GET /404/nfp.html HTTP/1.1
Host: m.hd9427.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 01 May 2024 03:00:30 GMT
content-type: text/html
last-modified: Fri, 02 Feb 2024 07:22:28 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3GHejmvTU0v7ORVyM0uz7ijhsdS9RNuxW%2B87vlzAO0zTJmb4uT5tc68JV3CkDpXUgNSmFenBgM3dFg0tGf8gZeTWlYx697NOn2wJyDdDZTK9aWQ6F651My5lQtxVga8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87cc85874feb56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7363860714798186543&website=25426-06aaba3z&placement=25426&eyeg=fa20f9c8c9bec4b163c41d641595897b&eyer=0.02236030765422714&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=go.kelpboat.com HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 01 May 2024 03:00:31 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7363860714798186543&website=25426-06aaba3z&placement=25426&eyeg=3&eyer=0.02236030765422714&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=go.kelpboat.com

GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7363860714798186543&website=25426-06aaba3z&placement=25426&eyeg=3&eyer=0.02236030765422714&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=go.kelpboat.com HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 01 May 2024 03:00:31 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://admoustache.aftrad-visit.com/track/smartlink?smartlink_id=1&publisher_id=441&network_id=5&click_id=3300029d6d61903a939667e76c8193c8163b90501-202405-flb*5768231-bead7*M7363860714798186543*sl_5768231-bead7*6971b453f63bef1427d4fe60ffd6c2c6ef1d4f9c*25426-06aaba3z*25426

GET /favicon.ico HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Date: Wed, 01 May 2024 03:00:31 GMT
Connection: keep-alive

GET /track/smartlink?smartlink_id=1&publisher_id=441&network_id=5&click_id=3300029d6d61903a939667e76c8193c8163b90501-202405-flb*5768231-bead7*M7363860714798186543*sl_5768231-bead7*6971b453f63bef1427d4fe60ffd6c2c6ef1d4f9c*25426-06aaba3z*25426 HTTP/1.1
Host: admoustache.aftrad-visit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 01 May 2024 03:00:31 GMT
content-type: text/html; charset=utf-8
content-length: 173
location: https://mety.panparan.com/rc/a91581ead4?affclick=201MAsf3N9CC1TBodktBYrsrfgvrJbsYPN5VSpPMSP273vvk3QKDPJ8XHgQcZZgicVsDFa&pubid=1B7fmUHKE&pubid=
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZrU0xddbIkfCdAg3Uy7WIwL%2BylBgZt8x0Qc6EzdyILycEQjnX6QLx%2BOrBOQDsDRT%2BLu67OQVQka7BAr3GxF3u4Je1Z4NwhqNh0cFr5Xan8Qpssvbru4qfzwC8O6oQIgjil4O5HcfTYGjUqDfms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87cc85917c37b509-OSL
X-Firefox-Spdy: h2

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: mety.panparan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Wed, 01 May 2024 03:00:32 GMT
content-length: 0
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xCmFmwhjifL%2BT9f6rtlppQ2SPdtTlbE95lB7hlwTYTR40baLz0L1o19GesUysYWCQYrNgQG5mTY%2BKFLUixAuQe0Eyj3OC2%2BNb9V2quRunVfnHW0K1Cxfelq7YVa4fQdWM%2BDH8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87cc8594ad1356cc-OSL
alt-svc: h3=":443"; ma=86400

GET /53e82c6a-2a38-49d9-a8c3-e28d4aa0c6c5?var1=&var2=SUB_PUBID&p1=pubb3bfbe332f954bb2905d9529e8475df1 HTTP/1.1
Host: wriblood-foutinets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mety.panparan.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Wed, 01 May 2024 03:00:32 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://skj.mobsuitem.com/?utm_medium=48aaec1f5e48652f5763aee0c79140d35fdbf6bc&utm_campaign=FOr_H_R_A_K&1=f4a7c17b-01e0-4332-985c-cc9a764fab03_&cid=wek93r4rop30ujv03vcgkgcu
pragma: no-cache
set-cookie: 53e82c6a-2a38-49d9-a8c3-e28d4aa0c6c5-v4=BSBUboClptwXR_qtBYy1DIhARyeRkF56kW9xfceGef0; Max-Age=86400; Expires=Thu, 02-May-2024 03:00:32 GMT; Domain=wriblood-foutinets.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=EBWBw34nmS4jeP3oWjlbGrek60avQqt3mpvEaycb7at4J9YWaiTv88seG8AjdkBxODN7XX6neurXREOeZycn%2BUNsja9XOyBGYkRu4g8IxRqyOXGt41Z%2BW8lqpiWZw%2BDUay1aNn6qwgiGpSbIQdY5xw%3D%3D; Max-Age=31536000; Expires=Thu, 01-May-2025 03:00:32 GMT; Domain=wriblood-foutinets.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: skj.mobsuitem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skj.mobsuitem.com/proc.php?777293930f0c2bb280251d28b72dc806b7493758
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
server: nginx
date: Wed, 01 May 2024 03:00:33 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Fri, 11 Aug 2023 10:37:02 GMT
etag: "64d60f4e-47e"
expires: Thu, 02 May 2024 03:00:33 GMT
cache-control: max-age=86400
strict-transport-security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443"; ma=604800; persist=1
accept-ranges: bytes

