76356c9bf3
4fb06e724be66305da41e43bed3f29081468179f
78e18e1825fd08321fea4009679fc4df31306bae0d290f240ac504bee6b69170
GET /ljekdimdzcz.php HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=120
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=flTfYi6f46m84lI%2BN7by0piY%2F2le17kmi6jkOdCkCPbqXLCkxbpyLSmx%2B0dV%2BTU40UAk2vF%2B8qsWdhCjMMuUGxefrUO2Ag5m4nKKvIU8C8%2BnDfmSe5f75R5vRE55Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 778b2e853b470b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
200 OK 457 B URL HTTP/1.1 surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (1087), with no line terminators
Hash 1fa25d83bb5be8564841713f48e94332
dc5921fc9171ae8f69a52e1f00ea1c43ae3ea8d2
da9e1e7235fb597df5fc429718a771bc8431810ea07f7d2c40dba0b56ccd8cf7
GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5786
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uzh3VAIT0jzExPf3p6LpeYdJRonWVeHjP%2Fyj%2BJlTSxXonsJVafAng38Wcl1WUcYduonFpQEGylv1npbGM7xQG5kSNjrWG9mD3kE8KpU5KEh9kqBNhtI2QEqcA9LT3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8598741c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
200 OK 748 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82
IP
File type ASCII text, with very long lines (516)
Hash a916ec8951d8cb10ee6fdfecaa3eae84
0f5ed720b36bf6d0474bfdea0fe97ce2f4c28296
eadd127040367bb43fe787cece1d4e624cb6933c31e20b8b73611a79bdd3b15b
GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5786
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d2YuN3DFooV%2FAqzjcBgzHy3r0eh6x444ExxufrJ6vK58LlJBxBOqp7x4eGaAO0zb8UI1HnaEgJTuFuAC3KMYpPrMjhTgZYbjB2hK%2FlbSoMchH1LSSF9RgjDgVrF2tw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8599931c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
200 OK 743 B URL HTTP/1.1 surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash b146105040f6faa62806b35ad455d121
14aa49ed4f29b666221a8de3fd17f04455f12b15
05f4d51649be6878352af6843f9a5ffc14bb96ca7a02db21a35a14f6a150b004
GET /wp-includes/js/wp-embed.min.js?ver=5.0.16 HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 13:01:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5786
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3v518hojyy%2Fvskc8k4%2BpUQ7%2BuFdpWPhxOqQozAbFBjhbKp1aSxLlEKjyBoK402nYZwRN%2BmaqH%2Br80hbNLtGc0DdktnNQbrsNSx38MMsuNzkAd9FNdZ%2BA9hf6LwJbpA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e859873b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.o333o.com/asg_embed.js
200 OK 52 kB URL HTTP/1.1 cdn.o333o.com/asg_embed.js
IP
File type Unicode text, UTF-8 text, with very long lines (65467), with no line terminators
Hash 2cc3dbc2ed4b871bafca793ef56bc336
9b2b19b96ca2b9989b4976a8934070b1ef4efe78
03015f097efb01d8572b62f6b573fb115bcad04ad52c947f59014304d96da493
GET /asg_embed.js HTTP/1.1
Host: cdn.o333o.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 51578
Content-Type: application/javascript
Last-Modified: Thu, 17 Nov 2022 11:24:59 GMT
Accept-Ranges: bytes
Server: nginx
ETag: "63761a0b-c97a"
Cache-Control: max-age=315360000, public
X-HW: 1670897618.dop221.sk1.t,1670897618.cds239.sk1.c
Access-Control-Allow-Origin: *
surefap.org/wp-content/uploads/2020/12/SureFap.org-Bad-Girl-Bloo_s-Party-Portuguese-page00-Cover65280931-lq-300x388.jpg
200 OK 28 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Bad-Girl-Bloo_s-Party-Portuguese-page00-Cover65280931-lq-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash 246706b68bc4fc0c38a5b8cecb08ab9c
6cf13b9f67b43e82ac77770a636d8522c32b8b0e
bbb258f7771f736b37aae6efbc0cdcc2de333b2ac36d349556ca282749237491
GET /wp-content/uploads/2020/12/SureFap.org-Bad-Girl-Bloo_s-Party-Portuguese-page00-Cover65280931-lq-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: image/jpeg
Content-Length: 27971
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:46:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gykLfnh33ndOeSU%2F7vZdJKZDjfd9UjHx%2F81gASnkuzIlzoo8a83PlDmqrb5d6LR5ZpObS6FQ7EeY2YlpYOWR5VLEq99kGJrwz1ccpEqY3KkcetezM8q%2Bo%2FFtHuXtZg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85ab5f0b3d-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2021/09/SureFap.org-Battle-Supremacy-Spanish-page01-34570862-lq-300x387.jpg
200 OK 36 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-Battle-Supremacy-Spanish-page01-34570862-lq-300x387.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x387, components 3\012- data
Hash c11539d63076658211747a623bc51e58
e10922b1759f5012c3dee5f61be92ecf99f9556e
33539a4c48a14d67840c3a3087efc1208f1bcab7a29fb19b339691aa2bfe74da
GET /wp-content/uploads/2021/09/SureFap.org-Battle-Supremacy-Spanish-page01-34570862-lq-300x387.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: image/jpeg
Content-Length: 35687
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 20:16:17 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rexbOfPotVet32IiNoqLL20SPc%2F1XMKU4ZW%2FiLVQ3AsYfTNZvAXVp0v%2FygJGFvAAasVTvk3yOKdnzmNFLtZzk9uRIuxJlBbaBJXX5ZhOP0owY%2F6ojyg6jIjS%2BQmwQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85ab92b50b-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 1e483d25aa3a2c769c7e680eb75b52a3
2dfe501fc81cd6939bd014cedb41af85b4e3c7af
be1b058eb9e3fef483e425718456e8bc58fda7d4a81de0d6e794b1e03dfdbd01
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nF%2Bd4kX7FC6g0%2F%2FRNMDGLUZdChPVQD2eI8U%2BdGh%2BylPG97Jx58i3lSS6DxqkBzOGXty9BKyY4660uJ58PVmVNaScUAYus3Vt3BL7hCFK9zGAIO6afynLX4UrdgXF%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85e8901c12-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Moms-Visit-page0170649582-lq-300x388.jpg
200 OK 31 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Moms-Visit-page0170649582-lq-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash 65ccc3f2b0132b1df5d739e6d571a921
909d43c4f1041fd5012717a10174e71bbc92ded5
05678871c887ee998740e64b49fda307fad8a60f81a87c446952d10131890048
GET /wp-content/uploads/2020/12/SureFap.org-Moms-Visit-page0170649582-lq-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: image/jpeg
Content-Length: 30977
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:29:08 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9L4AveqlNQing4fCoHlgZD0j31WBfWGyGzQTNcLqLy9XPVD%2FDB3kNynKmXi6RBtiDQgSB59Pd4drI%2FucYTJI28y943GerLCSbn2VxJdIdWHhr2gs7HwE%2FhcX2QMzqA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85e9bf1c06-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2021/09/SureFap.org-The-Ghost-Catcher-Dildo-Spanish-page00-Cover31258709-300x300.jpg
200 OK 19 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-The-Ghost-Catcher-Dildo-Spanish-page00-Cover31258709-300x300.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x300, components 3\012- data
Hash d3f57e85a7bfd9cc79a923a44865ddfb
e349959bc9afc7fd1a38a427cff850970eb4587f
88578e2c13fc2ee2a50d8a2313757671f1831e8e8ffbe693d14904f3ecb24e6d
GET /wp-content/uploads/2021/09/SureFap.org-The-Ghost-Catcher-Dildo-Spanish-page00-Cover31258709-300x300.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: image/jpeg
Content-Length: 18829
Connection: keep-alive
Last-Modified: Sat, 25 Sep 2021 19:03:28 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wJTxFZ7e26qf3hKoluXYP21NFCyFryWxhAwszVKIzCQW%2BpMYGMpUQTr%2Fyh17jpmbVnOMvAYf9iYqY5vAm3hztUdVwlfbcin0CgeCpTa9QXNQLy6vva5bBKQrT1w%2Fpw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e85ed4bb527-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Fantasias-Despues-De-La-Feria-Spanish-page0193084712-lq-300x387.jpg
200 OK 42 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Fantasias-Despues-De-La-Feria-Spanish-page0193084712-lq-300x387.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x387, components 3\012- data
Hash 705f494a00eb02cb2830c0cfd9324965
bdb1dcf743e4dad2ecc149d1f576fe181f423991
c842b1410f8716f9e13165441462ea477394ce1c2e2c235bc57f6518686e21e6
GET /wp-content/uploads/2020/12/SureFap.org-Fantasias-Despues-De-La-Feria-Spanish-page0193084712-lq-300x387.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:38 GMT
Content-Type: image/jpeg
Content-Length: 42092
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:10:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FBT4KTyIV%2F%2BtW7Gpc8t5%2FbwH7cFVAArQ0v%2FhUHge3adUcaeXpEPX%2FnJ3spVLx6yw4ietW1%2B9NrcdEBT6rWN8mJhqqC3b6MfFO8SYYQft%2Fell1d0yuPErDydidxZ4wA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8608c0b529-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2020/12/12/c806171a643cc5046dc37ea40d1b20b4.md.jpg
200 OK 35 kB URL HTTP/2 nefree.com/images/2020/12/12/c806171a643cc5046dc37ea40d1b20b4.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash 7b373e83a0c689ff48a698b168463df2
730319782c4aa8accc4d4593ff14709a6ee4c2fd
9aa310b96e77a6d11133da74b476fe97160c2d3a9095d3c5f8abef5cd91e08d5
GET /images/2020/12/12/c806171a643cc5046dc37ea40d1b20b4.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 34900
last-modified: Sat, 12 Dec 2020 17:14:07 GMT
etag: "5fd4fa5f-8854"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7hwoETjXrnPnorSbgEVj1rKfqRNWxqKaFubkkOB5lgIL0nJUyLU%2FZQn6shRdY76TEWNQ3lWJZGhkZL9LsI7sTneiLqIIUeHEFWsj4HN%2FF2GerhhcTNY%2BkxkfTKAO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861fedb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
surefap.org/wp-content/uploads/wordpress-popular-posts/3802-featured-269x170.jpg
200 OK 6.2 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/3802-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 269x170, components 3\012- data
Hash 2d809f613b332acc3093dca014db12a9
a8159a6ba82b3039922d9cde98859ca150d72330
3cd2b197a66c1efb1b93a02e3934821e98c4bcc251970c88ac2c1e22d1a5ce0d
GET /wp-content/uploads/wordpress-popular-posts/3802-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 6229
Connection: keep-alive
Last-Modified: Mon, 12 Dec 2022 13:12:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LVsQlRSNxS%2Bat5FaN6R%2F3cNjISt8DJxgIu8Mo%2FTgc2mX9Kqfx%2FYYtdN%2FJD4TyPYlTRvMaIwRlIE2MGvd0YJUQmcboqXQgeNHTUL7pv6kFjw%2Bq6XgmNVHqY%2B8BTDPIw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e872bb70b3d-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/7892-featured-269x170.png
200 OK 39 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/7892-featured-269x170.png
IP
File type PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash df37bfdd76e60448a109bcac32457921
146ada8302aa9649b64793b6222ea5deed19ac40
5bd6b016ef643f76009a92adc50675dbb079111bb41cd3eaf123eac264aee1ad
GET /wp-content/uploads/wordpress-popular-posts/7892-featured-269x170.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/png
Content-Length: 38920
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 15:04:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fP9Q74RmPvqiAXKGTdIe8aCOBHhD3edqZL2b1buuZ27m2JCzTea07yWZY5%2B74Y1dpsC8EDdKm9VbCFj4wTSn4vdeFafv4PZUfZcwLlYoyfl9hAQM%2B7qWs%2F5aqHu%2FfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8728dd1c12-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/69947-featured-269x170.jpg
200 OK 54 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/69947-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3507, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2550], baseline, precision 8, 269x170, components 3\012- data
