| doninio.com/?utm_campaign=FNg32Z4Ubn&s2=col2eimau8qc73ajnpi0&aid=100661&s1=91&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0 |  128.199.56.44 | 302 Found | 0 B |
URL User Request GET HTTP/2doninio.com/?utm_campaign=FNg32Z4Ubn&s2=col2eimau8qc73ajnpi0&aid=100661&s1=91&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0 IP128.199.56.44:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectdoninio.com FingerprintD3:45:5F:F2:0D:1F:0D:89:EC:56:7F:C5:93:08:D6:4A:45:6E:A0:45 ValidityTue, 12 Mar 2024 03:30:24 GMT - Mon, 10 Jun 2024 03:30:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?utm_campaign=FNg32Z4Ubn&s2=col2eimau8qc73ajnpi0&aid=100661&s1=91&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0 HTTP/1.1
Host: doninio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://youcantrackthis.com/?c=108589&s1=91&s5=ZEU-1d6cbb59-bfba-4fe3-8641-16852bafbcdd&s2=col2eimau8qc73ajnpi0&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0&a=100661&zci=FNg32Z4Ubn
referrer-policy: no-referrer
server: nginx/1.17.2
set-cookie: sess-e77b0662344488daba9af744856b7988=MTcxNDA3NzEyM3xrcFR3LVd1TEQ3UFVoVVc4b1ZzQ1VTR1JNR2JWR3NWQS0yUXMwVzMtM3oxRXd2UGducTl2Vkh3PXw8_1xCP8Ku7YMT-4nWLNo-FWsnP4ITQhVySyNdCsOClw==; Max-Age=31536000; HttpOnly
content-length: 0
date: Thu, 25 Apr 2024 20:32:03 GMT
X-Firefox-Spdy: h2
|
|
| youcantrackthis.com/?c=108589&s1=91&s5=ZEU-1d6cbb59-bfba-4fe3-8641-16852bafbcdd&s2=col2eimau8qc73ajnpi0&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0&a=100661&zci=FNg32Z4Ubn |  52.70.49.193 | 302 Found | 221 B |
URL User Request GET HTTP/1.1youcantrackthis.com/?c=108589&s1=91&s5=ZEU-1d6cbb59-bfba-4fe3-8641-16852bafbcdd&s2=col2eimau8qc73ajnpi0&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0&a=100661&zci=FNg32Z4Ubn IP52.70.49.193:443
CertificateIssuerGlobalSign nv-sa Subject*.youcantrackthis.com FingerprintCA:62:BB:43:52:C3:DE:F8:A9:95:61:79:8A:E4:D4:43:F9:C7:F3:BE ValidityThu, 28 Dec 2023 01:37:27 GMT - Tue, 28 Jan 2025 01:37:26 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash29d6c371d14a7c42646230765fddd8f6 7bce3811a701a57d30d3672df585b68743148d7e fea11fd1307af3959677d7ac2701a9087b09ea6b8beae6a5cf980619eece72ff
GET /?c=108589&s1=91&s5=ZEU-1d6cbb59-bfba-4fe3-8641-16852bafbcdd&s2=col2eimau8qc73ajnpi0&s3=20127col3k4fufsacebhmbihgcol4ir05vjlceb8e7hc0col5is70md5ce8h1ad3gcol7lgo0udnse04sk8ggcol8nog0udnse04&s4=t80p0colaqcf1rgfce4sdj2s0&a=100661&zci=FNg32Z4Ubn HTTP/1.1
Host: youcantrackthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 221
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Apr 2024 20:32:04 GMT
Location: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=HUDNIRNo0BcCcoWIGA2aO3KMZVFV6R3B/dY3Qt7xP5Fopyrh3itjMw==; domain=.youcantrackthis.com; path=/; HttpOnly
trk=qBFsWoRsqcbmUzHEwuQ3rHKMZVFV6R3B/dY3Qt7xP5Fopyrh3itjMw==; domain=.youcantrackthis.com; expires=Sat, 25-Apr-2026 20:32:04 GMT; path=/; HttpOnly
c104671=HUDNIRNo0Bf8/L6x8Xf81yOjffV+TUOaz3hAsoV/td83NCw7qQiF9A==; domain=.youcantrackthis.com; expires=Sat, 25-May-2024 20:32:04 GMT; path=/; HttpOnly
Connection: close
|
|
| www.bareflirt.com/landers/images/loader/loading.gif | 35.227.204.77 | 200 OK | 2.9 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/loader/loading.gif IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeGIF image data, version 89a, 128 x 15 Hash62b08454087f1ef8b27bd2bcda330537 cac1914632f4c859f6176a84078f1017bad069f8 06f91f1bc360e7c486515b416a564445652e40585f94f2d089239b981d6421f6
GET /landers/images/loader/loading.gif HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:04 GMT
server: nginx/1.14.2
content-type: image/gif
content-length: 2892
last-modified: Thu, 18 Apr 2024 09:22:46 GMT
etag: "6620e666-b4c"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 6249347
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/js/ad-provider.js | 35.227.204.77 | 200 OK | 512 B |
URL GET HTTP/3www.bareflirt.com/landers/js/ad-provider.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeASCII text, with very long lines (979) Hashacd920e8f5657057e8003b79905c5266 cd96548060dbbc3f715cb81c3810d893eedec260 38b34bce7e5ad8268f51a16a6633c17923130b2fac9eeb6ceaca6beb50990681
GET /landers/js/ad-provider.js HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:04 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:22:57 GMT
etag: "6620e671-3fb-gzip"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 2376666
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 512
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/images/general/google-logo.svg | 35.227.204.77 | 200 OK | 688 B |
