GET forcedcinema.net/wp-content/uploads/2022/03/raping-the-waitress-380x214.jpg
200 OK 12 kB URL GET forcedcinema.net/wp-content/uploads/2022/03/raping-the-waitress-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash c156dc1ab1ca9b5743eedc9a7aa4c622
feffe0211145948de980ac5d6b236daca615fd71
73d7d99c515dc7a21edc0978c8b14d142bf3890033e042e34541a7b1cb47368a
GET /wp-content/uploads/2022/03/raping-the-waitress-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 12476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTj16Ge4yco74iMeIDJpO3KAmdQA%2BVHKEWfrVqYxFBDPK6XIBwrLhjurPcfEYygIRKVtNb%2BR0bVlz2S9NUOUWcs1Qk54%2Fls6LR2F1DF4HNymlrGBwIzGXlEqVde7R7MdXMNd"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 13:30:19 GMT
etag: "6404996b-30bc"
expires: Mon, 03 Nov 2025 23:25:56 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 169215
cf-cache-status: HIT
cf-ray: 93d49df93d570b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3548&min_rtt=939&rtt_var=3260&sent=147&recv=67&lost=0&retrans=0&sent_bytes=112276&recv_bytes=6780&delivery_rate=768750&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=687&x=16"
GET forcedcinema.net/wp-content/uploads/2024/01/tereza-vitu-molested-and-roughed-bez-doteku-2013-380x214.jpg
200 OK 10 kB URL GET forcedcinema.net/wp-content/uploads/2024/01/tereza-vitu-molested-and-roughed-bez-doteku-2013-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash 2c58b152a11e883255175a7b3f06c9be
3142758f04ab2836863bcafc8ffdacd6c4422e0d
c63ec658f1c24d3a076aec933327c4d5eb87fa1a9ebcf76e28faef7bb24556cd
GET /wp-content/uploads/2024/01/tereza-vitu-molested-and-roughed-bez-doteku-2013-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 10005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OsB3kqhi1pDRDczg524HzKBRQZY%2F1gTTuMKS5vQ6G0etR%2BRJh%2Ft8DFklbtz602eHoyA7su6Xwcgc35KDq2ZEehCbGP1FEIDRZxs%2FjLFwMmS7ZOLP%2B27UUVWrTy5EKBDAGUVh"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 19 Jan 2024 06:52:50 GMT
etag: "65aa1c42-2715"
expires: Tue, 04 Nov 2025 04:16:56 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 151755
cf-cache-status: HIT
cf-ray: 93d49df98d590b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3150&min_rtt=939&rtt_var=2543&sent=220&recv=75&lost=0&retrans=0&sent_bytes=189146&recv_bytes=9699&delivery_rate=463854&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=729&x=16"
POST shakingtacklingunpeeled.com/solid.gif?z=2010857&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=6sTBrNSggYB17v0cKm0Gw&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=xoQhnUjaHR0cHM6Ly9mb3JjZWRjaW5lbWEubmV0Lw&afid=395955199586304&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5
200 OK 43 B URL POST shakingtacklingunpeeled.com/solid.gif?z=2010857&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=6sTBrNSggYB17v0cKm0Gw&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=xoQhnUjaHR0cHM6Ly9mb3JjZWRjaW5lbWEubmV0Lw&afid=395955199586304&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5
IP
Requested by https://forcedcinema.net/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint22:34:C8:12:99:33:68:1F:AC:DF:C5:A1:A2:12:9F:26:63:2E:D3:B4
ValidityMon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=2010857&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=6sTBrNSggYB17v0cKm0Gw&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=xoQhnUjaHR0cHM6Ly9mb3JjZWRjaW5lbWEubmV0Lw&afid=395955199586304&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5 HTTP/1.1
Host: shakingtacklingunpeeled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Fri, 12 Jun 2026 22:26:12 GMT; Secure; SameSite=None
UID=2505091726d9cf5f489678434986e1d68b56; Path=/; Expires=Fri, 12 Jun 2026 22:26:12 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp
200 OK 1.1 kB URL GET static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint46:49:C4:E5:B9:C8:3E:19:BB:32:C2:7C:3D:22:F3:C4:80:2D:EB:DE
ValidityMon, 31 Mar 2025 02:32:21 GMT - Sun, 29 Jun 2025 02:32:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 2a11e13b2bd67bb9a6cb347d7c73df13
b85460a33f9b229f42c08a6a94ae433a4d5c32ab
1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56
GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:14 GMT
content-type: image/webp
content-length: 1066
server: nginx/1.24.0
last-modified: Fri, 31 May 2024 10:56:43 GMT
etag: "6659aceb-42a"
expires: Sat, 09 May 2026 22:26:14 GMT
cache-control: max-age=31536000
x-cdn-host-id: ds5058
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-content/uploads/2023/05/cellmates-give-him-the-welcome-380x214.jpg
200 OK 5.0 kB URL GET forcedcinema.net/wp-content/uploads/2023/05/cellmates-give-him-the-welcome-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash efec2ec9c6adaad213f81ec5b0f2ed0c
a992580db72b8e1f1be11771d563e01591174d05
08c16a76785cb0692cc4cc6cace047a837d6de37333c97a93b5d1840b2fad600
GET /wp-content/uploads/2023/05/cellmates-give-him-the-welcome-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 4975
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lOiL1RG7SYgQebytGHrptVjTw5VlJgYn553%2BNBQFLAuLpd5eT5z7Pk%2BY7MSgxqifAPBIAjCG10Qc1gGUX%2FLmqpNzdX0uQa1Nr6oAxl2eeuhzHuUd8SRbRZvtGbD8RPXzO5Vd"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 31 May 2023 10:08:45 GMT
etag: "64771cad-136f"
expires: Sun, 26 Oct 2025 21:03:44 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 868947
cf-cache-status: HIT
cf-ray: 93d49df98d5a0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3377&min_rtt=939&rtt_var=2787&sent=165&recv=74&lost=0&retrans=0&sent_bytes=125892&recv_bytes=9653&delivery_rate=4527075&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=725&x=16"
GET forcedcinema.net/wp-content/uploads/2025/05/elf-queen-prisoner-and-gang-rape-by-orcs-380x214.jpg
200 OK 20 kB URL GET forcedcinema.net/wp-content/uploads/2025/05/elf-queen-prisoner-and-gang-rape-by-orcs-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash 17aadcb2d0e4433a46cf1ad5c17e663d
0ddb9bea22563bfc15318b757ea90dadec36ac71
6f1b96b759b23c24e487764a8b287300f5ac2d1cdfea42a6df787f804050b0c5
GET /wp-content/uploads/2025/05/elf-queen-prisoner-and-gang-rape-by-orcs-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 19886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2BPwLHVr1oI2NMRVXf9Ili9ygOv7C68aTGGgEzN0NPyIk6k9id%2FcV2m3fUK6X6D%2FOXqr9q4tyyuYdLcch5%2Bapb1OuR0%2BxQDsvQepe%2BwBy1psEI4jONYEVflH5wEHl5UGJ12Q"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 07 May 2025 06:40:42 GMT
etag: "681b006a-4dae"
expires: Mon, 03 Nov 2025 20:12:08 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 180843
cf-cache-status: HIT
cf-ray: 93d49df98d5f0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3150&min_rtt=939&rtt_var=2543&sent=202&recv=75&lost=0&retrans=0&sent_bytes=168085&recv_bytes=9699&delivery_rate=463854&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=729&x=16"
GET forcedcinema.net/wp-content/uploads/2023/03/fclogo.png
200 OK 12 kB URL GET forcedcinema.net/wp-content/uploads/2023/03/fclogo.png
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type PNG image data, 429 x 42, 8-bit/color RGBA, non-interlaced
Hash 386e3b009b324ac7a4f11da1bf6e7bab
4eade616cb82dd9315f08c53676c4e0d9a190a91
92c3818507e9140e57ce9d95c3c1821d639c36cf946a0e8b2420bc36252dd405
GET /wp-content/uploads/2023/03/fclogo.png HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: image/png
content-length: 12208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z1paFw2EyzcdjwBchnjilT%2BEHAoWq7fsZ9zPV96vD5qjIOfAADZv9Wzg66LQfHqm5EGUqzxXFxfQCLXJ22gGy4VhrHDoZGBSSB1Nd018P5VuxeCD43E2cHMIhgISVNW2EQhx"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 14 Mar 2023 11:28:10 GMT
etag: "64105a4a-2fb0"
expires: Fri, 26 Sep 2025 21:22:21 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 3459830
accept-ranges: bytes
cf-ray: 93d49df6fd1e0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5959&min_rtt=939&rtt_var=4301&sent=76&recv=60&lost=0&retrans=0&sent_bytes=34280&recv_bytes=5914&delivery_rate=3541840&cwnd=17700&unsent_bytes=0&cid=68751e273dd23cef&ts=319&x=16"
GET forcedcinema.net/wp-content/themes/retrotube/assets/js/main.min.js?ver=1.7.3.8.1678187099
200 OK 23 kB URL GET forcedcinema.net/wp-content/themes/retrotube/assets/js/main.min.js?ver=1.7.3.8.1678187099
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JavaScript source, ASCII text, with very long lines (21150)
Hash 8de56c63db67ac6f625626e3ac7d8058
cb39c1b23507d92581313fed89464a371db4864d