Hash dabb2131315bc4e99f92b60bdccd3f21
3cbe30e9cc2f519bda0906c9d80d4f38c514a146
1d15809581c5b1b956f5cbb626170efb3313836a28d6f62652e2212a3f188630
GET /wp-content/uploads/wordpress-popular-posts/69947-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 54438
Connection: keep-alive
Last-Modified: Tue, 11 Oct 2022 04:57:35 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZXDAfbee8NjqVcNOHJhr0kblmC269yzmchIlIMgJHLZIHGwytYVY7Sn9qCwQHAUVV0phyD7Ho2KGaA8g9vylFHlvsGblRe2DI8FNwipvPFFlyyxg51GbU0HVgjJdNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e872a021c06-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif
200 OK 608 B URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash b25a265876454612d42aaea3b7556afe
860dc1663507b68d152dc9b25fa43c05390afe77
6bf7f288ac5290f7089ea2b900a2a4d418882a3d9da24e83d26cc7081ac69d25
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_off.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/gif
Content-Length: 608
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JApGDDkqicaWDbhLvAaUWcoOXdIIhN%2FTXPBU3pA%2B3yqr04ZdmPAVtSM8%2FtTghkVSNboaRecYKhp7kEorcv%2BQpJ4OFRrgmXTthqq4uJtK3JtiRs3m7d4angqLsHqikQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e872de1b527-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2021/09/29/2362721f7bbe7039b8bef8fd848c714e.md.jpg
200 OK 30 kB URL HTTP/2 4tymode.win/images/2021/09/29/2362721f7bbe7039b8bef8fd848c714e.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a0a4217b1315986c5224226563b03934
08ac45b52b8994d2096ad6438c77baefe12a148f
0c7183366e52e4ddceb1ef032006c6ae0a819e49da86f159ed3c27c12a4b3bed
GET /images/2021/09/29/2362721f7bbe7039b8bef8fd848c714e.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Sep 2021 18:47:23 GMT
accept-ranges: bytes
content-length: 29950
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
200 OK 8.6 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 269x170, components 3\012- data
Hash dc9802a6d8bb38c758f2e602de516de3
60809f2f96869416259893a43c91fe392f3a3a4d
789981c56beb944e93e129833632dd5b53e97012360fbf0f7b4e77c399996c05
GET /wp-content/uploads/wordpress-popular-posts/379496-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 8613
Connection: keep-alive
Last-Modified: Sun, 09 Oct 2022 20:09:59 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vvt0ToHWmeTJnGAqa8MjDVF25SYgsc7VojlU%2BneA7KIdgyfwfCx4P3uGmdOMQFc6ZP1SlaQcelXJuWP4uHzZRNrt6wXXcUtCSmcPCxGHecOoK0EBe0vNt6epnNPAEA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8748e91c12-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/wordpress-popular-posts/8260-featured-269x170.jpg
200 OK 11 kB URL HTTP/1.1 surefap.org/wp-content/uploads/wordpress-popular-posts/8260-featured-269x170.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 269x170, components 3\012- data
Hash 8cf2b1d85d0d135230d692eccc31da9b
8e367d74897e31e6eae1184d457f85b3b2b8ffcc
ea616799d6876c69bd7e56d4b2e831dc2b4ca4c401d71aeb2735ec2450138446
GET /wp-content/uploads/wordpress-popular-posts/8260-featured-269x170.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 10683
Connection: keep-alive
Last-Modified: Mon, 12 Dec 2022 05:29:27 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UAukomzjXVkGRVz1RMDdBEoFWkCVbzJ1Ms%2FUUKLb39zPxsWIwV0utHoIULMVgBxrfadaINoj14hPIj0xefboM1B3qaUQkk%2BeAPmry6QPkeIYoOfK6lpYHKe8nzfcOA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e874a0c1c06-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2021/09/20/8d46a7994334172d8f83814c476ff966.md.jpg
200 OK 44 kB URL HTTP/2 nefree.com/images/2021/09/20/8d46a7994334172d8f83814c476ff966.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x323, components 3\012- data
Hash 4aa110ebae90afb517a3992df6dce0f1
7403c17db9ee4fc0ed3f219fdb3be48aa7531040
21546ce1210a9c0f8813ddcc80aae847e01260034dd1e0e26d259c720a54b810
GET /images/2021/09/20/8d46a7994334172d8f83814c476ff966.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 43588
last-modified: Mon, 20 Sep 2021 17:13:06 GMT
etag: "6148c122-aa44"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxDofidIe3NRpA5oyxgWQjnblP3cxMRNu5DZD55BCTKFcsY1MqN1miZhUMD2qEuGOX%2FwGknpuwhsjUswPMuTrvE03TF39U1aFzezVxpUkNh5sM%2B4CdLC%2FVZGMz3j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861feab50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2017/10/surefap.org--The-Perverted-Universe-of-Jimmy-Neutron-page01-96797663_1923433354-300x232.jpg
200 OK 16 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2017/10/surefap.org--The-Perverted-Universe-of-Jimmy-Neutron-page01-96797663_1923433354-300x232.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x232, components 3\012- data
Hash 83754169885b1eae0fdf262a4a93b5c0
51f0d3766963d0d888d53bc330898ea55152a681
eec997c9d32f10ba98898af2224e40851152a67aec3bc525b724e172a236129a
GET /wp-content/uploads/2017/10/surefap.org--The-Perverted-Universe-of-Jimmy-Neutron-page01-96797663_1923433354-300x232.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 16337
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:55:27 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ABMs8GneAumaalTmtv3zksS2Yc8L6726PtQo7jlW8l%2FF0XXOHi9N5yT9xaCX80qG6a0FCajSzFNFsMCu7C6DkO%2B%2BZ%2FMjh4ACAaVLDpIEw7eHsDd4g6C5HswTtj6ig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e872910b529-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/12/11/d9d65d86e185ed9781fd5b72f23df566.md.jpg
200 OK 49 kB URL HTTP/2 4tymode.win/images/2020/12/11/d9d65d86e185ed9781fd5b72f23df566.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash c4e87632572dedb73bb45064bc54d6d4
d34b1f26f39e7496a6f48a37f50d47652eb2a199
c9977b6978596971d76d14549afeac9e88b562073dd64e530aa941eadbc5b12e
GET /images/2020/12/11/d9d65d86e185ed9781fd5b72f23df566.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 20:24:34 GMT
accept-ranges: bytes
content-length: 48835
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
200 OK 270 kB URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3\012- data
Size 270 kB (269711 bytes)
Hash d30a4392660ba150ffcb590ecf3b959f
917018a795e409303eecc5e560c2cc4db2785978
5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa
GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 269711
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4RuD9OlYCm7Av10dHkXC0%2BPzTXcgnPSxirifCN9k2JrWajT%2BMMi7SgZzhO7x1mt02%2FUYqYnezOQhvHbf6I3wG7HSrFPbDC9BUAFkVNY%2FNHkN1vLr1XV61JXAL5sQ%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e877a141c06-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/12/11/5a5b278082433857011e4206137edf84.md.jpg
200 OK 50 kB URL HTTP/2 4tymode.win/images/2020/12/11/5a5b278082433857011e4206137edf84.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 1bc129e83119bed351904924cf995ad9
b713ef476d87ff5ab110e6c652ea95cf57f9c1b2
7239c0ceaf5919917138f7a5e4e3e761f6c9a36c0b6e702d28d53cfed9ee47d3
GET /images/2020/12/11/5a5b278082433857011e4206137edf84.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:04:48 GMT
accept-ranges: bytes
content-length: 50449
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49fc9943e7401016ecc60b78e21a10f6
50c9fddeff8e09acfa9cbdbf09e7dd64abe847fb
365f064bf6d2ae423e1ccc4b89d5ee72a6da153d1296c7e1a0ba39af1b981342
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "365F064BF6D2AE423E1CCC4B89D5EE72A6DA153D1296C7E1A0BA39AF1B981342"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 13 Dec 2022 08:13:39 GMT
Date: Tue, 13 Dec 2022 02:13:39 GMT
Connection: keep-alive
4tymode.win/images/2020/12/11/f95b504ed93ddc923f4203fb43603f91.md.jpg
200 OK 51 kB URL HTTP/2 4tymode.win/images/2020/12/11/f95b504ed93ddc923f4203fb43603f91.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 9fb95b7eb192ef5cf65d210a19387060
5de5faf4b0296f7c45a0889c2b5a0e60949a11a5
9b0d1ffb8adef9b4e6320191f83842d0fec1269ab47a868beb2fe42571400e98
GET /images/2020/12/11/f95b504ed93ddc923f4203fb43603f91.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 20:24:35 GMT
accept-ranges: bytes
content-length: 50858
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
nefree.com/images/2020/12/12/b2bf834f82d7a27b826b43a4d726d7d3.md.jpg
200 OK 43 kB URL HTTP/2 nefree.com/images/2020/12/12/b2bf834f82d7a27b826b43a4d726d7d3.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash ae7c3a2b8ca229bf8992bb0c839d56dd
41d92a7df54fed2e89b58c05b6d5231df58e0ce9
02124097a869fd0cfb1f8b36c2189f1db0b4a8f769efdfdf20b5164f343a3d01
GET /images/2020/12/12/b2bf834f82d7a27b826b43a4d726d7d3.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 42594
last-modified: Sat, 12 Dec 2020 17:14:08 GMT
etag: "5fd4fa60-a662"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yOW7sSBYQlScG%2BfHBtFC9gW%2FlKNoZecRsjFVDCRiikXD9SKmr32YFp5eSbVWtXK4o2EhrUNEBAoRVe7syOg48xjokXe4lD6zb%2BfUXe96N9VaPeC46TguwLSi3vKW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861febb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e4c6d363561c736d7a7f34836b7fc12
8c173df8b04d0a530ace0019419c2eff36c69294
32363f74488856833ecc03d7db76d9c2af4267b9bedcf2b5239f6471cf36d9f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "32363F74488856833ECC03D7DB76D9C2AF4267B9BEDCF2B5239F6471CF36D9F4"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 13 Dec 2022 08:13:39 GMT
Date: Tue, 13 Dec 2022 02:13:39 GMT
Connection: keep-alive
surefap.org/wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.3-page0153240718-lq-300x388.jpg
200 OK 32 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.3-page0153240718-lq-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash 365edfc5eae4f798401c957c299b6ee8
d67c6a40936921de3e862ab03f2b4d4c040f91cb
7c362a43c54b954ac1e10a3d59ca1379433bae5d321f215f5e899edaac62cb7b
GET /wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.3-page0153240718-lq-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 31709
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:08:39 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KjkYVM4Nns7y4HE7dMumyunLaTxcTAHiwuCgwgCnNy%2BdqQK1i%2BdtOiprhXs1KjCe4XxAJUSJlqkgGRoWjgxc2OQZ33XowX2pCqfSQpjPYB7lYR8abUImYRblqBaJcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e872c09b50b-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2020/12/11/4aeab8d7bbe90e06acb6497baac53178.md.jpg
200 OK 59 kB URL HTTP/2 4tymode.win/images/2020/12/11/4aeab8d7bbe90e06acb6497baac53178.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 0a5fe6dbfca67b4716619306d5be9224
d7c89b11709d120d81f53d4a635ee79517d13f4b
8abbd808261ef9ea09f9c01d5a01f8e2f16c86c55d571f7c3e02cc4f66ac1a46
GET /images/2020/12/11/4aeab8d7bbe90e06acb6497baac53178.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:04:47 GMT
accept-ranges: bytes
content-length: 58699
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.2-page0149652301-lq-300x388.jpg
200 OK 30 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.2-page0149652301-lq-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash dc5998a14cff4bbb0de3d08432607474
1420fef93b535da31dc9fbe339ad14216cd772f2
caffa4942f359cf1b96f2e7740ab6af68cd83ebcbf8b1a4a10f9fdfe098e0499
GET /wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.2-page0149652301-lq-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 29993