URL GET HTTP/3www.bareflirt.com/landers/images/general/google-logo.svg IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeSVG Scalable Vector Graphics image Hash686f8efa6e3e28e96d1c08399e8d353d 4524589b0dceefb6ae6389f36634441df69152d5 0cf576a5dab9315daac7ffe29d29ed585e0ff9850e59408d0f25f38dc1da037b
GET /landers/images/general/google-logo.svg HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:04 GMT
server: nginx/1.14.2
content-type: image/svg+xml
content-length: 688
last-modified: Thu, 18 Apr 2024 09:22:44 GMT
etag: "6620e664-2b0"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 13183116
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/webfonts/fa-solid-900.woff2 | 35.227.204.77 | 200 OK | 92 kB |
URL GET HTTP/3www.bareflirt.com/landers/webfonts/fa-solid-900.woff2 IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 91792, version 1.0 Hash6897be186b147b75c308c29eb0782f14 4190cab3384f7769ffb33f277cc20be68eb32c18 a238cffffbfea4c2868fca1b142a3a9690574537a38c857dbe309ec27b033eb3
GET /landers/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/landers/css/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: application/octet-stream
content-length: 91792
last-modified: Thu, 18 Apr 2024 09:22:46 GMT
etag: "6620e666-16690"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 3660348
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/media-registry.js | 35.227.204.77 | 200 OK | 8.6 kB |
URL GET HTTP/3www.bareflirt.com/landers/media-registry.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash996d00ce3568daa889df786e8892e2f3 cee9721d9288c308d1fa237b9c3abe6f35312b69 0860495b30b1debdec029cf077e290876264883af129c82a872aad5abb94cef5
GET /landers/media-registry.js HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 19:45:33 GMT
server: nginx/1.14.2
x-guploader-uploadid: ABPtcPouXENObyweCk6BiIOzd67buh3ZegBHUJDoHGaxlPadENtvKKElqv8vOpqusRj3DIAWtDg
x-goog-generation: 1713440482901169
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 122245
x-goog-hash: crc32c=wF2vjw==, md5=mW0AzjVo2qiJ33huiJLi8w==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
age: 2792
last-modified: Thu, 18 Apr 2024 11:41:22 GMT
etag: "996d00ce3568daa889df786e8892e2f3-gzip"
content-type: application/javascript
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 8593
via: 1.1 google, 1.1 google
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 85265
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.bareflirt.com/landers/js/vendor.js | 35.227.204.77 | 200 OK | 249 kB |
URL GET HTTP/3www.bareflirt.com/landers/js/vendor.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (60065) Size249 kB (249344 bytes) Hashe973dae6c9351b89a432541e0b7bafe7 4347c27a2be0db5bc76c4db9a3c2ed0d65481566 c2cf08ef78dc8bce4e25c606169c4dae275552a431c191e3c6210b32b055aec1
GET /landers/js/vendor.js HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:22:58 GMT
etag: W/"6620e672-1e2ae"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 13153901
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/translations/nb-no2.json | 35.227.204.77 | 200 OK | 218 kB |
URL GET HTTP/3www.bareflirt.com/landers/translations/nb-no2.json IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
Size218 kB (218064 bytes) Hash03b5a86609e5b54a54f2d4aa9c4de6be 2b28f57afd7505c6b4daa22867970c84396dd642 459139ce69de1a12b7372c8ca54b3f68a0d6b3a24c499849f3daa892fdc25183
GET /landers/translations/nb-no2.json HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 19:14:41 GMT
server: nginx/1.14.2
content-length: 218064
x-guploader-uploadid: ABPtcPq3V3KaFA7TRO7UnMoZ1kRYQBlOeRvmC6y9cMUwQ0yklbiooFRfduqBkaWoJDb8UsNepao
x-goog-generation: 1712825875375555
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 218064
x-goog-hash: crc32c=ezkWSA==, md5=A7WoZgnltUpU8tSqnE3mvg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
age: 4644
last-modified: Thu, 11 Apr 2024 08:57:55 GMT
etag: "03b5a86609e5b54a54f2d4aa9c4de6be"
content-type: application/json
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 google, 1.1 google
|
|
| samlesamtykke.com/cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=bareflirt.com&languageCode=nb&languageTerritory=NO&sessionId=3fd2582ff18243409fbeff45f619b3bb |  35.195.163.35 | 200 OK | 14 kB |
URL GET HTTP/2samlesamtykke.com/cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=bareflirt.com&languageCode=nb&languageTerritory=NO&sessionId=3fd2582ff18243409fbeff45f619b3bb IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
File typeJavaScript source, ASCII text Hash4d5976c94029ef775676776ddbbc2aac 52532aa5a9fd3296f39f1f8d3e2b1fd2dcff078c 6b4781cc6bc18855c3d3830aba6cd90229152a8b399bff73e8da93761ad81067
GET /cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=bareflirt.com&languageCode=nb&languageTerritory=NO&sessionId=3fd2582ff18243409fbeff45f619b3bb HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:05 GMT