2d7c51907ce47714099833dcb138ec307f1761c4aeaee160e51cee8fe12af364
GET /wp-content/themes/retrotube/assets/js/main.min.js?ver=1.7.3.8.1678187099 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xyqh%2Fnj0an5FFbthh%2FAJBVuiDSqGcbCnvRLYxSTRZX5GtWYuMUlCOculGElv8K6SM5r08jO2iuiv8Rz%2FEX4V67dLwgAqqhYkpKetXmlwdCFh6TpCM46IChbtn0WdCRxm7ym"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 07 Mar 2023 11:04:59 GMT
vary: Accept-Encoding
etag: W/"64071a5b-5b55"
expires: Wed, 05 Nov 2025 22:13:23 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 768
cf-ray: 93d49df70d210b49-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5959&min_rtt=939&rtt_var=4301&sent=93&recv=60&lost=0&retrans=0&sent_bytes=51980&recv_bytes=5914&delivery_rate=3541840&cwnd=17700&unsent_bytes=0&cid=68751e273dd23cef&ts=321&x=16"
GET shakingtacklingunpeeled.com/aas/r45d/vki/2010857/6305fab2.js
200 OK 153 kB URL GET shakingtacklingunpeeled.com/aas/r45d/vki/2010857/6305fab2.js
IP
Requested by https://forcedcinema.net/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint22:34:C8:12:99:33:68:1F:AC:DF:C5:A1:A2:12:9F:26:63:2E:D3:B4
ValidityMon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 153 kB (153171 bytes)
Hash 976bb7f02e331cf9a8ddb39e76073d9c
81bf1ef5470f3b70ae938d57bf7824d11d5a085c
79f0952dd478194e9a8dc43f40d7b49d3aa6be0ab8976b262e3f7af7027acb47
GET /aas/r45d/vki/2010857/6305fab2.js HTTP/1.1
Host: shakingtacklingunpeeled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 22:26:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 05 May 2025 08:59:21 GMT
vary: Accept-Encoding
etag: W/"68187de9-256f7"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp
200 OK 486 B URL GET static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint46:49:C4:E5:B9:C8:3E:19:BB:32:C2:7C:3D:22:F3:C4:80:2D:EB:DE
ValidityMon, 31 Mar 2025 02:32:21 GMT - Sun, 29 Jun 2025 02:32:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp
Hash ceeb4e8840c24621c0e0352b42b38a5b
03cbceb0134a39267014595938705e2916580644
50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3
GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:14 GMT
content-type: image/webp
content-length: 486
server: nginx/1.24.0
last-modified: Fri, 31 May 2024 10:56:43 GMT
etag: "6659aceb-1e6"
expires: Sat, 09 May 2026 22:26:14 GMT
cache-control: max-age=31536000
x-cdn-host-id: ds5058
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-content/uploads/2025/02/alma-noce-unwilling-sex-the-girl-flew-2021-380x214.jpg
200 OK 4.3 kB URL GET forcedcinema.net/wp-content/uploads/2025/02/alma-noce-unwilling-sex-the-girl-flew-2021-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash 717410398da45bd872006487ae884ddb
3e7cc639640eb914fff7c94fdda0fb8ad0efe459
dca787df16dedf20cd2fa8ab47bd37dda8d1a7207fb50c7b77549229e7c4a475
GET /wp-content/uploads/2025/02/alma-noce-unwilling-sex-the-girl-flew-2021-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 4285
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F3%2Bb2GswtMIzjtYvptKkmIfH5TKMSLWYjrPZq3R6xcWhfLPXsSlBdA3w8N39X6F6CtKhN3Na9ZTXTzp%2FC5OWcSf1ir3Em6GLquSuS8FKlslSbL904IsIArFCI5ELuXlYw6OJ"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 16 Feb 2025 13:55:25 GMT
etag: "67b1ee4d-10bd"
expires: Fri, 26 Sep 2025 21:37:44 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 3458908
accept-ranges: bytes
cf-ray: 93d49df9bd640b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2837&min_rtt=939&rtt_var=1997&sent=295&recv=82&lost=0&retrans=0&sent_bytes=268034&recv_bytes=11459&delivery_rate=12008100&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=758&x=16"
GET shakingtacklingunpeeled.com/check.html
200 OK 926 B URL GET shakingtacklingunpeeled.com/check.html
IP
Requested by https://forcedcinema.net/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint22:34:C8:12:99:33:68:1F:AC:DF:C5:A1:A2:12:9F:26:63:2E:D3:B4
ValidityMon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type HTML document, ASCII text
Hash 088dba8e97eede53134c93219f7ebbae
adb707654d1fe0af7d0d7a9f55660d22bd3625e4
6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: shakingtacklingunpeeled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 22:26:12 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 16 Apr 2025 07:53:28 GMT
vary: Accept-Encoding
etag: W/"67ff61f8-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
GET dd99a86663.fcb6adad17.com/80131ce1bf800bb856dadbebda7656e2.js
200 OK 206 kB URL GET dd99a86663.fcb6adad17.com/80131ce1bf800bb856dadbebda7656e2.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectdd99a86663.fcb6adad17.com
FingerprintA3:ED:79:AF:59:1B:25:E9:CC:41:83:E7:1A:C8:A3:CB:71:D2:2D:A6
ValidityTue, 06 May 2025 02:15:11 GMT - Mon, 04 Aug 2025 02:15:10 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 206 kB (206162 bytes)
Hash eb6aea211d5871efd91f116252d04244
3762b5a1bfd2aefece6e7ba5b3259f998cb52346
b4568b829dbd869a7bd40a2ac28a48037ee13fd5983a18903dad7782244ade54
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /80131ce1bf800bb856dadbebda7656e2.js HTTP/1.1
Host: dd99a86663.fcb6adad17.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:13 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 06 May 2025 14:46:06 GMT
etag: W/"681a20ae-32552"
content-encoding: gzip
expires: Fri, 09 May 2025 22:31:13 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET xml-v4.qualiclicks.com/thumbnail?i=BMRcav0Uw98_0&imgt=icon
302 Found 8.3 kB URL GET xml-v4.qualiclicks.com/thumbnail?i=BMRcav0Uw98_0&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectqualiclicks.com
FingerprintE4:7A:2C:7F:AB:78:0A:E4:CC:F7:B2:F2:4E:04:9E:DB:C3:BF:17:89
ValidityTue, 15 Apr 2025 06:47:49 GMT - Mon, 14 Jul 2025 06:47:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=BMRcav0Uw98_0&imgt=icon HTTP/1.1
Host: xml-v4.qualiclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 09 May 2025 22:26:14 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.qualiclicks.com/n254/ad/8d/20/5f/01/4d/4a/d3/74/b2/61/d6/c1/d5/e9/88/5b/04/cf/4a/8b/bf/e1/c2/60/01/a0/17/4f/65/b9/f8/100x100_1f.png
GET forcedcinema.net/wp-content/themes/retrotube/assets/stylesheets/font-awesome/webfonts/fa-solid-900.woff2
200 OK 11 kB URL GET forcedcinema.net/wp-content/themes/retrotube/assets/stylesheets/font-awesome/webfonts/fa-solid-900.woff2
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type Web Open Font Format (Version 2), TrueType, length 10596, version 1.0
Hash 20135c62c0cc5718c6f09ca19d0096f0
d6e6f3d491319dd4ea6be4ab730858e40853597b
fc42879535a793258664b6f8525e48ab3ef1496115d004da1538fb60db917bdc
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forcedcinema.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: font/woff2
content-length: 10596
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tkik5Hqded2RXyOiIjKsd62UtKICbmSsUtWzbeoy%2FsmZ066S4QvnXxCdWJxvsg0NGGN308vFvXLDD5Rw9GWcNRvLhNh4ZmgsDH21IX%2BP9ys8aEsMHd7BYB501hcftu5N63FB"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 13 Mar 2023 07:28:40 GMT
etag: "640ed0a8-2964"
strict-transport-security: max-age=31536000
accept-ranges: bytes
age: 186
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 93d49df67ced0b49-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6573&min_rtt=939&rtt_var=5710&sent=54&recv=53&lost=0&retrans=0&sent_bytes=17241&recv_bytes=4388&delivery_rate=2180&cwnd=12000&unsent_bytes=0&cid=68751e273dd23cef&ts=244&x=16"
GET forcedcinema.net/wp-content/uploads/2023/12/cinzia-bonfantini-rape-in-front-of-husband-lultimo-guerriero-aka-the-final-executioner-380x214.jpg
200 OK 14 kB URL GET forcedcinema.net/wp-content/uploads/2023/12/cinzia-bonfantini-rape-in-front-of-husband-lultimo-guerriero-aka-the-final-executioner-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash 1ee86f7b7db075cc8f6e1b79b60b7fa1
a8b9bd935394618a1785772c186f3d24e7b02d58
23b2c37cadc859bff036dbf032e32fa359a15a6f9254005f97ff19166f14010c
GET /wp-content/uploads/2023/12/cinzia-bonfantini-rape-in-front-of-husband-lultimo-guerriero-aka-the-final-executioner-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 13558
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R0mnHjpDnteQ%2FLoa4ik5vd9sdu8T5C9Ne2%2F6Qjpw0kwhVtRKOAxXl9Lz2ESghu9a6eaSg3MxJ5nPFR3Z6HpLFgtyJKtleY%2FHzYuT3sQvvKPkV86Qn%2FmFCwU4t13M%2BqEq%2Bkvp"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 08 Dec 2023 00:54:27 GMT
etag: "65726943-34f6"
expires: Sat, 25 Oct 2025 21:14:31 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 954700