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:16:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZBtWgVeykGhCBJFTODP19bhXu56mW7QxlSAua6v4CtAvN3MF%2BV0kbXID2tKi0xp81Bhgq6iZAQlAWstk%2F%2Bbk8wZHZ08aaMEnNlx5viIVtVq7clWzAmXpvl1o0Tn6iA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e874bc20b3d-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.1-page0182947136-lq-300x388.jpg
200 OK 38 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.1-page0182947136-lq-300x388.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x388, components 3\012- data
Hash e0d65e8443974c464c2430c6c0e41d8e
2323ba3a956b541e20597a995144555e97eef8d5
37c03d9efa08bd09ac802609358785ba249d5ed9e10e7f62678aaa18e6ee560b
GET /wp-content/uploads/2020/12/SureFap.org-Remote-Control-of-the-Mind-Part.1-page0182947136-lq-300x388.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 37557
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 14:24:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vNvkUg4d%2B4A1Gwx2ny0KQL5q5ltZM2WRuaEPe4V1K5sb7c5Wq98xOsuicQKjM6t01hOa2dXScf9bkBMZEKUKtFNKOKSZH8pj8s1YC817QSAO05KIKpJqdJd%2BfmPBNw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e875df9b527-OSL
alt-svc: h2=":443"; ma=60
4tymode.win/images/2021/09/29/32bbafa6846155283588a92d2d5b0c3b.md.jpg
200 OK 44 kB URL HTTP/2 4tymode.win/images/2021/09/29/32bbafa6846155283588a92d2d5b0c3b.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 15d46f925a727b958eda1cd989017a69
131b91599a40ac28d001c0a33c67cf643be812b4
16858794a49ae85eba25c1570422f0c08eab050dcce275a2dd79e81ae32b60b8
GET /images/2021/09/29/32bbafa6846155283588a92d2d5b0c3b.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Sep 2021 18:47:23 GMT
accept-ranges: bytes
content-length: 43483
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/ae99ba327b1e2e6fec0d7027d97f3298.md.jpg
200 OK 56 kB URL HTTP/2 4tymode.win/images/2020/12/11/ae99ba327b1e2e6fec0d7027d97f3298.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash 6e4b2a6cf797b4150b4246feb8ac8bea
dffba6becd48df8fa4d352695051245ff30b6ba1
880fb548760492237b4c8f1a6de5be751422b4e7be8a2170770007d9e0be8ba7
GET /images/2020/12/11/ae99ba327b1e2e6fec0d7027d97f3298.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 20:24:34 GMT
accept-ranges: bytes
content-length: 56446
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2021/09/29/5527527e62ed1b90ed7c808bcd258859.md.jpg
200 OK 53 kB URL HTTP/2 4tymode.win/images/2021/09/29/5527527e62ed1b90ed7c808bcd258859.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x389, components 3\012- data
Hash 04c8c4acd0052a7e03655c5cef7684cf
9021e6634d30ae59ae2e8b5c0f5d2cd8a226bcc9
fa12cd3b45e61d8f52655327ec9e3ef98e06c836cb80851562fc7b33bfad7278
GET /images/2021/09/29/5527527e62ed1b90ed7c808bcd258859.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Sep 2021 18:47:24 GMT
accept-ranges: bytes
content-length: 52656
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
4tymode.win/images/2020/12/11/32c5e5c96f48680380b0ca2a5d7b567f.md.jpg
200 OK 59 kB URL HTTP/2 4tymode.win/images/2020/12/11/32c5e5c96f48680380b0ca2a5d7b567f.md.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x388, components 3\012- data
Hash c4e746c0d9f59f5b6481a6f7818a1415
0b9225be81b4967fabf10c5e34ef239eb57b44e0
c18803d19511e74aa640baee64def115924ff398f233468ff0cdaa93c2ebfd18
GET /images/2020/12/11/32c5e5c96f48680380b0ca2a5d7b567f.md.jpg HTTP/1.1
Host: 4tymode.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Dec 2020 21:04:47 GMT
accept-ranges: bytes
content-length: 59200
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:38 GMT
server: Apache
X-Firefox-Spdy: h2
surefap.org/wp-content/uploads/2021/09/SureFap.org-The-ViruXXX-French-page00-Cover-01467398-300x243.jpg
200 OK 16 kB URL HTTP/1.1 surefap.org/wp-content/uploads/2021/09/SureFap.org-The-ViruXXX-French-page00-Cover-01467398-300x243.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 300x243, components 3\012- data
Hash c395639dcc5ee57b4da047e68eb79299
57550dc6bbf9d9348ab663c07ca5930f11cc37d0
6d3fba8b77f08de421b4b4cdd988ca3901bcaa133bbe05d56aded90a9dc052e8
GET /wp-content/uploads/2021/09/SureFap.org-The-ViruXXX-French-page00-Cover-01467398-300x243.jpg HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/jpeg
Content-Length: 16431
Connection: keep-alive
Last-Modified: Fri, 17 Sep 2021 19:39:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zXJ1RsCc%2F1ZsUORYNrsq5DTnnfIyGJbS2s%2FwJrNIN4BR4n0zvl9pMICqCAzPF6%2Fp83YGyhi30UODjSXfZZcwneOS8tqDau0BVu4Flldgp3UNZLXGc62nUlqaZFmRMw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8758ec1c12-OSL
alt-svc: h2=":443"; ma=60
nefree.com/images/2020/12/12/a99f1ec57d6afc37174ed8faa5580b87.md.jpg
200 OK 47 kB URL HTTP/2 nefree.com/images/2020/12/12/a99f1ec57d6afc37174ed8faa5580b87.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash 34acaa484c5d80ed2dae593975628823
64559af0e6d76c2f150aeb993e7fd7b98bd13cb0
8797bd9c508b5873e7e87bee03d7555a63fc4ef07a378a00633d2474db19ed16
GET /images/2020/12/12/a99f1ec57d6afc37174ed8faa5580b87.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 47202
last-modified: Sat, 12 Dec 2020 17:14:06 GMT
etag: "5fd4fa5e-b862"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J6hg6g%2BLjnv05GHkxfDe88%2Ff942HyY5q5VgR%2BVHy9FB%2Fuggf0SJTbK0Q5Nk7uNweoIg0mLoMbjkqHEjnr3b7p%2FCcDzL%2FZxKpItDfCDmpaw3xhJ9uWIwwL4SmWyQ9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861fecb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2021/09/20/ecaf8cdf507c61107f99b15240b7a902.md.jpg
200 OK 42 kB URL HTTP/2 nefree.com/images/2021/09/20/ecaf8cdf507c61107f99b15240b7a902.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x323, components 3\012- data
Hash 1af59db246019ca9ec32acde10617f7f
47349dac5ed0f6a0992aaf856b665b91af1be26f
e7a7aa5d5eecef3b218b341d1162811a521e91eb943367d9cdf7bdb91b16beb6
GET /images/2021/09/20/ecaf8cdf507c61107f99b15240b7a902.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 41578
last-modified: Mon, 20 Sep 2021 17:13:07 GMT
etag: "6148c123-a26a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SiMENSkzfXtbMaNdB5Qw1BK6vBjzDfc5JQo9ky3ZZnLrzzKZmXdEeyKYK5cFrTHuwWCaDLyrYweGQVK3GKVgN5HNSQPd1I6tw%2BkZMHWg%2BUwWstTI51c51oRpgsMG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e860fe9b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald
200 OK 4.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Oswald
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 21cd547fc53abc39f6a5606872573ab9
d7d1d9964f0e0acd05ed0bda1357d9ac8aef50f4
a66afed33c2cd19136dbbe05ef8c2e5aefebe108e8a00e9e315e5e56f31ef59e
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 13 Dec 2022 02:13:39 GMT
date: Tue, 13 Dec 2022 02:13:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nefree.com/images/2020/12/07/0b8ff067a207b103ff8ca1fb2ddf4a10.md.jpg
200 OK 32 kB URL HTTP/2 nefree.com/images/2020/12/07/0b8ff067a207b103ff8ca1fb2ddf4a10.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x323, components 3\012- data
Hash c80d2abe31d2a702283c3b983f25c2c3
6ec4f7d3e8496e612224f2fb9ebb8f68a53f3ee7
49c54089bec470c8df6d4d6fee54940938559834b0f1236b5440f2773335f32f
GET /images/2020/12/07/0b8ff067a207b103ff8ca1fb2ddf4a10.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 32261
last-modified: Mon, 07 Dec 2020 19:32:57 GMT
etag: "5fce8369-7e05"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qOOsFCtXKsQQ52Msrs2du3B8iSm%2FYwLJrLpwc0btWdcW3RFEerSy4TOtVICUC7W0EO%2F23FgPgfQTgPjoZDCxZdsnE7fkos6us8%2Fhvtreeyk2tXPcg0ZKPd8ctgMZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861feeb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/pLbA29GFlA432461-med.jpg
200 OK 25 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/pLbA29GFlA432461-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 232x300, components 3\012- data
Hash cace98c09511083640ad70387472353e
d51ffb1a487289ba44aadfda84f56353c05a2eb3
c7ffc46dfc6e58bcfef775004405d3afb699247ff7b13b00ecd8d89813dbb84e
GET /wp-content/uploads/2020/12/medium/pLbA29GFlA432461-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 16:06:52 GMT
accept-ranges: bytes
content-length: 24645
cache-control: public
expires: Tue, 13 Dec 2022 03:13:39 GMT
vary: User-Agent
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:39 GMT
server: Apache
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
200 OK 3.6 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash b6e0d9bacb7b9bd36363039bc6d258c1
50d02ed713b4495cd7c1ed341cf8085ed9b1d76b
05a8db29f524d8c647b88d6e429f50a13b1b623d86453bb93142aa203e4adb6f
GET /api/spots/303150?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=RJ3jTNKu25IWQRKAUEMj; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
a.shukriya90.com/api/settings/23307
404 Not Found 9 B URL HTTP/2 a.shukriya90.com/api/settings/23307
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 9e076f5885f5cc16a4b5aeb8de4adff5
475c848673a3f79fa778f01c2bd5a721d4c41707
e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
GET /api/settings/23307 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Origin: http://surefap.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: text/plain; charset=utf-8
content-length: 9
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d462d3e6bc6168ee30040355f8b96ee
7578100cefe27a95fc25fa11481d78353185a9f0
7371baa9980618773809e1f238fb57f8ec6eef6bdc37d127bead092b7fde990c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://surefap.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 21:18:06 GMT
expires: Tue, 12 Dec 2023 21:18:06 GMT
cache-control: public, max-age=31536000
age: 17733
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
200 OK 3.5 kB URL HTTP/1.1 a.shukriya90.com/api/spots/303160?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (712)
Hash 31dd471848d6a7e3bf3bc4f2656275f1
afad480a1923a997ff34f8a242fa89c7d4f6d40b
8be470bc153a177b262c674470bf91acb32f36c41470c0c52ac99832c3ed6340
GET /api/spots/303160?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: nauid=H3xINTKQJcVgogB3ofaP; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
Content-Encoding: gzip
nefree.com/images/2020/10/26/1ae424ad53adf0541d41a466af01a628.md.jpg
200 OK 25 kB URL HTTP/2 nefree.com/images/2020/10/26/1ae424ad53adf0541d41a466af01a628.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x243, components 3\012- data
Hash 55188936e4814404ae74105976bcc5ae
17d854f9e58bef441d532b0194573b90970fc7a4
e89ef12e7fd4d6de30db081b55dc968d016b35c154f6b4db77a88fe93030ef3f
GET /images/2020/10/26/1ae424ad53adf0541d41a466af01a628.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 25286
last-modified: Mon, 26 Oct 2020 18:10:39 GMT
etag: "5f97111f-62c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5NIbrfqBr3AlCqqL6a7%2BXVvGv1yMuUYZoGWj0GQ9xWZb62dZZVJstgL2sHJj3IPe2OtMYkZOsCn7uSRvH3yXRMYVheYaz3Gf2u5JZNY17S0tuoDRvsCuxT4LVmtg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff0b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/EIP5XAnGLN503490-med.jpg
200 OK 22 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/EIP5XAnGLN503490-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 232x300, components 3\012- data
Hash cdd7c9bfed860987406a3d933adce549