content-type: application/javascript
content-length: 14217
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.bareflirt.com/landers/css/theme/pornhub.css | 35.227.204.77 | 200 OK | 2.7 kB |
URL GET HTTP/3www.bareflirt.com/landers/css/theme/pornhub.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typegzip compressed data, from Unix Hash568172dc4279dd63870ee8d87b8b306d 35e4229eed2694c8a0a71890b25547e04350d286 8f91a2b9371e090728ed6b42c5d2ff1c024bb7f1962a41e0c2559c63707958ab
GET /landers/css/theme/pornhub.css HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: bareflirt.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 12924844
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/favicon/apple-touch-icon-180x180.png | 35.227.204.77 | 404 Not Found | 279 B |
URL GET HTTP/3www.bareflirt.com/favicon/apple-touch-icon-180x180.png IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeHTML document, ASCII text Hash269bd369969705241a74417e30472d20 ec5d3d3f8953b4a65c6dd100f6c89fbc7b29b02d 704517c687444a8a012e9ec63d7d30a1856f68745dcb32d707feb1b713043403
GET /favicon/apple-touch-icon-180x180.png HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 20:32:05 GMT
server: Apache/2.4.58 (Ubuntu)
content-length: 279
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.bareflirt.com/landers/images/landing002/milf/default/set01_01.jpg?geo=no | 35.227.204.77 | 200 OK | 49 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/landing002/milf/default/set01_01.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 253x595, components 3 Hash8cc7e78445a98ba4aa84c9926e78f3fa adeaea251c2b253bd384b99a07eee3f28986461a 906936ed4ce6cb2fbf024f65e50a69b58e12422120cc7d9ecf0d6259da974240
GET /landers/images/landing002/milf/default/set01_01.jpg?geo=no HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 49122
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-bfe2"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 5576295
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/images/landing002/milf/default/set02_01.jpg?geo=no | 35.227.204.77 | 200 OK | 28 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/landing002/milf/default/set02_01.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 253x595, components 3 Hash4d0d7b5e95228020b4d9fc1cdc4e7436 9a03553437e4de679ee1f24979ae442cc1fe4120 5cd4e7b91f31009cba3ed052e6fadde1e5011756119ace23ccb526adf164fb76
GET /landers/images/landing002/milf/default/set02_01.jpg?geo=no HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 28487
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-6f47"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 6309861
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/images/landing002/milf/default/set03_01.jpg?geo=no | 35.227.204.77 | 200 OK | 49 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/landing002/milf/default/set03_01.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 253x595, components 3 Hashc63456313f1077e384afa6bd707f7190 e7aec67e1f429489186a31407bd5ca26f2143ffd 86943b8924beb2866da2217e56461d97e246817361528d16dfa96af03d3c4a98
GET /landers/images/landing002/milf/default/set03_01.jpg?geo=no HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 49116
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-bfdc"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 13271773
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/images/landing002/milf/default/set01_02.jpg?geo=no | 35.227.204.77 | 200 OK | 44 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/landing002/milf/default/set01_02.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 253x595, components 3 Hash099caef25a03872374a3270cea66cce1 23a0ba6a42f493a7a8784070cd3af123d742b68c 7802ee99bec40d78a20fb6d0855a8d848cac2e52ff5368cb5309db77463e3f66
GET /landers/images/landing002/milf/default/set01_02.jpg?geo=no HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 43583
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-aa3f"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 13153912
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/images/landing002/milf/default/set02_02.jpg?geo=no | 35.227.204.77 | 200 OK | 28 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/landing002/milf/default/set02_02.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 253x595, components 3 Hashf1bbe5e18761b0196b3dbc95895ae688 2f6008a8477323e2c31bd54d6bbfadd4459c3cd5 9f26f33a35299754588c3af5dbab72b1c3d5570a67d564191e80eccc859d18f6
GET /landers/images/landing002/milf/default/set02_02.jpg?geo=no HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 28198
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-6e26"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 13207032