cf-cache-status: HIT
cf-ray: 93d49df9bd610b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2837&min_rtt=939&rtt_var=1997&sent=258&recv=82&lost=0&retrans=0&sent_bytes=226331&recv_bytes=11459&delivery_rate=12008100&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=753&x=16"
GET b62adecab1.907ac1b61e.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NTIyMjIxMjAxNTUxODEwMDAiLCJ0aW1lem9uZSI6MCwidmVyIjoiMy4xMzguMyIsInRhZ19pZCI6MTY0NzM3LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuODYsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=
200 OK 0 B URL GET b62adecab1.907ac1b61e.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NTIyMjIxMjAxNTUxODEwMDAiLCJ0aW1lem9uZSI6MCwidmVyIjoiMy4xMzguMyIsInRhZ19pZCI6MTY0NzM3LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuODYsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectb62adecab1.907ac1b61e.com
Fingerprint74:4F:B3:D0:12:E5:06:F6:EB:5B:A9:94:21:6B:6F:89:92:D8:45:26
ValidityTue, 06 May 2025 02:47:58 GMT - Mon, 04 Aug 2025 02:47:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4NTIyMjIxMjAxNTUxODEwMDAiLCJ0aW1lem9uZSI6MCwidmVyIjoiMy4xMzguMyIsInRhZ19pZCI6MTY0NzM3LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuODYsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1
Host: b62adecab1.907ac1b61e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:13 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
x-cdn-host-id: ah1747
X-Firefox-Spdy: h2
OPTIONS 33200a86d4.c4e0aa36db.com/in/multy
204 No Content 0 B URL OPTIONS 33200a86d4.c4e0aa36db.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectc4e0aa36db.com
Fingerprint7F:C8:4E:73:05:9E:1B:38:65:78:76:0D:A6:F5:2D:64:A3:8B:41:90
ValidityMon, 05 May 2025 14:04:03 GMT - Sun, 03 Aug 2025 14:04:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: 33200a86d4.c4e0aa36db.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://forcedcinema.net/
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 09 May 2025 22:26:14 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-content/uploads/2025/05/unknown-actress-unwilling-sex-vasaku-jala-reede-2012-380x214.jpg
200 OK 9.1 kB URL GET forcedcinema.net/wp-content/uploads/2025/05/unknown-actress-unwilling-sex-vasaku-jala-reede-2012-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash 4e5e69a778f82a55565a532204184f6a
c9912b0ce7d4705ec30e15ed9d9dcbef7bccb735
433aa40322e9bb905604160280fa0a43935ffdaa8b292a242a94cebf3263cbea
GET /wp-content/uploads/2025/05/unknown-actress-unwilling-sex-vasaku-jala-reede-2012-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 9123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3iBHk256Vqlvy1ZhRxHfUz22yk64wRCRGR62I3AaVyrzyLXWUmt1GTjLUSDhrlvYy9j5%2FjMnh5tUzDhfvck5a%2B%2BSEV8z30FqiC0lLKszt1Qji1kKqkXK5z4WAos3Jo4Bz9s"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 May 2025 03:26:59 GMT
etag: "681c2483-23a3"
expires: Tue, 04 Nov 2025 19:29:40 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 96992
accept-ranges: bytes
cf-ray: 93d49df99d600b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3150&min_rtt=939&rtt_var=2543&sent=227&recv=75&lost=0&retrans=0&sent_bytes=197058&recv_bytes=9699&delivery_rate=463854&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=731&x=16"
GET forcedcinema.net/wp-content/themes/retrotube/style.css?ver=1.7.3.8.1678016267
200 OK 54 kB URL GET forcedcinema.net/wp-content/themes/retrotube/style.css?ver=1.7.3.8.1678016267
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type ASCII text, with very long lines (50614)
Hash 67cedda054fe8622e5c480d9a367b440
02f9647240db057564eb5e2c7ea8c8b7e2b9a258
84b3544d5dcd874fb663ac1cb1cd0d1d259bc084facd9e413565052bcda143b0
GET /wp-content/themes/retrotube/style.css?ver=1.7.3.8.1678016267 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SG32pM03Kjv5OSiYv6KIOyvYKyliqYa25RSzAv5eDJsDuDHWzmEdAJWsEt58783NC5%2BB%2BEnTacJH3PvRdy5pcGWu3X4A%2BU1%2Fnc8FuvQr1WdCeM13lR2PY6v9Y5un5JOSA21e"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 30 Mar 2025 11:07:26 GMT
vary: Accept-Encoding
etag: W/"67e925ee-d1a9"
expires: Sun, 19 Oct 2025 20:16:37 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 1476574
cf-cache-status: HIT
cf-ray: 93d49df68cf00b49-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6573&min_rtt=939&rtt_var=5710&sent=44&recv=53&lost=0&retrans=0&sent_bytes=6737&recv_bytes=4388&delivery_rate=2180&cwnd=12000&unsent_bytes=0&cid=68751e273dd23cef&ts=243&x=16"
GET forcedcinema.net/wp-content/uploads/2023/03/fc-favicon-32.png
200 OK 2.7 kB URL GET forcedcinema.net/wp-content/uploads/2023/03/fc-favicon-32.png
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash 776482bc193bf07ba77825adc81ca881
ec4534959f4e2d51138bf43b3207e6154c0fca59
5b6a546b1a997b4aaaa81da6e31d8df24709cd0d32a72c6092eed41c12cce550
GET /wp-content/uploads/2023/03/fc-favicon-32.png HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/png
content-length: 2652
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sN07%2BNbdt3jl3213IZdK3Rct6HSR%2B7MlsUbXXzNMLblZk6kduCTgWG1fdowvG2cmw80va%2BhXu4GXIhqhr5jKLIU314Y8Iag61I9LkXu0emmIkMBWj%2B%2BiYk7HXZkWTHyDdX22"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 09:30:33 GMT
etag: "64046139-a5c"
expires: Sun, 19 Oct 2025 19:36:45 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 1478966
cf-cache-status: HIT
cf-ray: 93d49dfbad6f0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4564&min_rtt=939&rtt_var=4823&sent=325&recv=86&lost=0&retrans=0&sent_bytes=299719&recv_bytes=11899&delivery_rate=2550128&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=1062&x=16"
POST 33200a86d4.c4e0aa36db.com/in/multy
200 OK 52 kB URL POST 33200a86d4.c4e0aa36db.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectc4e0aa36db.com
Fingerprint7F:C8:4E:73:05:9E:1B:38:65:78:76:0D:A6:F5:2D:64:A3:8B:41:90
ValidityMon, 05 May 2025 14:04:03 GMT - Sun, 03 Aug 2025 14:04:02 GMT
Hash 683d1cdd096cc9025b4b934bb13e8e72
88744465b50578b762c2b6b578381c337721099b
3da4df98ffb32e534c8e290f39a5db96a086197889eb5d48d8818fecf61be267
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /in/multy HTTP/1.1
Host: 33200a86d4.c4e0aa36db.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 2723
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 09 May 2025 22:26:14 GMT
content-type: application/json
content-length: 5442
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MhLxXgX8BZkOJAz2iun1rqatYk6ePqKkraKxca0AitTwZNOjMMG9bWSgNf7Pr2kFOBrhBo4
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MhLxXgX8BZkOJAz2iun1rqatYk6ePqKkraKxca0AitTwZNOjMMG9bWSgNf7Pr2kFOBrhBo4
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MhLxXgX8BZkOJAz2iun1rqatYk6ePqKkraKxca0AitTwZNOjMMG9bWSgNf7Pr2kFOBrhBo4 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:DZIcYo-K6MgXVOyY7F8anP9sReIW-Q:M0ra-4MQww0Zduep;Path=/;Expires=Sun, 09-May-2027 22:26:14 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 22:26:14 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhNoNY8PM-YqwMKc5WaKimgDPQxgtbkETREzqaJmWdLSPUhN2c3L6Ur237nKx7Ni4YTFu3yEg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954066650%3A1746829574318873
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-03cfMt2Az6N2CUHNi2iKbA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET static.qualiclicks.com/n254/ad/8d/20/5f/01/4d/4a/d3/74/b2/61/d6/c1/d5/e9/88/5b/04/cf/4a/8b/bf/e1/c2/60/01/a0/17/4f/65/b9/f8/100x100_1f.png
200 OK 8.3 kB URL GET static.qualiclicks.com/n254/ad/8d/20/5f/01/4d/4a/d3/74/b2/61/d6/c1/d5/e9/88/5b/04/cf/4a/8b/bf/e1/c2/60/01/a0/17/4f/65/b9/f8/100x100_1f.png
IP
ASN #20940 Akamai International B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectstatic.qualiclicks.com
Fingerprint30:A5:E8:B2:64:06:81:D2:68:BD:1F:89:D9:02:BC:76:6F:24:7C:BC
ValiditySat, 22 Mar 2025 11:01:54 GMT - Fri, 20 Jun 2025 11:01:53 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Hash de401832300480198e35b7cc18f5b0a1
aa90ec3542093b483d1a29e2a3a29e05142cf0cd
8d205f014d4ad374b261d6c1d5e9885b04cf4a8bbfe1c26001a0174f65b9f81f
GET /n254/ad/8d/20/5f/01/4d/4a/d3/74/b2/61/d6/c1/d5/e9/88/5b/04/cf/4a/8b/bf/e1/c2/60/01/a0/17/4f/65/b9/f8/100x100_1f.png HTTP/1.1
Host: static.qualiclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 8270
Last-Modified: Sun, 21 Apr 2024 12:46:25 GMT
ETag: "66250aa1-204e"
Accept-Ranges: bytes
Cache-Control: max-age=21904
Expires: Sat, 10 May 2025 04:31:19 GMT
Date: Fri, 09 May 2025 22:26:15 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