5da6bf0a918b22c8d5486ed0e867a2c049e1838a
63c1aa1f57c3fbb211f4dcd881e5d27f2ace137a1c646a93f4be79a9b0d50b48
GET /wp-content/uploads/2020/12/medium/EIP5XAnGLN503490-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 22:51:53 GMT
accept-ranges: bytes
content-length: 22343
cache-control: public
expires: Tue, 13 Dec 2022 03:13:39 GMT
vary: User-Agent
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:39 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/nKwCDJJFR7503395-med.jpg
200 OK 24 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/nKwCDJJFR7503395-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 232x300, components 3\012- data
Hash 1278f7257ad79692eba6d0ef1886516e
b9ba445a260d66179a44ad5532738a7e1d17cf07
1665809194cc98bb3ed219f105dce10fea06b4f7ef86d12e8fe56c9384c92ed1
GET /wp-content/uploads/2020/12/medium/nKwCDJJFR7503395-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 22:51:53 GMT
accept-ranges: bytes
content-length: 23643
cache-control: public
expires: Tue, 13 Dec 2022 03:13:39 GMT
vary: User-Agent
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:39 GMT
server: Apache
X-Firefox-Spdy: h2
a.shukriya90.com/api/click/8171223159946571095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/8171223159946571095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/8171223159946571095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
ayazik.win/wp-content/uploads/2020/12/medium/wgl3npnUxg535506-med.jpg
200 OK 24 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/wgl3npnUxg535506-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 232x300, components 3\012- data
Hash 8d726ed344cef633b28fa003675cf6f0
02a08d123cf3b6614118f6af884ea348a45e977a
6676dd933b8bf03358eb5734b7899c198ea3ac3c354d3e67e4ca2f24adce8c9a
GET /wp-content/uploads/2020/12/medium/wgl3npnUxg535506-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 22:51:53 GMT
accept-ranges: bytes
content-length: 24093
cache-control: public
expires: Tue, 13 Dec 2022 03:13:39 GMT
vary: User-Agent
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:39 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/QNhlifkYdt838268-med.jpg
200 OK 28 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/QNhlifkYdt838268-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 232x300, components 3\012- data
Hash e14c0385cecc7dc2556c42871410cbd5
d79e83950081c2d281b2b4849c67c2822a3a08bc
2b0c4f9338f4dba2bc4c120ffba012729897af46e91b136e943b0f52a0bef3eb
GET /wp-content/uploads/2020/12/medium/QNhlifkYdt838268-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 16:06:52 GMT
accept-ranges: bytes
content-length: 27943
cache-control: public
expires: Tue, 13 Dec 2022 03:13:39 GMT
vary: User-Agent
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:39 GMT
server: Apache
X-Firefox-Spdy: h2
ayazik.win/wp-content/uploads/2020/12/medium/AFHMLDCLpD101092-med.jpg
200 OK 29 kB URL HTTP/2 ayazik.win/wp-content/uploads/2020/12/medium/AFHMLDCLpD101092-med.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 65", baseline, precision 8, 232x300, components 3\012- data
Hash cd760f0021ccb53807615cda6f423cb6
1f772bfd0028fc738db28cd1fefea14fa82918cb
3ba0b21a546dcfac46ce524646fd65c3e2cc3d63dd7f908dfb4109eddbdada0c
GET /wp-content/uploads/2020/12/medium/AFHMLDCLpD101092-med.jpg HTTP/1.1
Host: ayazik.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Dec 2020 16:06:52 GMT
accept-ranges: bytes
content-length: 29071
cache-control: public
expires: Tue, 13 Dec 2022 03:13:39 GMT
vary: User-Agent
content-type: image/jpeg
date: Tue, 13 Dec 2022 02:13:39 GMT
server: Apache
X-Firefox-Spdy: h2
nefree.com/images/2020/12/09/b25073b6beac7bdab271812f51a48eca.md.jpg
200 OK 32 kB URL HTTP/2 nefree.com/images/2020/12/09/b25073b6beac7bdab271812f51a48eca.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash b01b5c5a228c2460008ab49da8f0989c
2b64f4597bd69cad16ba67e2696b405696ee5ea2
90896c78b22e37cd985b5ea76d6a2da5c3503457e8e25f7b728efca1c840561c
GET /images/2020/12/09/b25073b6beac7bdab271812f51a48eca.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 32450
last-modified: Wed, 09 Dec 2020 15:31:08 GMT
etag: "5fd0edbc-7ec2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rFfkdVh0WfCbsoUvsoTarrPGAP7kZR95COc0J1%2FpGe%2BtLQR5I%2BElN1mVl0WWbpjzAmtAfPrInabUiqxN4cxwIwAtssqQ0Cp1Utib6wTBeHwW0Vktne887zl6JtUc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff4b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e5ee531cc0386adab9fe3d62f530231
16ec934be53e9ce97d40aedf906430551ad1b58a
0259d529060dc76765ae2bfb9bb5f513662c41e1b6608ec3a950d8b4b04ec056
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.shukriya90.com/api/click/11655055478265195095?c=90
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/click/11655055478265195095?c=90
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/11655055478265195095?c=90 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/api/spots/303150?p=1&s1=%subid1%&kw=
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: private
nefree.com/images/2021/09/20/aa818e287510160cac4633cb68097b32.md.jpg
200 OK 40 kB URL HTTP/2 nefree.com/images/2021/09/20/aa818e287510160cac4633cb68097b32.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x323, components 3\012- data
Hash aec1fd1690aa993e95887cb178cda086
8c21e6a5f7797b64637018c26f1f66f37471e574
4b0158640f51422790552a0ed921cd0ad5f23de19a6c8990bc9ea396721ca976
GET /images/2021/09/20/aa818e287510160cac4633cb68097b32.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 39972
last-modified: Mon, 20 Sep 2021 17:13:08 GMT
etag: "6148c124-9c24"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2F7o94SBsGNt%2BHlnplTTRoBf1MXRL9QK7aWIrHa9s6UtydNRD2nGxdWEP540%2FP3fbTg4Dn2sd5IySH2Jvt4xzP4RPY0Y0wjxP0HSzZ8NJ7FI9CVwSttgSC1bbQ9r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff3b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2020/12/07/e14546a32d82115316e5d62db587b898.md.jpg
200 OK 24 kB URL HTTP/2 nefree.com/images/2020/12/07/e14546a32d82115316e5d62db587b898.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x194, components 3\012- data
Hash 30563d2d2dd3fae867678e92edbecd98
451b39acac551cf119002c1427cc44f3ed6d06c6
c52dc0ff6c9feea9895d74fdbd2016f84a50097b4119ff09a573dc80ec27da01
GET /images/2020/12/07/e14546a32d82115316e5d62db587b898.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 24383
last-modified: Mon, 07 Dec 2020 19:32:59 GMT
etag: "5fce836b-5f3f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o5ti%2F5tUepXzG3ls%2F87Luyux04dLcBRm6oQDYJ0aRHpLIJz9e1GH%2FQcg1w1EVlU%2BoEwwtYAKUYyPhFZ%2FQoLOY2Nn9g6n64D4YTyeIv%2BmyrHvVN9t%2BrR%2Bi6bJ5EMa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff8b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.realsrv.com/ads.js
200 OK 931 B IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2475), with no line terminators
Hash ca165cc1f42e2a5ec456df3e53b557ed
b6f48eae9f6edc1e929896d009af212deb80fce3
46c356460726ec97ae8c06a80c83d3601fa28d9b6f3e6a65e205c723175f7283
GET /ads.js HTTP/1.1
Host: ads.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Thu, 08 Dec 2022 12:51:43 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670903615
server: CDN77-Turbo
x-77-nzt: AblMCQ06jX3/xBIAAA
x-77-nzt-ray: c0a4cc285bb94161d3df97631f477f1c
x-cache: HIT
x-age: 4804
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 02:07:57 GMT
age: 342
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
nefree.com/images/2020/10/26/ddaf692b291fe0137a939d632f2cf872.md.jpg
200 OK 54 kB URL HTTP/2 nefree.com/images/2020/10/26/ddaf692b291fe0137a939d632f2cf872.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x386, components 3\012- data
Hash d54540c3f09e67c9f4ca4246b277145e
8a5e57013f36869900654f62a40950153a15cfc3
d206941fbb597b2ca8cd58d58c42b99f12121898ae2e1f819d2adbc31331847d
GET /images/2020/10/26/ddaf692b291fe0137a939d632f2cf872.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 54501
last-modified: Mon, 26 Oct 2020 18:10:40 GMT
etag: "5f971120-d4e5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qYFIMFAQ9GQlNCtrKWfWy1NkBaNatVJh1vj3IxNBKN7ek6R2gsew9YjZ2Gz6menIxg4Tg7VDBVCraSfY80tio2s6e1swBdhVMgNy00j%2Bf3gKvALDrb%2BZygxnvQNP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff6b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
301 Moved Permanently 162 B URL HTTP/1.1 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
nefree.com/images/2020/12/09/e2451c9f86206e4eddcc317e59698796.md.jpg
200 OK 33 kB URL HTTP/2 nefree.com/images/2020/12/09/e2451c9f86206e4eddcc317e59698796.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash 7da981a7265dafb3acdb5b435314d2f6
f6781ad844d95fc4d70634857239a5a91c04cc5f
16a563c7e7db124dc169d863f9aa5b5abf59642ed02cc3c4edea337b143ec946
GET /images/2020/12/09/e2451c9f86206e4eddcc317e59698796.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 33096
last-modified: Wed, 09 Dec 2020 15:31:09 GMT
etag: "5fd0edbd-8148"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4YZY3oKe7FNEs3JR8aal5r6EWKPD0NzwD1Pzkex9jnB4YjJkqZXr4UpGZTXeWNvnXcMRiZ66fwhyKRZeNsJa52AAIO52fAJbyGA%2FgmMBiLNFLORP5PPfaeqGnd2J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff9b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2020/12/07/c22693aba5cbf158f94a715cace1bd3f.md.jpg
200 OK 20 kB URL HTTP/2 nefree.com/images/2020/12/07/c22693aba5cbf158f94a715cace1bd3f.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x194, components 3\012- data
Hash fcf914f984bee31c92990c445fd5e549
ff3fc500128bde006ed64daaf59477b7f275a639
97a952a2095ffa9889070285ab2ccf75011fd04b6e8edb8df5405ab6835debd9
GET /images/2020/12/07/c22693aba5cbf158f94a715cace1bd3f.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 19985
last-modified: Mon, 07 Dec 2020 19:32:58 GMT
etag: "5fce836a-4e11"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E3wIWk72454dEXaQR1RQvtTAANBXSpHrhxnt0DAa6VpdRm5pI%2FrMS%2BKejPvIUHaHbbt8XngarfHLJdr6mURlixwBBTbCJH3NTD3Ycub9%2Bwl%2BkvHDhm7kOfLHmttq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff1b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
syndication.realsrv.com/ads-iframe-display.php?idzone=2778226&type=728x90&p=1&dt=1670897617528&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
200 OK 405 B URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=2778226&type=728x90&p=1&dt=1670897617528&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document, ASCII text, with very long lines (536), with no line terminators
Hash 504b298cf2556d53e25a46f2c0c556fb
fe6e19ea63b82809c4e20b2e61fa49ff5e659d2c
d7ad38f017b86117dc620e6b6cbbeb64fc3b6cc73567a121989cb59b230f8a5e
GET /ads-iframe-display.php?idzone=2778226&type=728x90&p=1&dt=1670897617528&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226397dfd38b9b22.92875868784953090%22%3B%7D; expires=Thu, 12 Dec 2024 02:13:39 GMT; path=; domain=.realsrv.com;