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/images/landing002/milf/default/set03_02.jpg?geo=no | 35.227.204.77 | 200 OK | 45 kB |
URL GET HTTP/3www.bareflirt.com/landers/images/landing002/milf/default/set03_02.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 253x595, components 3 Hash6d6db8796734d69682ad2df768020742 e359870054ccad74b2f5ccc782a29058815bfe67 a8450befaa42cf4bb52df86fcbed761c8fdfbf4836ec0d0d41dc7aa5c7a70638
GET /landers/images/landing002/milf/default/set03_02.jpg?geo=no HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 44997
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-afc5"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 5576299
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 15:50:55 GMT
expires: Wed, 23 Apr 2025 15:50:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 189671
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 85266
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB | 142.250.74.40 | 200 OK | 72 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB IP142.250.74.40:443
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (3484) Hashe59433f38abc2078e58898cb244dbc91 e0cd9ac09f1013a6fd3b4e3ba797f5c1190fcce6 7b44700fe4924fe2da9d7ec5a55573fbb15adb2f9921ab22ae4e99602d47906b
GET /gtm.js?id=GTM-KBRH6NB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 20:32:06 GMT
expires: Thu, 25 Apr 2024 20:32:06 GMT
cache-control: private, max-age=900
last-modified: Thu, 25 Apr 2024 19:36:05 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72151
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:43:03 GMT
expires: Fri, 25 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 64143
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.164 | 200 OK | 206 kB |
URL GET HTTP/3www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205913 bytes) Hashe4eb924eec164dfe5fb43e5d8e6b2a2f 582bad0eac6440aa49632ca1e24d7a52a89d7d92 428ed37cf336160c986f3c470a345bd9790e95d119cfb794767637df59eb3a59
GET /recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Thu, 25 Apr 2024 20:32:06 GMT
date: Thu, 25 Apr 2024 20:32:06 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 11219
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:07 GMT
expires: Thu, 02 May 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 63479
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (17602) Hasha881e4c268e13ad20405ae80fca4c36b dee477906e2c92b4c7747029a2409069b9b676ad 63d2e26aa68933bac804050c4e0f0293f1f97e927ad4a79ac9e6a0e8b310fb77
GET /js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 05:05:57 GMT
expires: Thu, 24 Apr 2025 05:05:57 GMT
cache-control: public, max-age=31536000
age: 141969
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 95 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hashf55dabea7ac4341d037935e82dbdbde9 8745e2aa3d9e366813abaea7ffd6d1979ccf7ec6 7570dde5e2e78a8bd24804ad34321d24109ba25efd0b41fa5a0329142208161a
GET /gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 20:32:06 GMT
expires: Thu, 25 Apr 2024 20:32:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95026
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| samlesamtykke.com/cc.css | 35.195.163.35 | 200 OK | 3.9 kB |
IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
File typeassembler source, ASCII text Hashddb6776d9e0b9844c9f57355d7492805 da918eb4fefa9d625e5858496c2c4a20ad893619 9ec88cf72960048a40791a943e5dee85f910c00e9a3732339888b075de11bc34
GET /cc.css HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:06 GMT
content-type: text/css
content-length: 3892
last-modified: Thu, 15 Oct 2020 08:07:25 GMT
etag: "6073-5b1b123761e40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/collector | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/collector IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.bareflirt.com/
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:06 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/collector | 35.195.163.35 | 200 OK | 4.7 kB |
URL POST HTTP/2api.samlesamtykke.com/consent/collector IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hash13bbcc190c7fe76c7489b08aad14656a dd5575dcc8445b489de95101d875e78fd08352d7 5847944aba0d237b9d758ec732dccbcba519a27441fc11418c0f610f7b4298a4
POST /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 169
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:06 GMT
content-type: application/vnd.api+json
content-length: 4661
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.bareflirt.com/
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:06 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 371 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashaad76f926b6c219e918916e6f25e4129 4823643373db875486f8ac895ea532106e6798d4 0b9d369937e417796e17001b773fd61884a8993ea967ad4841a472e83f83292d