GET /2c8047c4-066e-4834-a1b5-360c8c138f20?partner_id=20961&click_cost=0&subid=M7363860723388121113 HTTP/1.1
Host: cartining-specute.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skj.mobsuitem.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Wed, 01 May 2024 03:00:33 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://sugarchicks.com/?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k
pragma: no-cache
set-cookie: 2c8047c4-066e-4834-a1b5-360c8c138f20-v4=1vyR4DhWkmiOpisjPq0y5SFgiZqZf33xoeODduRM2OA; Max-Age=86400; Expires=Thu, 02-May-2024 03:00:33 GMT; Domain=cartining-specute.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=khhtSz%2BvTn%2FnQnNcLpVw%2F8sIZgMnVyRhqZ%2FUSd%2F8fVlq0IXDs%2BptNQWOjJM9wTWjfOjde7OeJwqdvQkbgf9gWX2rWpfMgEZc%2BuOP5Zvcowkm08Wo6an7Zk%2BhanxYZpJ5uVsh3eRAPAhCWm0locPnFA%3D%3D; Max-Age=31536000; Expires=Thu, 01-May-2025 03:00:33 GMT; Domain=cartining-specute.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/
Origin: https://sugarchicks.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1538f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 May 2024 03:00:33 GMT
age: 19731830
x-served-by: cache-lga13622-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 33088
x-timer: S1714532434.871774,VS0,VE0
vary: Accept-Encoding
content-length: 30288
X-Firefox-Spdy: h2

GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sugarchicks.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14940
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:59:41 GMT
expires: Sat, 26 Apr 2025 05:59:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:46:07 GMT
content-type: font/woff2
age: 421253
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /p.js?a=418543&cr=28277&lid=9983&mh=TWpVZHNHS3B0Z1hWVXJ5S0hsek1QYnZnTkxkVlZDUm1tSWFvLTMwMjA1&mmid=1822&p=0&rf=u&rn=zc4YmJmUys4WmdmVBM8&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k&t=notrack HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 01 May 2024 03:00:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
cf-cache-status: BYPASS
set-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxhAW0AAAAFc3ViXzFtAAAAJDgxNmRlOTI3LWYyZWQtNDM5OS04YmM4LWU5MzdkMjViNDIxNm0AAAAFc3ViXzJtAAAAGHcxcWg3bGI4YmViY3JqdjAzNDVucWQ4a20AAAAHdHJhY2tlcm0AAAAHbm90cmFja20AAAADdW5xbQAAAAxqT2hBRFdQYWxYY1Y.kNrLSzcSFmBO86iRZM5Memfs0kmBbwhL2tU8SPJ6D6w; path=/; expires=Thu, 01 May 2025 03:00:34 GMT; max-age=31536000
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9D7liYeiBshF%2F44%2BsIhuKI6CloYwNZ1tekHMPhy3enyCFH10wimy51GwjCQKflxz%2BEO2t0tOkUW%2F7iHEpLFlHPc7put2tCTYVMN2i4%2BR%2FrlcPAyaX6ZujRK90NydsADcLA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87cc859f2a4256a2-OSL
alt-svc: h3=":443"; ma=86400

GET /info-ws/ HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://sugarchicks.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ifdUu48z9QaUXIbet6X/2w==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Wed, 01 May 2024 03:00:34 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DUfgN4crf1XFvpiVSpzWbdf/Syw=
Sec-WebSocket-Extensions: permessage-deflate
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TxVVrlPbabXlOz2WDAVelNZTr6ml7pBByOIk4LHcZB25ayZ5e72xErJ%2BXUEuCnJknI2gT8Bq%2FK8cqpQIlDG09QRbo05whOCnOm0D%2BcPhRTNfNKIK0N04s1%2FaYoUgxtxjAqM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87cc85a11ae25685-OSL
alt-svc: h3=":443"; ma=86400