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxamebscormgeimacslbecnxgxaaabssxamgeislsaroornxgxamebscormgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamemllesegeiccmmlmlcnxgxameomroeegeialbsereanxgxamemlblaageioslmrxbrnxgxamermrablgeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxamebellmbgeicxbmsbocnxgxamebbleorgeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameboaxalgeiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamemlblaageioslmrxbmnxgxamebxlmmsgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamemlblaageimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamebellmbgeimcclsxmenxgxamebellmbgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamebellmbgeimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamebscormgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamebscormgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamebxlmxrgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameolxrmmgeimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxamemlcssogeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamemlblaageimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamebelccxgeimmccrlacnxgxamemacmmmgeimrblxeoenxgxamecrasabgeimmccrlaonxgxamebelccxgeimmccrbxenxgxamemsxoscgeimmccrlaenxgxamemsxoscgeimmccrbebnxgxamemxemcbgeiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimrmaobxanogxamebxsmabgxcceimaoobrbcnsgxamebxmboxgxcceicloaecoenxgxamebxllclgxcceimaoobrbansgxameboeaoagxcceimaalslbbnogxameboeaoagxcceimeelaclonsgxameboeaoagxcceimeelaclanogxameboeaoagxcceixaoossalnxgxameboosxrgxcceimrcebxconxgxameboosxrgxcceimmsxrlabnxgxameboosxrgxcceimraeelabnxgxameboosxrgxcceimxxerrecnxgxameboaxalgxcceimsacexoonxgxameboaxalgxcceirrmlllronxgxameboaxalgxcceimmceabsbnlgxameboaxmegxcceimrxccosanogxameboaocogxcceimmxerbocnxgxameboacosgxcceimexlaeoonxgxameboacosgxcceicloaxxabnxgxamebobbxmgxcceimmooobranxgxamebobbxbgxcceimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimxlbalscnsgxamebscormgxcceimxxerrebnxgxamebscormgxcceimmoabamcnsgxamebcloxsgxcceialaroxrcnxgxamebcloxbgxcceimeembesonxgxamebrxmlrgxcceimmossscencgxamebaxoeogxcceicmarxbbonxgxamebalsamgxcceimxlbmoconsgxamebalsabgxcceimxlbmoscnogxamebalsabgxcceimrbxmxmanxgxamebalsabgxcceimaalslbanxgxamebmboobgxcceimxlbmosanogxamebmllxsgxcceimmosssconcgxamebmllxsgxcceircmbbroanxgxamebmllxsgxcceimcssmlroncgxamebmllxsgxcceimeembecenxgxamebmllxsgxcceimmrsxssanxgxamebbecmmgxcceimcoaxmxcnsgxamebbxleagxcceimxlbmxlonxgxamebbxlmxgxcceicxexraernxgxamebbsrolgxcceimeembescnxgxamebbsrsegxcceimemlxbocnxgxamebbbroogxcceimxlbmoaonxgxamebbblsmgxcceialcaercenxgxamebbleorgxcceimxlbmoobnxgxamebbleorgxcceimcssmlrenxgxamebbleorgxcceimclsaoxbnxgxamebbleorgxcceiaaxcambbnxgxameblxssagxcceimxxrecsanxgxameblxssmgxcceimaoobbebnxgxameblmaxlgxcce; expires=Wed, 14 Dec 2022 02:13:39 GMT; path=/; domain=.realsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
nefree.com/images/2020/12/09/a29a75cd408638854faa001978c4c6e5.md.jpg
200 OK 33 kB URL HTTP/2 nefree.com/images/2020/12/09/a29a75cd408638854faa001978c4c6e5.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x324, components 3\012- data
Hash 1c242671a95dab5bbaf532c6479ddd51
6a5a05cb6c6caaa895d419dffe886368d247f247
3d5dbbc248cce04fbc76d502626b3ef4f824ffdca09503da0b68dcf6f0548dd0
GET /images/2020/12/09/a29a75cd408638854faa001978c4c6e5.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 33295
last-modified: Wed, 09 Dec 2020 15:31:07 GMT
etag: "5fd0edbb-820f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8decPU3XF4ey%2FSEPXsk4L%2Fxenkp3O52NVNzc0xAUpO7hIaD7vOFWavr5xakaEovYowpztlH%2BLI9s4G0bRl2lKdWpGqTy6y0eTUJudA6e0DKGLiSL6LDizXpHhiwg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ffbb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nefree.com/images/2020/10/26/319343ef7a375db019aaf06676a87728.md.jpg
200 OK 54 kB URL HTTP/2 nefree.com/images/2020/10/26/319343ef7a375db019aaf06676a87728.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x390, components 3\012- data
Hash 3567e03626e1ee78b33f725e5095b2fd
63b60c8849871aa3766eb3aa91b820a8f3c7d0a2
c29c5c732ee21503a84092b17ceeb0c3a57088e1e94c550d25bafaab2d25df11
GET /images/2020/10/26/319343ef7a375db019aaf06676a87728.md.jpg HTTP/1.1
Host: nefree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: image/jpeg
content-length: 53870
last-modified: Mon, 26 Oct 2020 18:10:39 GMT
etag: "5f97111f-d26e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yjRYHyXT5V%2FgAApa8%2FdZgOkSS5Fx0WsshujxFh5%2Bs6cZdbB%2BPyEzUTR8R3tnmNGOGjg3EA43HcXoEFNImPRbcEqLSCaeo4cyHTOTgksW%2Fj61bsScnG5r7euo89Zl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e861ff7b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 71305a3bf50dd8e9179a221716fc9f39
eae1f00c389184be492ec97b6c584f729bff15e0
6f4e369038c2ef90bc33dc73739bc713ac329dcf6be1df3722b6bc113eb64964
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4981
Cache-Control: max-age=142099
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:39 GMT
Etag: "63975471-117"
Expires: Wed, 14 Dec 2022 17:41:58 GMT
Last-Modified: Mon, 12 Dec 2022 16:18:57 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
stenadewy.pro/a.W_ZiyjPk3lB-1nco2phqa_bs2t5ulvS-WxQy9zNAD_EC2DNEjFU-2HNIyJZK6_bM2N5OlPS-WRQS9TNUD_EW2XNYjZU-2bNcwd?iframeId=vdsolv
200 OK 0 B URL HTTP/2 stenadewy.pro/a.W_ZiyjPk3lB-1nco2phqa_bs2t5ulvS-WxQy9zNAD_EC2DNEjFU-2HNIyJZK6_bM2N5OlPS-WRQS9TNUD_EW2XNYjZU-2bNcwd?iframeId=vdsolv
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a.W_ZiyjPk3lB-1nco2phqa_bs2t5ulvS-WxQy9zNAD_EC2DNEjFU-2HNIyJZK6_bM2N5OlPS-WRQS9TNUD_EW2XNYjZU-2bNcwd?iframeId=vdsolv HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
200 OK 5.7 kB URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
File type ASCII text, with very long lines (2401)
Hash 77b7adc765116a2cf04bd774596c68df
afacfb244afd862c8bdd781ea93bdeab305d2e7a
96726f6359962f2570a4821905d0afed64f6f7b71e3a6021cf4c7f8792b2f5b4
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectiveperformanceformat.com/7a2fa356cc779900c863a51e810fbfce/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26967), with no line terminators
Hash 1e1bbe83ee24475d1671bb9ccda46abf
7475d8bd23d600e6e7743fdaa97a80838196ab72
3015a2e4d9bd9857f5030195bfe8266b1b4444d4f4345d5d178cc67d5ab050c8
GET /7a2fa356cc779900c863a51e810fbfce/invoke.js HTTP/1.1
Host: www.effectiveperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 97ec79a7bebd9c387209d2d175abe9be
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
go.xlivrdr.com/smartpop/50b9925e88f6daf2eabd88c0fb66ee5504f4db44cc1c7d25b3959304ad843f5a?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304198&memberId=ooddNHdLHTPHNVS4ASOnsstnnrdZXPPbbLa6V1k9qrpXXWOpmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSulc7WnXOmei3OXS6ei2eXbXWqW7Oviyq2m7R0rnTT2yqmlnpc6V0rpXSuldK6V0rpnB9g--&p1=5304198&trackOff=1&kbLimit=1000
302 Found 0 B URL HTTP/2 go.xlivrdr.com/smartpop/50b9925e88f6daf2eabd88c0fb66ee5504f4db44cc1c7d25b3959304ad843f5a?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304198&memberId=ooddNHdLHTPHNVS4ASOnsstnnrdZXPPbbLa6V1k9qrpXXWOpmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSulc7WnXOmei3OXS6ei2eXbXWqW7Oviyq2m7R0rnTT2yqmlnpc6V0rpXSuldK6V0rpnB9g--&p1=5304198&trackOff=1&kbLimit=1000
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/50b9925e88f6daf2eabd88c0fb66ee5504f4db44cc1c7d25b3959304ad843f5a?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304198&memberId=ooddNHdLHTPHNVS4ASOnsstnnrdZXPPbbLa6V1k9qrpXXWOpmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSulc7WnXOmei3OXS6ei2eXbXWqW7Oviyq2m7R0rnTT2yqmlnpc6V0rpXSuldK6V0rpnB9g--&p1=5304198&trackOff=1&kbLimit=1000 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://syndication.realsrv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 13 Dec 2022 02:13:39 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/v4/Universal?campaignId=50b9925e88f6daf2eabd88c0fb66ee5504f4db44cc1c7d25b3959304ad843f5a&campaignType=smartpop&creativeId=815c47240cff8060eae9bb5cd17e69b7688771ea0e08433273a5362e3492de1a&iterationId=375283&kbLimit=1000&masterSmartpopId=1914&memberId=ooddNHdLHTPHNVS4ASOnsstnnrdZXPPbbLa6V1k9qrpXXWOpmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSulc7WnXOmei3OXS6ei2eXbXWqW7Oviyq2m7R0rnTT2yqmlnpc6V0rpXSuldK6V0rpnB9g--&p1=5304198&ruleId=17&smartpopId=7197&sourceId=5304198&tag=-girls%2Findian&trackOff=1&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29906
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=67569691.29906; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCg3Rc4wrBy1LXpo8fobJiv1vEBGY; SameSite=None; Secure; path=/; expires=Wed, 14-Dec-22 01:13:39 GMT; HttpOnly
server: cloudflare
cf-ray: 778b2e8b99dfb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stenadewy.pro/a.W-ZTyUPV3WB_1YcZ2ahba-bd2e5flgS_WiQj9kNlD-En2oNpjqU_2sNtyuZv6-bx2y5zlAS_WCQD9ENFD-EH2INJjKU_2MNNwO?iframeId=cpahsw
200 OK 0 B URL HTTP/2 stenadewy.pro/a.W-ZTyUPV3WB_1YcZ2ahba-bd2e5flgS_WiQj9kNlD-En2oNpjqU_2sNtyuZv6-bx2y5zlAS_WCQD9ENFD-EH2INJjKU_2MNNwO?iframeId=cpahsw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a.W-ZTyUPV3WB_1YcZ2ahba-bd2e5flgS_WiQj9kNlD-En2oNpjqU_2sNtyuZv6-bx2y5zlAS_WCQD9ENFD-EH2INJjKU_2MNNwO?iframeId=cpahsw HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://a.shukriya90.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: text/html;charset=UTF-8
content-length: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 71305a3bf50dd8e9179a221716fc9f39
eae1f00c389184be492ec97b6c584f729bff15e0
6f4e369038c2ef90bc33dc73739bc713ac329dcf6be1df3722b6bc113eb64964
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4981
Cache-Control: max-age=142099
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:39 GMT
Etag: "63975471-117"
Expires: Wed, 14 Dec 2022 17:41:58 GMT
Last-Modified: Mon, 12 Dec 2022 16:18:57 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
200 OK 0 B URL HTTP/1.1 a.shukriya90.com/api/spots/352013?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/spots/352013?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: nauid=P1pER5mVZ8wwvwHTdtOQ; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; SameSite=None
Cache-Control: private
surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
200 OK 1.0 kB URL HTTP/1.1 surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 358948a0ec900509e53396438fadea91
c47bd41c2dfd3879ca398829ac3438fce227dd96
d4cc3dfa1061aedf2533cf134f9d584568bc41a25090fb7ce77c5cdbec6c37e6
GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/gif
Content-Length: 1009
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:42:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vvGQeNswknnXs0saStIH0Uo%2BcsTUJGZmrZ7X4%2FodfFNlYVZgcAckI1YtL4mf3KOLKmyY2kEdRL6J9TKJkEPYI%2FE2PBrkC0hfZrHk3bd7Cve3%2BmJMVdlF95hHRCIflA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8c4b371c06-OSL
alt-svc: h2=":443"; ma=60
surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
200 OK 121 B URL HTTP/1.1 surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png
IP
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash f395c59b99ad9effdd18186e3416b83f
31fa705e99763fd0d6183cf20c99e99605a8987f
9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632
GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/wp-content/themes/FinanceDesk/style.css
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: image/png
Content-Length: 121
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:47:40 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5787