200 OK 103 kB IP
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Size 103 kB (103375 bytes)
Hash 4321e66b5f55c04367b210a61723c5a8
6f15b47a9aecd4a38757ac13e666d43c996405f5
7a4b8a05e01c94e3ee7ccdaf305d4f7b05da7d1da8b1a1ce4610f8d1be9b9d29
GET / HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
link: <https://forcedcinema.net/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-cache: HIT From forcedcinema.net
cache-control: max-age=0
nginx-cache: HIT
last-modified: Friday, 09-May-2025 22:26:11 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=QXeNP7ylMurfTgbnvtyoY8Sa0vfq7Ynr0L7XUM0IZr37YDRSLPt7YENd8BpUPlUewiqE2SGYWdLY1MUQ7IC4BDykqZYBv4EIJ8i9mwC4q4L5fCt922zkAoYmp3rW%2BFY4Bo9n"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 93d49df4294456c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 90 kB URL GET forcedcinema.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 17738318d61d394f1de8890d589afaec
f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3
cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VeFNEWjjc%2BivMx8k9fhgSGHAInDo5WHl476TTkgsKngm99nydsFt5cOQN%2BkUb15jLJSLKDTI3h62PqO%2BSFLdtgLt%2BBBp0xmNBtu93FZjuqEu69tn0qR6CCdKscRDXNLKClOM"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 13 Mar 2023 08:19:03 GMT
vary: Accept-Encoding
etag: W/"640edc77-15e54"
expires: Wed, 05 Nov 2025 22:23:05 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 186
cf-cache-status: HIT
cf-ray: 93d49df6fd200b49-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5959&min_rtt=939&rtt_var=4301&sent=91&recv=60&lost=0&retrans=0&sent_bytes=50491&recv_bytes=5914&delivery_rate=3541840&cwnd=17700&unsent_bytes=0&cid=68751e273dd23cef&ts=320&x=16"
GET forcedcinema.net/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
200 OK 683 B URL GET forcedcinema.net/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JavaScript source, ASCII text
Hash 75abd4cd8807b312f9f7faeb77ee774b
e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7
ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nH3fbU73DVkevmfyZ1ER7b%2Bd%2FHIBVtcYENZUfwgxAd5t4uQpBxf3OQRsIOm0ROIcO3QKoHCe3EeZjHLOjWcJJvFwwLtJoz0Z6Xgt5hW8f0Lr4y9yjvtiaCOlfqIjxl9rWrLV"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 04:52:27 GMT
etag: W/"6404200b-2ab"
expires: Sun, 19 Oct 2025 23:29:32 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
age: 1464999
cf-cache-status: HIT
content-encoding: br
cf-ray: 93d49df70d220b49-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5959&min_rtt=939&rtt_var=4301&sent=93&recv=60&lost=0&retrans=0&sent_bytes=51980&recv_bytes=5914&delivery_rate=3541840&cwnd=17700&unsent_bytes=0&cid=68751e273dd23cef&ts=321&x=16"
GET nereserv.com/in/dip?site=native-push&wl=1&event_id=75d99a94-4e15-47cd-b005-5bb234278820&subid=1534263736&sid=3326401222&spot_id=534258&created_at=2025-05-09&timezone=0&ver=8.225.1&is_native=1
200 OK 0 B URL GET nereserv.com/in/dip?site=native-push&wl=1&event_id=75d99a94-4e15-47cd-b005-5bb234278820&subid=1534263736&sid=3326401222&spot_id=534258&created_at=2025-05-09&timezone=0&ver=8.225.1&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectinpage.infrapu.sh
Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35
ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=75d99a94-4e15-47cd-b005-5bb234278820&subid=1534263736&sid=3326401222&spot_id=534258&created_at=2025-05-09&timezone=0&ver=8.225.1&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 09 May 2025 22:26:13 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhNoNY8PM-YqwMKc5WaKimgDPQxgtbkETREzqaJmWdLSPUhN2c3L6Ur237nKx7Ni4YTFu3yEg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954066650%3A1746829574318873
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhNoNY8PM-YqwMKc5WaKimgDPQxgtbkETREzqaJmWdLSPUhN2c3L6Ur237nKx7Ni4YTFu3yEg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954066650%3A1746829574318873
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhNoNY8PM-YqwMKc5WaKimgDPQxgtbkETREzqaJmWdLSPUhN2c3L6Ur237nKx7Ni4YTFu3yEg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954066650%3A1746829574318873 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 22:26:14 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-8Tl5ieWyJ9F977Zw77btyg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.8x8cbXFxqmQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 33200a86d4.c4e0aa36db.com/in/show/?tag_ab=b&site_id=31534258&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fforcedcinema.net%2F&refdom=forcedcinema.net&auction_time=1746829574&subid=1534263736&sid=3326401222&tcid=0&ver=8.225.1&ver_c=&spot_id=534258&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-05-09&iabcat=IAB25-3&user_fp=7467734412802546767&score=100&kubik_score=100&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1534263736%26spot_id%3D534258%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fforcedcinema.net%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=6397850&crtid=19d7cb913fcc2d36229620b774ff253b&url=https%3A%2F%2Fxml-v4.qualiclicks.com%2Fclick%3Fi%3DBMRcav0Uw98_0&icons=OY7t2ZfWbyWzXBahc7bLPGmPvcPYMkndZ1w6Ev3yYz5sh0R4NbxKrgg8YBC8jek96IIy0viDM64oguSLwUoA14oT2QnhE7B4ao8qWSqB6rO2UJYOA8NsXB2rRRK6eZPeyFi3-4Rh_o29cw&ext_cid=1353168&px_id=44534258&min_cpm=0.0003487868096234309&out_id=0&campaign_type=hq&aid=3330&cid=17351&uniq=&mid=3565928098384818274&skin_id=2&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.0008598326359832635&cpm=0.0008598326359832635&verify_hash=332d884b59968446071ecaeb3638041c&verify_hash_v2=0ac71e4f917a9a55ac354e99dece051652286a740866507ed57701fa2c61fe8e&is_native=1&real_bid=0.0006&original_bid_usd=0.0006&original_bid=0.0006&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=4,90,98,70,129,148,5&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1746915974&image_url=&site=native-push-adult&price=0.0006&hostname=auc-inpage-hz-9-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000006&ext_campaign_id_str=1353168&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult%2Cbdsm%2Cteens%2Canal&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=0c9e49d0-8c84-41bf-afbf-84a49966a0a0&prev_step_diff=751
200 OK 0 B URL GET 33200a86d4.c4e0aa36db.com/in/show/?tag_ab=b&site_id=31534258&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fforcedcinema.net%2F&refdom=forcedcinema.net&auction_time=1746829574&subid=1534263736&sid=3326401222&tcid=0&ver=8.225.1&ver_c=&spot_id=534258&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-05-09&iabcat=IAB25-3&user_fp=7467734412802546767&score=100&kubik_score=100&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1534263736%26spot_id%3D534258%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fforcedcinema.net%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=6397850&crtid=19d7cb913fcc2d36229620b774ff253b&url=https%3A%2F%2Fxml-v4.qualiclicks.com%2Fclick%3Fi%3DBMRcav0Uw98_0&icons=OY7t2ZfWbyWzXBahc7bLPGmPvcPYMkndZ1w6Ev3yYz5sh0R4NbxKrgg8YBC8jek96IIy0viDM64oguSLwUoA14oT2QnhE7B4ao8qWSqB6rO2UJYOA8NsXB2rRRK6eZPeyFi3-4Rh_o29cw&ext_cid=1353168&px_id=44534258&min_cpm=0.0003487868096234309&out_id=0&campaign_type=hq&aid=3330&cid=17351&uniq=&mid=3565928098384818274&skin_id=2&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.0008598326359832635&cpm=0.0008598326359832635&verify_hash=332d884b59968446071ecaeb3638041c&verify_hash_v2=0ac71e4f917a9a55ac354e99dece051652286a740866507ed57701fa2c61fe8e&is_native=1&real_bid=0.0006&original_bid_usd=0.0006&original_bid=0.0006&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=4,90,98,70,129,148,5&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1746915974&image_url=&site=native-push-adult&price=0.0006&hostname=auc-inpage-hz-9-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000006&ext_campaign_id_str=1353168&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult%2Cbdsm%2Cteens%2Canal&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=0c9e49d0-8c84-41bf-afbf-84a49966a0a0&prev_step_diff=751
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectc4e0aa36db.com
Fingerprint7F:C8:4E:73:05:9E:1B:38:65:78:76:0D:A6:F5:2D:64:A3:8B:41:90