GET /css?family=Montserrat&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 May 2024 03:00:33 GMT
date: Wed, 01 May 2024 03:00:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /redirect.css HTTP/1.1
Host: cdn.addlnk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mety.panparan.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 01 May 2024 03:00:32 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1680
etag: W/"3ae56d32551602b41f9046c14d1cfde2"
last-modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: AoXod/ZXfujOPTXmqpybjdVBRwMiv2S1rg1qh7wC2lIS1l8TIMLw+Zkkbs2sTT8o1804g0X2/28gYQf6HzcYpw==
x-amz-request-id: AG08DBJ4MZ3YCNZ8
cf-cache-status: HIT
age: 1071
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fcNd5FcGN9WTa7qP2P5uTaaUJojeuXN9E1LXemppNl8%2Fqd8ugl47RpP4IJpdUrLe7iV3Ibt5wGwMg20wE48%2FXlyBXwUWe4awCOsor3eIA5OP5ENchgzpDdvDXNGGLiJZGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87cc85941ceb56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skj.mobsuitem.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 01 May 2024 03:00:33 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
set-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI; path=/; expires=Thu, 01 May 2025 03:00:33 GMT; max-age=31536000
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OPVXgwdVdk%2BmVdp2JAWkGkr48Dk5FuEFzTC19DkVGVLld9W04rq6iMEDTFj%2FpYl9pmDcGCsXLVB4isf7KFXumqaNT66raoyYT7graaA0ZhH5oHtKsQBm0ztuXutT9BBX0Kg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87cc859cdb9e56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /lstatic/uuidv4.min.js HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 01 May 2024 03:00:34 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 20 Feb 2024 13:29:03 GMT
etag: W/"65d4a91f-451"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2B8yvND50li8T6oATgOMqGSHifJZKrVzAHK0Jm9jXPo03O6%2BnBjNnC2cGvjPOQIh7ntVyyUomrosF3nnwTfB%2BBkIX9y8PiEep8FntrPTbEY35xFcd43PZbtkJX8EsLgLTzM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87cc859f2a3e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /lstatic/33bd3653a08cdc5e7932062a71cb5ca5/images/1.jpg HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 01 May 2024 03:00:34 GMT
content-type: image/jpeg
content-length: 535332
last-modified: Tue, 20 Feb 2024 13:29:16 GMT
etag: "65d4a92c-82b24"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BDxlrb3%2Fdl1ERGC07x%2FdG1RSzENOYBilHxC3%2FMRXZkp3jDtXS9Ds%2Bf%2B%2BzyucRFYhpcHONKrXMvRgaWt3m3uoWptCsD70w0UMsyPbdXB8iTyzfuqb%2BaXAjvK%2BAzOGeRTeWtk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87cc85a06ab256a2-OSL
alt-svc: h3=":443"; ma=86400

GET /info-ws/ HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://sugarchicks.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ifdUu48z9QaUXIbet6X/2w==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Wed, 01 May 2024 03:00:34 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DUfgN4crf1XFvpiVSpzWbdf/Syw=
Sec-WebSocket-Extensions: permessage-deflate
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TxVVrlPbabXlOz2WDAVelNZTr6ml7pBByOIk4LHcZB25ayZ5e72xErJ%2BXUEuCnJknI2gT8Bq%2FK8cqpQIlDG09QRbo05whOCnOm0D%2BcPhRTNfNKIK0N04s1%2FaYoUgxtxjAqM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87cc85a11ae25685-OSL
alt-svc: h3=":443"; ma=86400

GET /favicon.ico HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxhAW0AAAAFc3ViXzFtAAAAJDgxNmRlOTI3LWYyZWQtNDM5OS04YmM4LWU5MzdkMjViNDIxNm0AAAAFc3ViXzJtAAAAGHcxcWg3bGI4YmViY3JqdjAzNDVucWQ4a20AAAAHdHJhY2tlcm0AAAAHbm90cmFja20AAAADdW5xbQAAAAxqT2hBRFdQYWxYY1Y.kNrLSzcSFmBO86iRZM5Memfs0kmBbwhL2tU8SPJ6D6w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 01 May 2024 03:00:34 GMT
content-type: image/x-icon
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Wed, 01 May 2024 00:00:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GZXFK7QFPoOFP4ouXrQrD9%2BD5k3twMF%2Ba3AhnK8sIFJ5xxUVDyWKLd6imOMvM4rnOaw1rAimug54j5xNc7n33Q5QUdm%2BPxgtGcg1BCIP3vsxXhFGRXV6Bcxe5Noq%2FzYK%2FhQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87cc85a1db3e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /lstatic/info.min.js HTTP/1.1
Host: sugarchicks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sugarchicks.com/?utm_source=gvC7WyUoREtV&s1=816de927-f2ed-4399-8bc8-e937d25b4216&s2=w1qh7lb8bebcrjv0345nqd8k
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApLclhnV3J5QnFSbQAAAANoaWRtAAAAJE1qVWRzR0twdGdYVlVyeUtIbHpNUGJ2Z05MZFZWQ1JtbUlhb20AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAACQ4MTZkZTkyNy1mMmVkLTQzOTktOGJjOC1lOTM3ZDI1YjQyMTZtAAAABXN1Yl8ybQAAABh3MXFoN2xiOGJlYmNyanYwMzQ1bnFkOGttAAAAB3RyYWNrZXJtAAAAB25vdHJhY2ttAAAAA3VucW0AAAAMak9oQURXUGFsWGNW.Z-84FZVwIquOEcSL-PWIy8booRRAMyVoNwNcVON1WaI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 01 May 2024 03:00:33 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 20 Feb 2024 13:29:01 GMT
etag: W/"65d4a91d-280e9"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Frz4AGqe2TIxVG22jRY%2FhO7iLxRRgzJPKdJfcg3vSNzAFNtjcWo7J2XbkJKzStavGzNwxDQkmJkr%2BRwf45ptRg9T5GULqcbyLSV26lOIHBzM%2B8HgfVUuSpj1MFcjQx97bbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87cc859f2a3d56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400