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PkuaKLrO%2B%2FFPdxDUM8DSBBviW7zWg5pOOo61izvQVOWQJRuwpArNoAKwtfH%2BlzDS0W4P37j1mvj3vwfhUGlGKAywiRdnFOGkXGwnjxVzb%2B03fubZO7r%2FRS0rN64hNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8c9b4d1c06-OSL
alt-svc: h2=":443"; ma=60
ocsp.sectigo.com/
200 OK 472 B IP
Hash 64ca3be49457bf78ade92955dae88c1a
8b6036dbfc7e3ef6f3e0e215b17678c0610121ad
bac26c13b0936c3e4b04c4888b70c8f23b527fce79777b2228b28f1f7ab8a212
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 19:08:28 GMT
Expires: Fri, 16 Dec 2022 19:08:27 GMT
Etag: "8b6036dbfc7e3ef6f3e0e215b17678c0610121ad"
Cache-Control: max-age=319487,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 778b2e8cad81b50f-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 884cfd1b6ccdf84553e146dc1118cad2
ef49185a867809eb1d54483fdbe6def2fd1ac847
78a0abfbc6863f7569d7044d8584a1080f2f5966b0b379bea1bd35a0d3ec3a94
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=131614
Date: Tue, 13 Dec 2022 02:13:39 GMT
Etag: "63972d16-1d7"
Expires: Wed, 14 Dec 2022 14:47:13 GMT
Last-Modified: Mon, 12 Dec 2022 13:31:02 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JrDvqakHLBwXy7TC33rpllR2VNfcE6DJF0rFDrqNvhpDPsxXnqxIVQ==
Age: 4571
surefap.org/favicon.ico
200 OK 2.4 kB IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash e4cb9c2ef4866c61686ea529cca5864c
51b1a32b077611d3f312c177cca13717e1d4c7aa
fed799214bbf9fecbb850e4a9013982864d232b335954ae57ef807b559821225
GET /favicon.ico HTTP/1.1
Host: surefap.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/publisher/ujinko/
Cookie: PHPSESSID=c8fkv7cv0sfft3kkdk8h5h9b23
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:40 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Oct 2019 10:37:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5783
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHSnr8mlCf8RKDTA7sNjmienA1wkwV65Q7XBfLn%2Fdxx2SzNzbWtq8qEsGXntzPjwCMjMLyUKiiwnSCx%2BZWeB0FCk7aZnZwNv%2FmpW%2FDmST%2F3dLQuFrVN6%2BNiY0YKMuw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778b2e8d5b831c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 012372298290807af508b5aa802060fd
81205fd0052d68221b7280f2ed7d7edac8e3d02c
853e47a1fcca72b2782d8ff31834bd150651f71d70bf20349648490336159a68
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:40 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
set-cookie: uid_id2=c0433687-b37a-404f-82cb-6a6d67232312:3:1; expires=Fri, 10 Dec 2032 02:13:40 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ohTjfCNdMXAR+qu6xncJ2w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gSuBsF6ZKZi+4KjkGA4/qAZqBD0=
adserver.juicyads.com/js/jads.js
200 OK 5.9 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP
Hash 5a68bed55f616818ea815436781a50ac
f5e129b7880f46c19f99afa6089457ed5764ca09
33770308049273c40eae59124721e1a23b93dd2b6af06a8cad93482fece92619
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:40 GMT
Content-Type: application/x-javascript
Last-Modified: Thu, 07 Jul 2022 14:07:12 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62c6e890-eb9"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a33409f980e81b54f660035dd9c14cfb
8399645bbd14b6a968328c6552b837e3368948a3
9cf6b1845f29636c04e711a6bf1e7937773c6c4522e2ba66dd6c43bfef34b33b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 302 Moved Temporarily
Date: Tue, 13 Dec 2022 02:13:40 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483
Content-Length: 32
Expires: Sun, 12 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 13 Dec 2022 01:34:02 GMT
expires: Tue, 13 Dec 2022 03:34:02 GMT
cache-control: public, max-age=7200
age: 2378
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0652039801b0a9a9fa911a6560668541
bc778c7225d0f951c4cd2871ee14cae43724af06
9de1993088ab18fcb624bfdfc442816cfdec81cc3819a373dea50030a2555978
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 17 Dec 2022 02:06:26 GMT
ETag: "bc778c7225d0f951c4cd2871ee14cae43724af06"
Last-Modified: Tue, 13 Dec 2022 02:06:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 13 Dec 2022 02:13:40 GMT
Age: 433
X-Served-By: cache-qpg1244-QPG, cache-bma1650-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 30
X-Timer: S1670897620.149705,VS0,VE0
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0652039801b0a9a9fa911a6560668541
bc778c7225d0f951c4cd2871ee14cae43724af06
9de1993088ab18fcb624bfdfc442816cfdec81cc3819a373dea50030a2555978
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 17 Dec 2022 02:06:26 GMT
ETag: "bc778c7225d0f951c4cd2871ee14cae43724af06"
Last-Modified: Tue, 13 Dec 2022 02:06:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 13 Dec 2022 02:13:40 GMT
Age: 433
X-Served-By: cache-qpg1244-QPG, cache-bma1648-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 18
X-Timer: S1670897620.157108,VS0,VE0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a33409f980e81b54f660035dd9c14cfb
8399645bbd14b6a968328c6552b837e3368948a3
9cf6b1845f29636c04e711a6bf1e7937773c6c4522e2ba66dd6c43bfef34b33b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:13:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:40 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: umnGOMVCjminO+qe5UBV06OrSizh/U59KvaEibge5v1gMRbq/UnThpljPBepeh+5w7wEpQIcu/4=
x-amz-request-id: 3YW9SERF7DC7262X
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 31
expires: Tue, 13 Dec 2022 06:13:40 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e8e1953b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=1137447459&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&ul=en-us&de=UTF-8&dt=Publisher%20Ujinko%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1681544301&gjid=379235188&cid=1411772536.1670897618&tid=UA-68853511-3&_gid=1358369558.1670897618&_r=1&_slc=1&z=1541292236
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1137447459&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&ul=en-us&de=UTF-8&dt=Publisher%20Ujinko%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1681544301&gjid=379235188&cid=1411772536.1670897618&tid=UA-68853511-3&_gid=1358369558.1670897618&_r=1&_slc=1&z=1541292236
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=1137447459&t=pageview&_s=1&dl=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&ul=en-us&de=UTF-8&dt=Publisher%20Ujinko%20xxx%20%7C%20SureFap&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1681544301&gjid=379235188&cid=1411772536.1670897618&tid=UA-68853511-3&_gid=1358369558.1670897618&_r=1&_slc=1&z=1541292236 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://surefap.org
date: Tue, 13 Dec 2022 02:13:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
200 OK 80 kB URL HTTP/2 informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews
IP
Hash ef0826409c12087812767228bd9e97ce
d931a33ed6f0fb24bb8b19ba64633f9982e98ad9
2f21b7f99694a3718aeb36a8db753f62b3f96d61d72b9d9ec4674887c891ba41
GET /informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews HTTP/1.1
Host: informer.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 1569
last-modified: Tue, 13-Dec-2022 02:13:40 GMT
content-type: image/png
pragma: no-cache
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:40 GMT
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash f2080b3a1a3719204bf9b6192a2d9f5c
3b99ca608f7d4819235799839018592478dabaf9
d59ff60f90f19ec9c619db213072580d6080f2018ed93ddf32bce6dd63013aa6
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 17 Dec 2022 01:51:43 GMT
ETag: "3b99ca608f7d4819235799839018592478dabaf9"
Last-Modified: Tue, 13 Dec 2022 01:51:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 13 Dec 2022 02:13:40 GMT
Age: 1315
X-Served-By: cache-qpg1269-QPG, cache-bma1677-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 36
X-Timer: S1670897620.211541,VS0,VE0
counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483
200 OK 1.5 kB URL HTTP/1.1 counter.yadro.ru/hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash ba8941aa29cdaf6f7c892f792c608bf7
8528f903d6d80294261f643a2f5c43b0fe90d4f1
861520b389b868c6c907ce148badebc378a34f7ef899b3e8798304a315132df8
GET /hit?t22.6;r;s1280*1024*24;uhttp%3A//surefap.org/publisher/ujinko/;0.23733030469722483 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 13 Dec 2022 02:13:40 GMT
Content-Type: image/gif
Content-Length: 1537
Connection: keep-alive
Expires: Sun, 12 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash b604b44a44140d3e443d1c1c9da02d8d
05407447253dbbd694e67456c6b25b5112bd359d
0dcc105aceee70b68e812bdb6033ab465720efe541259c35f19aa09fadc88bf8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73737
date: Tue, 13 Dec 2022 02:13:40 GMT
access-control-allow-origin: *
etag: "63933377-12009"
expires: Tue, 13 Dec 2022 03:13:40 GMT
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 14 kB URL HTTP/1.1 top-fwz1.mail.ru/js/code.js
IP
File type ASCII text, with very long lines (729)
Hash e2e25d9473a05570c20838aca1c2c3ea
a8ac67a13111a4e61cf7eb9bb8850ef5ab1246d4
b75b8d2fe8eb0c9e8191c51f99eb62b37c944f36118aacb5237e4bde65c60e11
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:40 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Nov 2022 16:42:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIE:1670897620:0:::; path=/; expires=Thu, 14-Dec-23 02:13:40 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"637e4d62-85c6"
Expires: Tue, 13 Dec 2022 03:13:40 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ecae6eb99dcaf8d2e72444a35b417f90
ced5d6458171c79686e95a250e0444ab2d0a1117
933a899201c65e2e2124c623dea6108e7f05b83dec90df7bc62830a84d465fcc
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 17 Dec 2022 00:40:33 GMT
ETag: "ced5d6458171c79686e95a250e0444ab2d0a1117"
Last-Modified: Tue, 13 Dec 2022 00:40:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 13 Dec 2022 02:13:40 GMT
Age: 1985
X-Served-By: cache-qpg1272-QPG, cache-bma1650-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 107
X-Timer: S1670897621.511601,VS0,VE0
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 02:13:40 GMT
access-control-allow-origin: *
etag: "63933377-2b"
expires: Tue, 13 Dec 2022 03:13:40 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash d040d05feda2ae71799f4daa60e91f30
4608a1c9b94ef37925c6f7398126d0eb3bce9c77
a04cd2f1b7ef08378accb55236cd2b09ffe643cb990d89630b1d6a4b4fdb6828
GET /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Tue, 13 Dec 2022 02:13:40 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:40 GMT
last-modified: Tue, 13-Dec-2022 02:13:40 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 13 Dec 2022 02:13:40 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592
set-cookie: FTID=1RMYgQ0tkIIE:1670897620:2787143:::; path=/; expires=Thu, 14-Dec-23 02:13:40 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670897618357%3A1670897618374%3A1%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga;visible=true;_=0.423679957835592 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://surefap.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:40 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670897620:2787143:::; path=/; expires=Thu, 14-Dec-23 02:13:40 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 1.8 kB IP
ASN #20940 Akamai International B.V.