ValidityMon, 05 May 2025 14:04:03 GMT - Sun, 03 Aug 2025 14:04:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?tag_ab=b&site_id=31534258&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fforcedcinema.net%2F&refdom=forcedcinema.net&auction_time=1746829574&subid=1534263736&sid=3326401222&tcid=0&ver=8.225.1&ver_c=&spot_id=534258&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-05-09&iabcat=IAB25-3&user_fp=7467734412802546767&score=100&kubik_score=100&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1534263736%26spot_id%3D534258%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fforcedcinema.net%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=6397850&crtid=19d7cb913fcc2d36229620b774ff253b&url=https%3A%2F%2Fxml-v4.qualiclicks.com%2Fclick%3Fi%3DBMRcav0Uw98_0&icons=OY7t2ZfWbyWzXBahc7bLPGmPvcPYMkndZ1w6Ev3yYz5sh0R4NbxKrgg8YBC8jek96IIy0viDM64oguSLwUoA14oT2QnhE7B4ao8qWSqB6rO2UJYOA8NsXB2rRRK6eZPeyFi3-4Rh_o29cw&ext_cid=1353168&px_id=44534258&min_cpm=0.0003487868096234309&out_id=0&campaign_type=hq&aid=3330&cid=17351&uniq=&mid=3565928098384818274&skin_id=2&vertical_id=5&skin_test=0&from_cache=0&ecpm=0.0008598326359832635&cpm=0.0008598326359832635&verify_hash=332d884b59968446071ecaeb3638041c&verify_hash_v2=0ac71e4f917a9a55ac354e99dece051652286a740866507ed57701fa2c61fe8e&is_native=1&real_bid=0.0006&original_bid_usd=0.0006&original_bid=0.0006&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=4,90,98,70,129,148,5&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1746915974&image_url=&site=native-push-adult&price=0.0006&hostname=auc-inpage-hz-9-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000006&ext_campaign_id_str=1353168&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult%2Cbdsm%2Cteens%2Canal&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&st=0.03&cpa=0c9e49d0-8c84-41bf-afbf-84a49966a0a0&prev_step_diff=751 HTTP/1.1
Host: 33200a86d4.c4e0aa36db.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 09 May 2025 22:26:14 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-217778743-1
200 OK 256 kB URL GET www.googletagmanager.com/gtag/js?id=UA-217778743-1
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File type JavaScript source, ASCII text, with very long lines (2369)
Size 256 kB (256083 bytes)
Hash 909cd7c1cbc80abd3c5ee21550b7ff04
5c0ca84308b1f48bcf36d3c09d7b0befb478f511
e509b43355fdfe4b0caed13f1c7824c157f74533c6d266c6212287f6b31c49d2
GET /gtag/js?id=UA-217778743-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 May 2025 22:26:11 GMT
expires: Fri, 09 May 2025 22:26:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 91166
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/fontawesome.min.css?ver=6.3.0.2
200 OK 1.8 kB URL GET forcedcinema.net/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/fontawesome.min.css?ver=6.3.0.2
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type ASCII text, with very long lines (836)
Hash ddc62e40593ac34031a5e8bd894d3b5e
ee34e551ee99b26ce9c60fc7c94192715894cd5f
eff363513d715c7bc73711df0138df4237f3a20081a800cb00d96b181fa74fd9
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/fontawesome.min.css?ver=6.3.0.2 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jWbYvinX752cLmSsb%2BWpWn9uAkkQYdrjfSbetlG77OkJT0u5RSOT9Ua7O8AESEVY6whbRgApTjY0SatATpOspilT5jRKEJniee5dIWeTMaC1XoCtFOdskedyLe4SgvPqWU%2B4"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 07 Mar 2023 10:39:19 GMT
vary: Accept-Encoding
etag: W/"64071457-72f"
expires: Sun, 19 Oct 2025 19:36:44 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 1478967
cf-cache-status: HIT
cf-ray: 93d49df67cef0b49-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6573&min_rtt=939&rtt_var=5710&sent=41&recv=53&lost=0&retrans=0&sent_bytes=5241&recv_bytes=4388&delivery_rate=2180&cwnd=12000&unsent_bytes=0&cid=68751e273dd23cef&ts=243&x=16"
GET js.capndr.com/advertising.js
200 OK 0 B URL GET js.capndr.com/advertising.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectjs.capndr.com
Fingerprint36:80:C9:74:A8:03:5E:A6:42:15:13:F1:12:1D:CE:69:66:FD:BF:09
ValidityWed, 16 Apr 2025 02:32:06 GMT - Tue, 15 Jul 2025 02:32:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Fri, 09 May 2025 22:31:12 GMT
cache-control: max-age=300
x-cdn-host-id: ds8137
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET storage.multstorage.com/log/count.html
200 OK 882 B URL GET storage.multstorage.com/log/count.html
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectmultstorage.com
FingerprintAB:89:C2:3D:3B:E4:DD:0A:32:44:EC:41:65:9E:53:44:11:61:AB:F3
ValiditySun, 04 May 2025 05:28:22 GMT - Sat, 02 Aug 2025 06:26:59 GMT
File type HTML document, ASCII text, with very long lines (700)
Hash b728ca9cd183d1b7c3f72116b19b22a3
c1fd73f6b02cf00b8bc60b09cc99495e8494b739
8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:13 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dRYQxLkkYRJ9M9FmfzkC7kGzXfeLp7kh6EXEek%2BdXK%2FayVxHSsHUOJ9qloe%2FxHmXmth68Ea78YrGHOyEedBVkdJiuDbhv0yFimoabYxKw9g8jWaodARPS%2BhglHsCxUloalil1ozki%2BlHlQ%3D%3D"}]}
vary: Accept-Encoding
x-request-id: 364fd23f4a9be9026195aedb9bb660b4
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 93d49e023fd95699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-content/uploads/2022/04/college-bitch-remebers-her-rape-380x214.jpg
200 OK 11 kB URL GET forcedcinema.net/wp-content/uploads/2022/04/college-bitch-remebers-her-rape-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash 37d2478a7e2c43419a330b9db1c67b93
3bc223e21cf78d5c4f2d0a99ccb29d3d5f1fda3a
4362e2cb1fc6cbae2315b302bbc6c5001f9795f4684bd243b70ee53645839776
GET /wp-content/uploads/2022/04/college-bitch-remebers-her-rape-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 11335
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UthOuK7uE3t6TrcjZLADIKm%2FMIdXnVk%2B4w%2BsRTPlMAxyTNb%2FRXjMMpPNZstiR0xCJqs407R6dhnEpq6BLsU%2FJUFmsxKcayfw6i3iPJ8GMA6pB7BkFRK%2B9T92ks%2B7U1SZ7RGW"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 13:28:31 GMT
etag: "640498ff-2c47"
expires: Wed, 05 Nov 2025 18:30:08 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 14164
accept-ranges: bytes
cf-ray: 93d49df98d580b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3377&min_rtt=939&rtt_var=2787&sent=170&recv=74&lost=0&retrans=0&sent_bytes=131658&recv_bytes=9653&delivery_rate=4527075&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=727&x=16"
GET forcedcinema.net/wp-content/uploads/2023/01/nephew-wants-his-hot-aunt-380x214.jpg
200 OK 9.2 kB URL GET forcedcinema.net/wp-content/uploads/2023/01/nephew-wants-his-hot-aunt-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash a741361f69f1060a31701d2c7a93d317
46087a4848923b6236ded32e09ffcf2a5c6775c9
92782b7bd8942703bc5aff0ef92fba70fce06149641bb140758590f828459844
GET /wp-content/uploads/2023/01/nephew-wants-his-hot-aunt-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 9213
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VcxE3huAFmd9b2ONkpwvIkYnDcUtDENUd87DHQUMXcj0jNzBRW7wyOvVdP6%2FgBD8VfDXPY77makO0C25%2Bpd%2FL9qx1wd3i%2F537ZigeJEeANkD37ffZktT7wZCtq%2FBnAPRXkfB"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 13:07:07 GMT
etag: "640493fb-23fd"
expires: Fri, 26 Sep 2025 21:25:54 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 3459618
accept-ranges: bytes
cf-ray: 93d49df9bd620b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2837&min_rtt=939&rtt_var=1997&sent=271&recv=82&lost=0&retrans=0&sent_bytes=240918&recv_bytes=11459&delivery_rate=12008100&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=755&x=16"
GET forcedcinema.net/wp-content/uploads/2025/03/prisoner-girl-raped-in-the-woords-380x214.jpg
200 OK 15 kB URL GET forcedcinema.net/wp-content/uploads/2025/03/prisoner-girl-raped-in-the-woords-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash f0d0771b82401f28bf4b08b29b54dee3
730788a1787f83f8e2958b861dbf81e4d8fe9768
39327370b41be6dfe6df00794dbf5051b5281ccd42077f2eaad99bde9d8da6a7
GET /wp-content/uploads/2025/03/prisoner-girl-raped-in-the-woords-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 14777
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VWo8x06v9chJIFMGE8hTYCCrtbp5npt8fm8Z%2BAFn4LVjqIddD0uCK3RMkkvkSd9N5hZrIfaqQDyxD5mTe4i2zCHZvcQuYRizIME1wKGGHe%2B0nmQxphuc9Xb1zgaPKJEeMlPU"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 09 Mar 2025 08:00:26 GMT
etag: "67cd4a9a-39b9"
expires: Mon, 03 Nov 2025 02:37:31 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 244121
accept-ranges: bytes
cf-ray: 93d49df9bd650b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2635&min_rtt=939&rtt_var=1901&sent=310&recv=83&lost=0&retrans=0&sent_bytes=283866&recv_bytes=11504&delivery_rate=694911&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=765&x=16"