Hash b8ce53a8b84a831b5060973ce40f5764
8e0ca2a46612a45196627765cc52176b77bc7766
899147ddab92a58f94943abb7e7e2e1136cc1d0339a773c55fdc0f5d6fbd404a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F05D1F7FB07EF9CCFB21BEB5F54B023EF41E6CB4FC3D69F080DE7FDDE3BE5211"
Last-Modified: Mon, 12 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1866
Expires: Tue, 13 Dec 2022 02:44:47 GMT
Date: Tue, 13 Dec 2022 02:13:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Tue, 13 Dec 2022 05:08:34 GMT
Date: Tue, 13 Dec 2022 02:13:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Tue, 13 Dec 2022 05:08:34 GMT
Date: Tue, 13 Dec 2022 02:13:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c41a668e81a782c5548ef82bc42df96
6e833f91a12e0beb9014a99c6b49792b81ad8dc2
323a322870127db232648bd70b906f0b62bb24568c7e84a2651141d1ecf7b83f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7682
x-amzn-requestid: 7f877768-ce73-4ea3-aa53-95ed5886598d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw5VEHzXIAMFqIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903c20-6818fed235383e3c27c355d2;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:09:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hi-8EN7lzkBZif5mJES5qJaoXlFNklFKZwKUgiVaezCQ2LOTwl2tfA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 15:57:04 GMT
age: 36997
etag: "6e833f91a12e0beb9014a99c6b49792b81ad8dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9051770b3587c195bea670f8820e8cfe
abf58087f0e345202da088238daea85d177b431b
f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: viqtSt0N4FbMvP-u-vlA4Y8SfzIafFu_4XhqXSKrbItp7gkJDp5PKA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 22:36:04 GMT
age: 13057
etag: "abf58087f0e345202da088238daea85d177b431b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 82729f01d4f9937407d14605a2b611f4
63ef739dbbcd1238da788c05909df21826d9f37b
4420ac61a207ef4d7899632123af2dd2c7421e6d16a494aea33383d37d603038
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5871
x-amzn-requestid: 0c5fa60d-81f3-4796-966d-cf91b6a28939
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWefGstIAMF-zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979df6-7234498f4094f61107741d1c;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f6d2A_b3AN_-g7QFNmtlMhjEitZ4fw9GX5w-xx1PxH-z_FdqjvabTQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:57:41 GMT
age: 15360
etag: "63ef739dbbcd1238da788c05909df21826d9f37b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8b0477fb90d103e2155bbf7ab47d877
ab668e755bd742b165fa3ba46a4c486c616a7ff6
40e2282cf64da6034f73a2ff0c0d060550caa364244d5bdf282d2f54719d48ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4703
x-amzn-requestid: 975cb427-5feb-4c36-bcfe-bed0cc9bd3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czpW4Hh4IAMFeRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639155c5-63d6d97371f11d6012edae68;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 03:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BouIqIrg_vfxBH0weDXiqoEBcSV8_d4qDVB3Er5PeIrZz249iHdqGQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 08:18:10 GMT
age: 64531
etag: "ab668e755bd742b165fa3ba46a4c486c616a7ff6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 690133687ca909986a7ac4e919193bbb
9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4
d4913048b7f2b341c77a345420a855e6385e00c64ef30f6cf136ad16f6bda771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6711
x-amzn-requestid: ac93518c-b2e1-4995-9152-11c30c05cc9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c9h4oHmiIAMFXQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639549d0-5180e10e467c4c4c5e7fd1f4;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 03:09:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YHHaFWjmRFuBvcFQ6orltY_4JuQEcHhfyjxHO3-XZduh_hEGfPcPoA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:57:59 GMT
age: 80142
etag: "9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F011f2c78-7785-4bfa-a0cc-3f1da3373cb7.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F011f2c78-7785-4bfa-a0cc-3f1da3373cb7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 148429983fce0e20f4de08c2f048471f
f97353ee4ae4ed1475f2095e3bc0f93d24ad848f
10ab479c83787195a0b85caa6335914da01b67ed9bd576f7d6a90278e2698763
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F011f2c78-7785-4bfa-a0cc-3f1da3373cb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5035
x-amzn-requestid: a0a4ef66-8d0c-4be6-867d-be98f4ea65ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cqTXdER6oAMFf-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d98fc-4d6af6b802321b75422f358d;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 07:08:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e-3G8vCh-0hZLOtmHgIL_OV81eY1wkjQu2arsUpgW5333oDyKBEFlg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 09:59:24 GMT
age: 58457
etag: "f97353ee4ae4ed1475f2095e3bc0f93d24ad848f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
patrondescendantprecursor.com/watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 patrondescendantprecursor.com/watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1 HTTP/1.1
Host: patrondescendantprecursor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 13 Dec 2022 02:13:41 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Location: https://patrondescendantprecursor.com/watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1&shu=1c126901920b6bb478bdef49da8f5259143694a5e2ba0be5f7e9bf7967cf05db47f567e2bb3aae3fac36e720a323c4f822510016c460bda3e547f00fe192b9b8cda8b62a2fec1ab904b1989efdcbd4645a8db0&pst=1670897681&rmtc=t
Set-Cookie: u_pl=15842260; expires=Wed, 14 Dec 2022 02:13:41 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.ca1Ppxb9MtOjplV9DUy4ACJ1yb3XLf7sz8NojkFTTIk; expires=Tue, 13 Dec 2022 02:14:41 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8ba9501bcd282b25366d83202cfa478e
Strict-Transport-Security: max-age=0; includeSubdomains
a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cporno&s1=%25subid1%25
200 OK 49 kB URL HTTP/2 a.shukriya90.com/api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cporno&s1=%25subid1%25
IP
ASN #24940 Hetzner Online GmbH
Hash ee7a5c3cb01e232ebf8d2f041d001f6a
ab619ba8f025b173095d5a5de845d98a3732d7f7
68761c2d1a46c54093f504c96f53ad4d7f281af51a0b650da0f5ba28be867cf0
GET /api/spots/23307?host=surefap.org&ev=197&wh=939&ww=1280&uuid=&kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cporno&s1=%25subid1%25 HTTP/1.1
Host: a.shukriya90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=PNJHvrz8ekAjsKk9e8u3; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1670897341/55432067
200 OK 32 kB URL HTTP/2 img.strpst.com/thumbs/1670897341/55432067
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash 68e419212e17c84ae2312530853d9a62
07509d9cdd957285ee1371b0a81e88c5f119f3bd
9a04ef9d3481c8844ce24e7e49511eeb0d6c4379d79f570f654563f4e1944d53
GET /thumbs/1670897341/55432067 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: image/jpeg
content-length: 31467
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=32900, status=webp_bigger
etag: "02c19558cf25ceb0ea8e2562f3084983"
last-modified: Tue, 13 Dec 2022 02:08:34 GMT
cf-cache-status: HIT
age: 35
expires: Tue, 13 Dec 2022 02:14:41 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e964d6fb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1670897341/86249010
200 OK 44 kB URL HTTP/2 img.strpst.com/thumbs/1670897341/86249010
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 8aaba40cdea5de4bed1e746371a38600
275fbd42ef33bd46378a94cbb4be9150b7127828
31abdd47af5f680c1edabfc7f6e0e67a08e3ca2320f82e22393622e16011a961
GET /thumbs/1670897341/86249010 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: image/jpeg
content-length: 43903
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=45438, status=webp_bigger
etag: "08bd4559aa947476e1f7e81926a02219"
last-modified: Tue, 13 Dec 2022 02:08:58 GMT
cf-cache-status: HIT
age: 35
expires: Tue, 13 Dec 2022 02:14:41 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e964d71b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1670897341/15727399
200 OK 38 kB URL HTTP/2 img.strpst.com/thumbs/1670897341/15727399
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash eca7bb262ec4ca7eb5ac789e748c40d1
9b0364638b20c5cbcdb10e53559486031646ee93
fee2ab2ea07245d3ac5b2bcb386d524c449437eda8d9ac117e6fb5b69bc5831a
GET /thumbs/1670897341/15727399 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: image/jpeg
content-length: 38298
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=39548, status=webp_bigger
etag: "a926e80e1afae9844d2744fae4691480"
last-modified: Tue, 13 Dec 2022 02:09:06 GMT
cf-cache-status: HIT
age: 201
expires: Tue, 13 Dec 2022 02:14:41 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e964d70b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1670897341/56180102
200 OK 28 kB URL HTTP/2 img.strpst.com/thumbs/1670897341/56180102
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 270x360, components 3\012- data
Hash 5260294db210df3640d56afc27ed0ec2
035f2d3b792beb647f1da9fa34302eef9e344852
27a7df2af915ab3fee204d6921da4d4cf80b8e63c44bc3a5ec0e8151e578098c
GET /thumbs/1670897341/56180102 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: image/jpeg
content-length: 27468
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=28605, status=webp_bigger
etag: "1487693740885e924f6e04e06090223e"
last-modified: Tue, 13 Dec 2022 02:09:29 GMT
cf-cache-status: HIT
age: 29
expires: Tue, 13 Dec 2022 02:14:41 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e964d76b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1670897341/75608212
200 OK 29 kB URL HTTP/2 img.strpst.com/thumbs/1670897341/75608212
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 5ce90ae614797b3b5292ec2e378b322a
fa2c85a0de545821ee5d70514f687e744c654545
4893eca9fb08f580bdac7385847605f2c97d9d9b972ba9c05f24b44696ca275f
GET /thumbs/1670897341/75608212 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: image/jpeg
content-length: 28809
cf-bgj: imgq:100,h2pri
cf-polished: origSize=29803, status=webp_bigger
etag: "939f5349facd37690cf6f7bb4593396a"
last-modified: Tue, 13 Dec 2022 02:09:19 GMT
cf-cache-status: HIT
age: 35
expires: Tue, 13 Dec 2022 02:14:41 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2e964d73b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
patrondescendantprecursor.com/watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1&shu=1c126901920b6bb478bdef49da8f5259143694a5e2ba0be5f7e9bf7967cf05db47f567e2bb3aae3fac36e720a323c4f822510016c460bda3e547f00fe192b9b8cda8b62a2fec1ab904b1989efdcbd4645a8db0&pst=1670897681&rmtc=t
200 OK 2.4 kB URL HTTP/1.1 patrondescendantprecursor.com/watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1&shu=1c126901920b6bb478bdef49da8f5259143694a5e2ba0be5f7e9bf7967cf05db47f567e2bb3aae3fac36e720a323c4f822510016c460bda3e547f00fe192b9b8cda8b62a2fec1ab904b1989efdcbd4645a8db0&pst=1670897681&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (3075)
Hash f716b16b5011f48cb46952f0355a3de5
609065289ced1ccdb805b8cbc13ae18ec073900e
ca06dae87db63716d7e8b5997885bded8c0618e3f89103c3c69589faf4fb0c33
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1105115830847.js?key=7a2fa356cc779900c863a51e810fbfce&kw=%5B%22publisher%22%2C%22ujinko%22%2C%22xxx%22%2C%22surefap%22%5D&refer=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&tz=0&dev=e&res=12.1053&uuid=c0433687-b37a-404f-82cb-6a6d67232312%3A3%3A1&shu=1c126901920b6bb478bdef49da8f5259143694a5e2ba0be5f7e9bf7967cf05db47f567e2bb3aae3fac36e720a323c4f822510016c460bda3e547f00fe192b9b8cda8b62a2fec1ab904b1989efdcbd4645a8db0&pst=1670897681&rmtc=t HTTP/1.1
Host: patrondescendantprecursor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Referer: http://surefap.org/
Connection: keep-alive
Cookie: u_pl=15842260; ain=eyJhbGciOiJIUzI1NiJ9.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.ca1Ppxb9MtOjplV9DUy4ACJ1yb3XLf7sz8NojkFTTIk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 13 Dec 2022 02:13:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://surefap.org
Access-Control-Allow-Origin: http://surefap.org
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=c0433687-b37a-404f-82cb-6a6d67232312:3:1; expires=Tue, 20 Dec 2022 02:13:41 GMT; secure; SameSite=None
iprcd6e74f761b9e9c62f7923afa48563577=3569676; expires=Tue, 13 Dec 2022 06:13:41 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 14 Dec 2022 02:13:41 GMT; secure; SameSite=None
uncs=1; expires=Wed, 14 Dec 2022 02:13:41 GMT; secure; SameSite=None
pdhtkv25=true; expires=Wed, 14 Dec 2022 02:13:41 GMT; secure; SameSite=None
uncs25=1; expires=Wed, 14 Dec 2022 02:13:41 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 175268ee84238a28da03a59621fb6761
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
adserver.juicyads.com/adshow.php?adzone=499390
200 OK 1.6 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=499390
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (366), with CRLF, LF line terminators
Hash a6a8bed5964af3ca9abdc14c40c9c964
58e9a4e7d59cf69c980daa9e10b68a81da9d5726
f939f21c1df876106d3f23e168efd8103d64259ff483efda1246d1aeb7f31b79
GET /adshow.php?adzone=499390 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=53e508ba9ac363dd895324150af609ef; expires=Wed, 13-Dec-2023 02:13:40 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YTowOnt9; expires=Fri, 16-Dec-2022 02:13:40 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 16-Dec-2022 02:13:40 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
200 OK 284 kB URL HTTP/2 ads.juicyads.me/ads/user161341/ad1266795-1658474854.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 284 kB (284264 bytes)