GET dd99a86663.fcb6adad17.com/1c0736390717190f5e657e4c6ed48072.js
200 OK 562 kB URL GET dd99a86663.fcb6adad17.com/1c0736390717190f5e657e4c6ed48072.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectdd99a86663.fcb6adad17.com
FingerprintA3:ED:79:AF:59:1B:25:E9:CC:41:83:E7:1A:C8:A3:CB:71:D2:2D:A6
ValidityTue, 06 May 2025 02:15:11 GMT - Mon, 04 Aug 2025 02:15:10 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 562 kB (562291 bytes)
Hash f9bb8f785f473be065ed7dd43597ee81
4eb68caba6dfb87f504adb36234bed2e1947fe0e
d91a99d6e095ec295badd90e1bfb73366bbdb749b90061d8d44246709a138624
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1c0736390717190f5e657e4c6ed48072.js HTTP/1.1
Host: dd99a86663.fcb6adad17.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:13 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 06 May 2025 14:45:59 GMT
etag: W/"681a20a7-89473"
content-encoding: gzip
expires: Fri, 09 May 2025 22:31:13 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:K1I_vfbsQzGVed4GL4wzmw25oCh-ow:jNBSanoPqR1beTyM; Expires=Sun, 09-May-2027 22:26:14 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 22:26:14 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MhLxXgX8BZkOJAz2iun1rqatYk6ePqKkraKxca0AitTwZNOjMMG9bWSgNf7Pr2kFOBrhBo4
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-oisSgUqlXA9IHUR4B8a6NQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 33200a86d4.c4e0aa36db.com/in/show/?tag_ab=b&site_id=31534258&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fforcedcinema.net%2F&refdom=forcedcinema.net&auction_time=1746829574&subid=1534263736&sid=3326401222&tcid=0&ver=8.225.1&ver_c=&spot_id=534258&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-05-09&iabcat=IAB25-3&user_fp=7467734412802546767&score=100&kubik_score=100&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1534263736%26spot_id%3D534258%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fforcedcinema.net%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%3DTVRjME5qZ3lPVFUzTkh3MlpEaGtNREV3TlRBNFpXWTFPVEUwTlRZMlptSXdaRFpoTW1VeU1USTVZUS0tfGh0dHBzOi8vdC5xdWlja3RyY2suc3BhY2UvYzEvMjllNGQ4OTYtMjY2Ny00MDQ1LWJkNzMtMGM3NjVlZDQyMmY1P2V4dGVybmFsSWQ9b3JkZE5IZExIVFBITlZTNEFTT3Byb2xsdXRkTk5SWFZWYlRLNlZ6cXBiWFV6T29kVEs2VjBycFhUMVVVMHVvbXBvbnBuZFJOVFJQVFM2VjB6cFhTdWxkSzZaMHJwWFRPMHRvc3Bzb3Fsb21tM3p1MjRzbjRzbDNvejFtcjR1MzFkdlBaZFROWHZYdmJueFp4ZFBkeGR0eE5MTnJOUHZaTmM2cWlxaW1lcTEzV3pBOHg2aF9jNTAxYnBYU3VsZEs2VjBycFhTdW1zcHJ0bnVxc3BjNTBycFhTdWxkSzZWMHJwWFN1bGRNNlYwcmlHMGozVUhYN3ZYMlBVUDduT2RQVHBUWFpYdmJWWkxacHRadHZweG5SYlZ0dFRacFR4VzRQc0EtLSZjb3N0PTAuMDAzNDc5MzEwMyZjdjE9NzQ2NjU4NCZjdjI9MTEzNjU1ODQwJmN2Mz1oZHpvZy5jb20mY3Y0PSUmY3Y1PWhkem9nLGNvbSZjdjY9ODY5MjczJmN2Nz00NjMwMDk4JmN2OD01MDgmY3Y5PU5PUiZjdjEwPXtyZWdpb259fGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8aGR6b2cuY29tfDY1NzYzMXw1OTk5MTh8ODY5MjczfDQ2MzAwOTh8NTA4fDc0NjY1ODR8MTEzNjU1ODQwfDQwfDN8MHwwfDI1MzQ0fDUzNTM0MjU4fDM0Ny45MzEwMzR8NzB8VVNEfFVTRHwxfDF8MjJ8fDF8Tk9SfHwxNnw0fDF8fGI4Mzc0NzM1MDMxMWVhOWRmNzJmNzBlM2FjMTZmOWVjfGUyNzk0MTZlNmU4YWY3ZjkyOWY5ZGYxMDFjMTJlNzE5fDF8MHxoZHpvZy5jb218MHwwfDB8MC4wNXwxfDB8ZXhjaGFuZ2VfbGlua3wwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHwxfDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEzNC4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEzNC4wfHwyMTYwfDd8MHwyfDB8fHwwfDB8MHwwfDB8MHwwfDB8MHwwfDB8My40NzkzMTAzNHwxLjgxNXwwLjV8MTAuMTJ8MXwwfDB8cnRiLmV4b2NsaWNrLmNvbXx8fHxPS3wwOTY0MjgzMWEwYTM3OTYyODM3YTdmNzczYzFkYzBiNg--%26bs%3DTVRjME5qZ3lPVFUzTkh3MlpEaGtNREV3TlRBNFpXWTFPVEUwTlRZMlptSXdaRFpoTW1VeU1USTVZUS0tfDR8NTB8MTAxMnwzNDcuOTMxMDM0fDF8T0t8ZDBjZTkxNzZkYjU2MTM5MmY5N2M0ZGVhNTcwZjA2ZDE-%26cb%3De2e_681e8106384e04.47501329&icons=v59ZeBrxvUxpJL8_ZvRWCn4TcSZ6jYESCQ8sh2SVjxox8Q_ech6nWEWgJBWgssVR56Qn3oBRnW_Y6GDsyvAvGi9M-ZPFLgmOvF2KF5QakxaScLTsRgB6B71UH0f9glUYDHVwQdAtJ1EI42dQjTRnc0XoQy9XykOunzZHdmxx1hE7RkPEcg&ext_cid=0&px_id=53534258&min_cpm=0.024189839449541284&out_id=1&campaign_type=lq-pop&aid=120&cid=12732&uniq=44d476bc4422ead97ae1c2ce7df1c4d8f41b09abfefedf28e9279339e30fdcba&mid=3565928098384818274&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.24206211081039755&cpm=0.1771009104775803&verify_hash=325bd06746be0ee2a189b340f06ada73&verify_hash_v2=90f0721fb41a5573fb4df71ffcb8ffb68d8dc464a213cdefa1429c0afcdeedbf&is_native=2&real_bid=0.0024355172380000002&original_bid_usd=0.0024355172380000002&original_bid=0.0024355172380000002&show_type=0&exp=120&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=89,4,20,27,150,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1746915974&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0.0024355172380000002&hostname=auc-inpage-hz-9-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000024355172380000003&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult%2Cbdsm%2Cteens%2Canal&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=32bd80f7-df61-4b2d-b3dd-179d3539e107&prev_step_diff=751
200 OK 0 B URL GET 33200a86d4.c4e0aa36db.com/in/show/?tag_ab=b&site_id=31534258&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fforcedcinema.net%2F&refdom=forcedcinema.net&auction_time=1746829574&subid=1534263736&sid=3326401222&tcid=0&ver=8.225.1&ver_c=&spot_id=534258&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-05-09&iabcat=IAB25-3&user_fp=7467734412802546767&score=100&kubik_score=100&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1534263736%26spot_id%3D534258%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fforcedcinema.net%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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--%26bs%3DTVRjME5qZ3lPVFUzTkh3MlpEaGtNREV3TlRBNFpXWTFPVEUwTlRZMlptSXdaRFpoTW1VeU1USTVZUS0tfDR8NTB8MTAxMnwzNDcuOTMxMDM0fDF8T0t8ZDBjZTkxNzZkYjU2MTM5MmY5N2M0ZGVhNTcwZjA2ZDE-%26cb%3De2e_681e8106384e04.47501329&icons=v59ZeBrxvUxpJL8_ZvRWCn4TcSZ6jYESCQ8sh2SVjxox8Q_ech6nWEWgJBWgssVR56Qn3oBRnW_Y6GDsyvAvGi9M-ZPFLgmOvF2KF5QakxaScLTsRgB6B71UH0f9glUYDHVwQdAtJ1EI42dQjTRnc0XoQy9XykOunzZHdmxx1hE7RkPEcg&ext_cid=0&px_id=53534258&min_cpm=0.024189839449541284&out_id=1&campaign_type=lq-pop&aid=120&cid=12732&uniq=44d476bc4422ead97ae1c2ce7df1c4d8f41b09abfefedf28e9279339e30fdcba&mid=3565928098384818274&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.24206211081039755&cpm=0.1771009104775803&verify_hash=325bd06746be0ee2a189b340f06ada73&verify_hash_v2=90f0721fb41a5573fb4df71ffcb8ffb68d8dc464a213cdefa1429c0afcdeedbf&is_native=2&real_bid=0.0024355172380000002&original_bid_usd=0.0024355172380000002&original_bid=0.0024355172380000002&show_type=0&exp=120&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=89,4,20,27,150,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1746915974&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0.0024355172380000002&hostname=auc-inpage-hz-9-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000024355172380000003&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult%2Cbdsm%2Cteens%2Canal&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=32bd80f7-df61-4b2d-b3dd-179d3539e107&prev_step_diff=751
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectc4e0aa36db.com
Fingerprint7F:C8:4E:73:05:9E:1B:38:65:78:76:0D:A6:F5:2D:64:A3:8B:41:90
ValidityMon, 05 May 2025 14:04:03 GMT - Sun, 03 Aug 2025 14:04:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/show/?tag_ab=b&site_id=31534258&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fforcedcinema.net%2F&refdom=forcedcinema.net&auction_time=1746829574&subid=1534263736&sid=3326401222&tcid=0&ver=8.225.1&ver_c=&spot_id=534258&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-05-09&iabcat=IAB25-3&user_fp=7467734412802546767&score=100&kubik_score=100&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1534263736%26spot_id%3D534258%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fforcedcinema.net%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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--%26bs%3DTVRjME5qZ3lPVFUzTkh3MlpEaGtNREV3TlRBNFpXWTFPVEUwTlRZMlptSXdaRFpoTW1VeU1USTVZUS0tfDR8NTB8MTAxMnwzNDcuOTMxMDM0fDF8T0t8ZDBjZTkxNzZkYjU2MTM5MmY5N2M0ZGVhNTcwZjA2ZDE-%26cb%3De2e_681e8106384e04.47501329&icons=v59ZeBrxvUxpJL8_ZvRWCn4TcSZ6jYESCQ8sh2SVjxox8Q_ech6nWEWgJBWgssVR56Qn3oBRnW_Y6GDsyvAvGi9M-ZPFLgmOvF2KF5QakxaScLTsRgB6B71UH0f9glUYDHVwQdAtJ1EI42dQjTRnc0XoQy9XykOunzZHdmxx1hE7RkPEcg&ext_cid=0&px_id=53534258&min_cpm=0.024189839449541284&out_id=1&campaign_type=lq-pop&aid=120&cid=12732&uniq=44d476bc4422ead97ae1c2ce7df1c4d8f41b09abfefedf28e9279339e30fdcba&mid=3565928098384818274&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.24206211081039755&cpm=0.1771009104775803&verify_hash=325bd06746be0ee2a189b340f06ada73&verify_hash_v2=90f0721fb41a5573fb4df71ffcb8ffb68d8dc464a213cdefa1429c0afcdeedbf&is_native=2&real_bid=0.0024355172380000002&original_bid_usd=0.0024355172380000002&original_bid=0.0024355172380000002&show_type=0&exp=120&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=89,4,20,27,150,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=1746915974&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0.0024355172380000002&hostname=auc-inpage-hz-9-c&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000024355172380000003&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=hash&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult%2Cbdsm%2Cteens%2Canal&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&st=0.03&cpa=32bd80f7-df61-4b2d-b3dd-179d3539e107&prev_step_diff=751 HTTP/1.1