Hash 94eeda124cd4fd45a6ca4a7f0d672cc0
2c614d114dd89373a06a8823c4973f97b6120736
4a28e5c786dab8824c53af0d6543b86f58527139584fd50e41b97a5e917dfcc7
GET /ads/user161341/ad1266795-1658474854.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
etag: "1658474854"
cache-control: max-age=19113462
content-length: 284264
content-type: image/gif
last-modified: Fri, 22 Jul 2022 07:27:34 GMT
accept-ranges: bytes
x-hw: 1670897621.dop020.sk1.t,1670897621.cds251.sk1.hn,1670897621.cds261.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1539ee38f0f238b949d73be957ae00c4
5e4156fe7a041b3dd70e7b5b834ea713e7454dff
bd6b8efe67fa89082b391209dd5d55bc74632633f3b5fa4e7a6acd933a6b2e3b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD6B8EFE67FA89082B391209DD5D55BC74632633F3B5FA4E7A6ACD933A6B2E3B"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5817
Expires: Tue, 13 Dec 2022 03:50:38 GMT
Date: Tue, 13 Dec 2022 02:13:41 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
200 OK 185 kB URL HTTP/2 cdn.cloudimagesb.com/cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 185 kB (185150 bytes)
Hash 69cbf6dd022575e7dcaa17248e7e4643
daf78102256bb6d153facc728e9fe73be02138e6
41110fdcc38e4d9358f19dd9440d766d798d159e2bc6dd69197321df9d1b9582
GET /cti/18/f8/38/18f83825a2a74bc259a3fd10a1236848/1658915435.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:13:41 GMT
content-type: image/png
content-length: 185150
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 09:50:43 GMT
etag: "62e10a73-2d33e"
expires: Thu, 15 Dec 2022 02:13:41 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
adserver.juicyads.com/adshow.php?adzone=498259
200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=498259
IP
Hash bd757170a8c089abc23d12140f9d0579
3124536155fc567883d56c876fa1f795393ed5d2
b2351d18d7b2b0804761914dbf4f9698d1f9eda80f76f6b17a5447909b982e9f
GET /adshow.php?adzone=498259 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://surefap.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=53e508ba9ac363dd895324150af609ef; expires=Wed, 13-Dec-2023 02:13:40 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps161=1; expires=Wed, 14-Dec-2022 02:13:40 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjExOTY3MzA7aToxNjcxMTU2ODIwO30%3D; expires=Fri, 16-Dec-2022 02:13:40 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 16-Dec-2022 02:13:40 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/network/user1037/131-1573234879-0672616001573234879.gif
200 OK 55 kB URL HTTP/1.1 ads.juicyads.me/network/user1037/131-1573234879-0672616001573234879.gif
IP
File type GIF image data, version 89a, 160 x 600\012- data
Hash 91ebc432ed4947d05bd7ca13cea1ef9e
a954283710f7ee1c374574164b5f52cd84ba1c76
06b58fb6d42894e3953f5f85fc9aa296e5dc774a1e272481f54a210d0118e1bb
GET /network/user1037/131-1573234879-0672616001573234879.gif HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.juicyads.com/
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 02:13:42 GMT
Connection: Keep-Alive
ETag: "1573234879"
Cache-Control: max-age=16328850
Content-Length: 54567
Content-Type: image/gif
Last-Modified: Fri, 08 Nov 2019 17:41:19 GMT
Accept-Ranges: bytes
X-HW: 1670897622.dop205.sk1.t,1670897622.cds023.sk1.c
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*898;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;nt=0/1/1670897616033///-7/436/436/436/436/436/436//447/535/623/599/1890/1894/1974/4897/4897/;ni=;lvid=1670897618357%3A1670897620934%3A2%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga-ym;visible=true;_=0.13055902720606927;e=RT/load;et=1670897620932
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*898;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;nt=0/1/1670897616033///-7/436/436/436/436/436/436//447/535/623/599/1890/1894/1974/4897/4897/;ni=;lvid=1670897618357%3A1670897620934%3A2%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga-ym;visible=true;_=0.13055902720606927;e=RT/load;et=1670897620932
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*898;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;nt=0/1/1670897616033///-7/436/436/436/436/436/436//447/535/623/599/1890/1894/1974/4897/4897/;ni=;lvid=1670897618357%3A1670897620934%3A2%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga-ym;visible=true;_=0.13055902720606927;e=RT/load;et=1670897620932 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:42 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670897622:2787143:::; path=/; expires=Thu, 14-Dec-23 02:13:42 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7812d3d1738f58e664f85ab48bbb9a79
9621e4c75cddfc2c89d8aaaaf713abe358810c72
6d41de670d10f93d3eb06b12e746fcef9adbd4960bdf6fcc9af7961ddc21ed39
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D41DE670D10F93D3EB06B12E746FCEF9ADBD4960BDF6FCC9AF7961DDC21ED39"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8784
Expires: Tue, 13 Dec 2022 04:40:08 GMT
Date: Tue, 13 Dec 2022 02:13:44 GMT
Connection: keep-alive
d.pssy.xyz/t.php
200 OK 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 02:13:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=774b70c3-7d74-4de9-9af0-56ab4d452bd4; expires=Wed, 13-Dec-2023 02:13:44 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=116381016&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897622%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021342%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897622&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=116381016&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897622%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021342%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897622&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=116381016&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897622%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021342%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897622&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 173297
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 02:13:44 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:44 GMT
last-modified: Tue, 13-Dec-2022 02:13:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=797815178&wv-type=3&browser-info=we%3A1%3Aet%3A1670897623%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021342%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897623&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=1&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=797815178&wv-type=3&browser-info=we%3A1%3Aet%3A1670897623%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021342%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897623&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=1&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=797815178&wv-type=3&browser-info=we%3A1%3Aet%3A1670897623%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021342%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897623&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 135
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 02:13:44 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:44 GMT
last-modified: Tue, 13-Dec-2022 02:13:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=806103918&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897623%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021343%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897623&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=806103918&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897623%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021343%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897623&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=806103918&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897623%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021343%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897623&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 7100
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 02:13:45 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:45 GMT
last-modified: Tue, 13-Dec-2022 02:13:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*898;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670897618357%3A1670897625076%3A3%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga-ym;visible=true;_=0.9366608662549104;e=RT/unload;et=1670897625074;pvt=7151;vtauto=6721
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*898;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670897618357%3A1670897625076%3A3%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga-ym;visible=true;_=0.9366608662549104;e=RT/unload;et=1670897625074;pvt=7151;vtauto=6721
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2787143;u=http%3A//surefap.org/publisher/ujinko/;st=1670897617923;title=Publisher%20Ujinko%20xxx%20%7C%20SureFap;s=1280*1024;vp=1268*898;touch=0;hds=1;frame=0;flash=;sid=0306e14a24b9acf6;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670897618357%3A1670897625076%3A3%3A879dcebf5fa68dd1766022589a579395;opts=jst-ga-ym;visible=true;_=0.9366608662549104;e=RT/unload;et=1670897625074;pvt=7151;vtauto=6721 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:47 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670897627:2787143:::; path=/; expires=Thu, 14-Dec-23 02:13:47 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=896986527&wv-type=3&browser-info=we%3A1%3Aet%3A1670897625%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021345%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897625&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=2&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=896986527&wv-type=3&browser-info=we%3A1%3Aet%3A1670897625%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021345%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897625&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=2&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=896986527&wv-type=3&browser-info=we%3A1%3Aet%3A1670897625%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021345%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897625&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 02:13:47 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:47 GMT
last-modified: Tue, 13-Dec-2022 02:13:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=99024621&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897625%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021345%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897625&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/37790960?wmode=0&wv-part=3&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=99024621&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897625%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021345%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897625&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/37790960?wmode=0&wv-part=3&wv-hit=580414803&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&rn=99024621&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670897625%3Aw%3A1268x898%3Av%3A943%3Az%3A0%3Ai%3A20221213021345%3Au%3A1670897618816840108%3Avf%3Awy278c4xrecmji309n1ev%3Ast%3A1670897625&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 7187
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 02:13:47 GMT
access-control-allow-origin: http://surefap.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:47 GMT
last-modified: Tue, 13-Dec-2022 02:13:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
200 OK 0 B URL HTTP/2 stenadewy.pro/aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH
IP
GET /aRWGZNyXQ.2d9MkvZTTz9k6ab-2y5HlASqWhQd9gNADfEL2RNljaUq2_N/ycZ/whdsXuNXo/WSmA9/ugZkUqlUk/PETPQYxuNrj/YH1qNJjScH HTTP/1.1
Host: stenadewy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://a.shukriya90.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:13:39 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/37790960?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://surefap.org
Connection: keep-alive
Referer: http://surefap.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37790960/1?wmode=7&page-url=http%3A%2F%2Fsurefap.org%2Fpublisher%2Fujinko%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1170%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A144468084223%3Ahid%3A580414803%3Az%3A0%3Ai%3A20221213021338%3Aet%3A1670897618%3Ac%3A1%3Arn%3A987924370%3Arqn%3A1%3Au%3A1670897618816840108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C88%2C0%2C436%2C443%2C1%2C1356%2C80%2C%2C%2C%2C1894%3Aco%3A0%3Ans%3A1670897616033%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670897619%3At%3APublisher%20Ujinko%20xxx%20%7C%20SureFap&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 13 Dec 2022 02:13:40 GMT
access-control-allow-origin: http://surefap.org
set-cookie: yabs-sid=791629701670897620; Path=/; SameSite=None; Secure
i=6pE1AELv5CwkRCme0hbkJnN7sGiinFUhWYYWstdCEQS+Ets5+qwj8J25hgygdIatgGorB08Z6EmHgyY7DLcdl0LJ7O8=; Expires=Fri, 10-Dec-2032 02:13:36 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3189665331670897620; Expires=Wed, 13-Dec-2023 02:13:40 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3189665331670897620; Expires=Wed, 13-Dec-2023 02:13:40 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702433620.yc.1670897620#1702433620.yrts.1670897620#1702433620.yrtsi.1670897620; Expires=Wed, 13-Dec-2023 02:13:40 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 02:13:40 GMT
last-modified: Tue, 13-Dec-2022 02:13:40 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
104.21.92.107
95.211.229.245
173.233.137.52
95.101.11.115
185.76.9.14
87.250.250.119
79.137.52.116
104.18.63.124
142.132.131.203
93.184.220.29
135.181.208.216