Host: 33200a86d4.c4e0aa36db.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 09 May 2025 22:26:14 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
OPTIONS fp.metricswpsh.com/fp?tag_id=164737
204 No Content 0 B URL OPTIONS fp.metricswpsh.com/fp?tag_id=164737
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78
ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=164737 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://forcedcinema.net/
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 09 May 2025 22:26:13 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://forcedcinema.net
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
POST fp.metricswpsh.com/fp?tag_id=164737
200 OK 60 B URL POST fp.metricswpsh.com/fp?tag_id=164737
IP
ASN #24940 Hetzner Online GmbH
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78
ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hash c299c16d2a75cca379ee02b91ce3946e
e58df1b020a6bf0ac909bb601940a3f923411092
8bf0b1b1c9dafd5f12dc26bba4b403182bd063cf26ac422af22352a06e83819e
POST /fp?tag_id=164737 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1978
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 May 2025 22:26:13 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://forcedcinema.net
Set-Cookie: id=11207738910052126024; Expires=Sat, 09 May 2026 22:26:13 GMT; Secure; SameSite=None
Vary: Origin
GET forcedcinema.net/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.3
200 OK 5.8 kB URL GET forcedcinema.net/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.3
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JavaScript source, ASCII text, with very long lines (5710)
Hash 6dcca58db348f35d6eee39aadb7cd280
0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec
2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4
GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.3 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QweJnyelUGsXtqgcLKskzqGSl2zZaPOMujtDq3KS3bSUj9o0BdYqgK5xb5k7%2Bi%2FtPeo19jxsxqFJdxgUypaoFd%2BoWoIScagwBUYLNTzzibt09ZFPN3ulkGXfPmlhFdLEgrVV"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 14 Mar 2023 18:54:37 GMT
vary: Accept-Encoding
etag: W/"6410c2ed-167b"
expires: Fri, 26 Sep 2025 21:22:21 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 3459830
cf-ray: 93d49df6fd1f0b49-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5959&min_rtt=939&rtt_var=4301&sent=88&recv=60&lost=0&retrans=0&sent_bytes=47469&recv_bytes=5914&delivery_rate=3541840&cwnd=17700&unsent_bytes=0&cid=68751e273dd23cef&ts=320&x=16"
GET forcedcinema.net/wp-content/uploads/2025/04/chisako-kawase-forced-lesbian-bdsm-safe-word-380x214.jpg
200 OK 15 kB URL GET forcedcinema.net/wp-content/uploads/2025/04/chisako-kawase-forced-lesbian-bdsm-safe-word-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash aab6089c9a5333df3d83d42b8e097c6a
48b77d3476863f7b7b3b504495dcc21d2744f886
177b14f446af3bdc976508bdb08c31e3b0646d30edabd66d567e8423c8a187f3
GET /wp-content/uploads/2025/04/chisako-kawase-forced-lesbian-bdsm-safe-word-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 15029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QBPiC6k6Xw%2BZt8ttVxAVNB3zXPFgWu8uHTWa0VDu%2B0hTACtdSXWgjwDhvzdznRXXXua3ft2%2BnjmFSmHv5yBG5o2L4rxImDH5oQmSLLU4sM82low7hk6VFnnEmxSdJ%2B8K96aJ"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 15 Apr 2025 05:35:13 GMT
etag: "67fdf011-3ab5"
expires: Sun, 12 Oct 2025 13:46:49 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 2104763
accept-ranges: bytes
cf-ray: 93d49df98d5e0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3150&min_rtt=939&rtt_var=2543&sent=227&recv=75&lost=0&retrans=0&sent_bytes=197058&recv_bytes=9699&delivery_rate=463854&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=730&x=16"
GET forcedcinema.net/wp-content/uploads/2024/08/loli-tovar-flogged-the-night-of-the-sorcerers-380x214.jpg
200 OK 16 kB URL GET forcedcinema.net/wp-content/uploads/2024/08/loli-tovar-flogged-the-night-of-the-sorcerers-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash 1f7dda6f22a9d248d9682793024ad2ec
19bc05d9cee0926afe4219cc7b227ef9c8dc8648
a2e8f4ff4b599468c7273ae11e602911164535a7d507ec3b71abf179d15a84f7
GET /wp-content/uploads/2024/08/loli-tovar-flogged-the-night-of-the-sorcerers-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 15900
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2F0fqWwi1KnPRN1vkchvR8%2BgM0tkbAfqV8c%2Fj4BD%2Fq62GA9hJAo7a%2BabzRirb1zaXuB5EPpsU%2FqVrfA9SYmSNc3MOytn%2Bx5tPVUupd2gXCIdlm5ffVPQxHsXwv919zYhofHw"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 20 Aug 2024 09:46:23 GMT
etag: "66c465ef-3e1c"
expires: Fri, 26 Sep 2025 21:25:57 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 3459615
accept-ranges: bytes
cf-ray: 93d49df9bd630b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2837&min_rtt=939&rtt_var=1997&sent=280&recv=82&lost=0&retrans=0&sent_bytes=251048&recv_bytes=11459&delivery_rate=12008100&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=758&x=16"
GET www.googletagmanager.com/gtag/js?id=G-Y0NEW6B0B0&cx=c>m=457e5571za200&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116
200 OK 363 kB URL GET www.googletagmanager.com/gtag/js?id=G-Y0NEW6B0B0&cx=c>m=457e5571za200&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File type JavaScript source, ASCII text, with very long lines (6125)
Size 363 kB (362761 bytes)
Hash b63513af7741a0f4ab9d74fdcb29abee
181bbcc03cbeda4736509964cda9e25c292d6102
8460fea7549271d5576dc2c1328d429e40cf064cede30d5bc7c0319fd11c8402
GET /gtag/js?id=G-Y0NEW6B0B0&cx=c>m=457e5571za200&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 May 2025 22:26:12 GMT
expires: Fri, 09 May 2025 22:26:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 123436
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET forcedcinema.net/wp-content/uploads/2024/06/jacqueline-wright-forced-oral-eat-me-2018-380x214.jpg
200 OK 14 kB URL GET forcedcinema.net/wp-content/uploads/2024/06/jacqueline-wright-forced-oral-eat-me-2018-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 380x214, components 3
Hash e79194a610b09c05a8c14de6fd019aeb
bf99bf756cbb4ea3af80a79a0f38343d625a76f2
3ff86d0f11fc90969c201734667baab0476e69aae15f773de4f5ab20b918b511
GET /wp-content/uploads/2024/06/jacqueline-wright-forced-oral-eat-me-2018-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 13803
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aHsrkgx1xLz0m5oGPm8IcnjrPmW5n63B7wGwSauMiI4tAk1FsWJN%2BFUeRQhg7oiD2hFAuFBzOJjb69EzRsA0lLTIuXFlGVIAysJvC1G1hF7AGxuqPMlVJkJstOM6TR%2BEmWW"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 12 Jun 2024 20:07:55 GMT
etag: "666a001b-35eb"
expires: Sat, 11 Oct 2025 22:45:55 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 2158817
accept-ranges: bytes
cf-ray: 93d49df98d5c0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3377&min_rtt=939&rtt_var=2787&sent=170&recv=74&lost=0&retrans=0&sent_bytes=131658&recv_bytes=9653&delivery_rate=4527075&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=727&x=16"
GET dd99a86663.fcb6adad17.com/775c36c249f2c00fbea6be8878081be5/164737?version_name=b&domain=forcedcinema.net
200 OK 1.5 kB URL GET dd99a86663.fcb6adad17.com/775c36c249f2c00fbea6be8878081be5/164737?version_name=b&domain=forcedcinema.net
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectdd99a86663.fcb6adad17.com
FingerprintA3:ED:79:AF:59:1B:25:E9:CC:41:83:E7:1A:C8:A3:CB:71:D2:2D:A6
ValidityTue, 06 May 2025 02:15:11 GMT - Mon, 04 Aug 2025 02:15:10 GMT
Hash 89e82d69c8dadba42bcb760ddd73d643
33e52abc04052e5de4c90dfef479b5999aa6791c
6b3d2ae98c0c6c44e82b321d296593f42fd0393a58089fb4bedb2a0974b54096
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /775c36c249f2c00fbea6be8878081be5/164737?version_name=b&domain=forcedcinema.net HTTP/1.1
Host: dd99a86663.fcb6adad17.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: application/json
content-length: 1530
server: nginx/1.18.0
cache-control: max-age=300
expires: Fri, 09 May 2025 22:31:12 GMT
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL GET forcedcinema.net/wp-includes/css/classic-themes.min.css?ver=1
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:11 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UL%2BO6j%2F7BtAjSzoPp2I4qQVFVKG5armk%2BKb%2BURbZjFgyBaW7f870zaAZg9XH%2FSd5WUAdjHfFI0UTJ1Kuwg%2FDGv8TW8TE8RxH598KkwCcINrqedKj6COUC7Mf0eMNvP9YjBqL"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 13 Mar 2023 08:19:02 GMT
etag: W/"640edc76-d9"
expires: Sun, 19 Oct 2025 23:29:32 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000
age: 1464999
cf-cache-status: HIT
content-encoding: br
cf-ray: 93d49df67cee0b49-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6573&min_rtt=939&rtt_var=5710&sent=44&recv=53&lost=0&retrans=0&sent_bytes=6737&recv_bytes=4388&delivery_rate=2180&cwnd=12000&unsent_bytes=0&cid=68751e273dd23cef&ts=243&x=16"
GET forcedcinema.net/wp-content/uploads/2023/11/she-didnt-run-fast-enough-380x214.jpg
200 OK 14 kB URL GET forcedcinema.net/wp-content/uploads/2023/11/she-didnt-run-fast-enough-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash 357ea7234c4537a14b246ca153f372f8
4e327e93d6b919891606c61621ec120ca8e47d02
8ebffc563b04d1f5afa89839af195818252dc400f5196e153876d1f5a6ae4f4e
GET /wp-content/uploads/2023/11/she-didnt-run-fast-enough-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 14427
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fy2umNylR8NYagQ%2BzrGSWIyBVyZgVqoa82BehYg4qB6CVwRube4o%2B4qoOtddyLZdWYBN5T5uSkQROHI2kh4aJOxLg%2F%2Fb4JF6E4EO2Cg%2BQwXk%2BqIKgiah6EFOdz5VsuQZWyEr"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 02 Nov 2023 03:26:24 GMT
etag: "654316e0-385b"
expires: Tue, 04 Nov 2025 23:49:19 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
accept-ranges: bytes
age: 81412
cf-cache-status: HIT
cf-ray: 93d49df93d560b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3853&min_rtt=939&rtt_var=3533&sent=133&recv=66&lost=0&retrans=0&sent_bytes=96805&recv_bytes=6735&delivery_rate=11975385&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=683&x=16"
GET forcedcinema.net/wp-content/uploads/2022/09/unwilling-sex-with-intruder-380x214.jpg
200 OK 8.4 kB URL GET forcedcinema.net/wp-content/uploads/2022/09/unwilling-sex-with-intruder-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash cd1af4020e21089e1908b2625487d4f2
5f8eb97bda6ebb6de98c2224c437d53caddebbf2
d4d2ecd1256f0cbc7896724221e4e37358caf5b937882d84fdf27d190047c785
GET /wp-content/uploads/2022/09/unwilling-sex-with-intruder-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 8432
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ww5stZZ9N7GAV2%2BIz0AoorIGvVcjUJRFqJkRkWZydqe00RopVys8XQ4PiMnbnKN9be7pWq5Bm%2FmjBVhwmsYOOSXa8W%2B4BEIhTGQrP6FrS5S7qm%2BuAYCL9MkyQsKcTCfvQy8J"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 13:17:33 GMT
etag: "6404966d-20f0"
expires: Fri, 31 Oct 2025 09:23:06 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 478986
accept-ranges: bytes
cf-ray: 93d49df98d5d0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3377&min_rtt=939&rtt_var=2787&sent=190&recv=74&lost=0&retrans=0&sent_bytes=154638&recv_bytes=9653&delivery_rate=4527075&cwnd=65400&unsent_bytes=0&cid=68751e273dd23cef&ts=728&x=16"
GET shakingtacklingunpeeled.com/get/2010857?zoneid=2010857&jp=_cledwoewxuusjmgltemvnq&dr=49&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=6sTBrNSggYB17v0cKm0Gw&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=xoQhnUjaHR0cHM6Ly9mb3JjZWRjaW5lbWEubmV0Lw&afid=395955199586304&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0
200 OK 3.3 kB URL GET shakingtacklingunpeeled.com/get/2010857?zoneid=2010857&jp=_cledwoewxuusjmgltemvnq&dr=49&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=6sTBrNSggYB17v0cKm0Gw&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=xoQhnUjaHR0cHM6Ly9mb3JjZWRjaW5lbWEubmV0Lw&afid=395955199586304&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0
IP
Requested by https://forcedcinema.net/
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint22:34:C8:12:99:33:68:1F:AC:DF:C5:A1:A2:12:9F:26:63:2E:D3:B4
ValidityMon, 03 Mar 2025 23:53:54 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File type ASCII text, with very long lines (3285), with no line terminators
Hash 03aede570a0cfacc8846da2c83863e35
1a02344272cbce95d359c9dcd8bf50dd0a0b384d
042309cf8420ac33e39cb62ae95a7983fa913bf955d2d69a36442d7aca31f49e
GET /get/2010857?zoneid=2010857&jp=_cledwoewxuusjmgltemvnq&dr=49&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=6sTBrNSggYB17v0cKm0Gw&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=xoQhnUjaHR0cHM6Ly9mb3JjZWRjaW5lbWEubmV0Lw&afid=395955199586304&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0 HTTP/1.1
Host: shakingtacklingunpeeled.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 May 2025 22:26:12 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2505091726a34e69bcfc744712ac66605c05; Path=/; Expires=Fri, 12 Jun 2026 22:26:12 GMT; Secure; SameSite=None
CHCK=1; Path=/; Expires=Fri, 12 Jun 2026 22:26:12 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
GET forcedcinema.net/wp-content/uploads/2023/01/asian-guy-raped-by-stepdad-380x214.jpg
200 OK 9.8 kB URL GET forcedcinema.net/wp-content/uploads/2023/01/asian-guy-raped-by-stepdad-380x214.jpg
IP
Requested by https://forcedcinema.net/
Certificate IssuerGoogle Trust Services
Subjectforcedcinema.net
Fingerprint8E:E9:C8:52:49:4D:F7:89:BF:9E:21:53:B8:F6:81:E6:E1:58:B4:8A
ValiditySun, 27 Apr 2025 06:46:21 GMT - Sat, 26 Jul 2025 07:44:25 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 380x214, components 3
Hash aa9667e83f495b24ac13426be6f04d0c
4785578396f667a9724e3438d7e31238a843fcdc
bbd37777477d232b0773c13740b3d126ec998fa377b688731c597ed854b0106a
GET /wp-content/uploads/2023/01/asian-guy-raped-by-stepdad-380x214.jpg HTTP/1.1
Host: forcedcinema.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: image/jpeg
content-length: 9814
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oihdpXz1j%2B1SrjIm9km8Lxb3jYWhLYhUG%2F5tebtR0Wm3M8sJgBQSBFPyHnKDUfvnWonT8uan5GlH0zSNm92XD8Jbc2rShLY%2BTDzeZ1a3FGDJxd0vJ%2B%2BnXRzmaCA0zZMSFqs5"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Mar 2023 13:05:26 GMT
etag: "64049396-2656"
expires: Mon, 29 Sep 2025 05:03:37 GMT
cache-control: max-age=15552000
vary: Accept, Accept-Encoding
cf-cache-status: HIT
age: 3259355
accept-ranges: bytes
cf-ray: 93d49df98d5b0b49-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2837&min_rtt=939&rtt_var=1997&sent=300&recv=82&lost=0&retrans=0&sent_bytes=273118&recv_bytes=11459&delivery_rate=12008100&cwnd=102600&unsent_bytes=0&cid=68751e273dd23cef&ts=761&x=16"
GET dd99a86663.fcb6adad17.com/edd1f98e43a6828b50a46f44cfd1ce57.js
200 OK 124 kB URL GET dd99a86663.fcb6adad17.com/edd1f98e43a6828b50a46f44cfd1ce57.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://forcedcinema.net/
Certificate IssuerLet's Encrypt
Subjectdd99a86663.fcb6adad17.com
FingerprintA3:ED:79:AF:59:1B:25:E9:CC:41:83:E7:1A:C8:A3:CB:71:D2:2D:A6
ValidityTue, 06 May 2025 02:15:11 GMT - Mon, 04 Aug 2025 02:15:10 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 124 kB (124274 bytes)
Hash d4509232ee9a95dc5431a18b2069468d
b0e22da458b657fbe8caa54b0124a64698bdf36b
fb472b8299627873a3a0d4a9c26703190f8346ba23e173b00fef456d1b7ff8a7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /edd1f98e43a6828b50a46f44cfd1ce57.js HTTP/1.1
Host: dd99a86663.fcb6adad17.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forcedcinema.net
DNT: 1
Connection: keep-alive
Referer: https://forcedcinema.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 22:26:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 18 Apr 2025 08:26:59 GMT
etag: W/"68020cd3-1e572"
content-encoding: gzip
expires: Fri, 09 May 2025 22:31:12 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
104.21.74.240
64.233.164.84
23.36.77.113
167.235.163.216
94.242.247.24
0.0.0.0