POST /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 224
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:07 GMT
content-type: application/vnd.api+json
content-length: 371
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.bareflirt.com/
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:07 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 354 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashf3306f051731bcce1d98a030b8a2d9cf ada4a5bb07ee1872a579a651298774329b036f43 cbbae4d9daeed7c435cb09233298534b86c9c159ff6960ace74e223e460a75c5
POST /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 225
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:07 GMT
content-type: application/vnd.api+json
content-length: 354
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/confirmExplicit | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/confirmExplicit IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/confirmExplicit HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.bareflirt.com/
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:07 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/confirmExplicit | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/confirmExplicit IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /consent/confirmExplicit HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 522
Origin: https://www.bareflirt.com
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Thu, 25 Apr 2024 20:32:07 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.bareflirt.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s | 142.250.74.164 | 200 OK | 1.0 kB |
URL GET HTTP/2www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s IP142.250.74.164:443
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File typeJavaScript source, ASCII text, with very long lines (1033), with no line terminators Hashbd927622e1c40d420b32be0dc022e336 35f4a129b447f6d914420e59b3bbf5a7512f549f afb5abaa561bb823a0c386906899eddac8ce791e2bcb9056f57b0364d341a829
GET /recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 25 Apr 2024 20:32:04 GMT
date: Thu, 25 Apr 2024 20:32:04 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn | 35.227.204.77 | 200 OK | 24 kB |
URL User Request GET HTTP/2www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeHTML document, ASCII text, with very long lines (2091) Hashc8849ccd23e656081db925f3744621e9 0b9e61f395d895d8fd4941c1f4b0ebd8cfa6da37 0e86c08cdd36045842dbbb63a378cc37991a5db2129ad6323eb5c28cdc1585f6
GET /landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 20:32:04 GMT
server: nginx/1.14.2
content-type: text/html;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: bareflirt.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 12741203
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 | 142.250.74.164 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 IP142.250.74.164:443
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (37664) Hash15a9707b44c6d641a7dc0b8b2be52845 ef8bf4b9b9bb76555169063df5972d76a65e7608 0834ec74fae8b36e8cc6bdba00ca3c676e7f51967ca1ef414853bb7014ba5195
GET /recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuYmFyZWZsaXJ0LmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=xz2uy62x7io0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 25 Apr 2024 20:32:05 GMT
content-security-policy: script-src 'nonce-BrHlEvs2hMNdEmaGVzDWMQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.bareflirt.com/landers/js/landing002.js | 35.227.204.77 | 200 OK | 66 kB |
URL GET HTTP/3www.bareflirt.com/landers/js/landing002.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/js/landing002.js HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:22:57 GMT
etag: W/"6620e671-1005e"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 9057151
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/landers/css/fontawesome-all.min.css | 35.227.204.77 | 200 OK | 52 kB |
URL GET HTTP/3www.bareflirt.com/landers/css/fontawesome-all.min.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeASCII text, with very long lines (51425) Hasha954e78371616c5b3b924fc9e83aa9b4 14912f17e86aa3d4d12c94b91646ddaac2ae0862 5986f251d278ae72106ef1d7302798a2e14f69a4d35b80087b9e61905a15e75e
GET /landers/css/fontawesome-all.min.css HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:04 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:22:44 GMT
etag: W/"6620e664-c970"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 3660343
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.bareflirt.com/favicon/favicon.ico | 35.227.204.77 | 404 Not Found | 279 B |
URL GET HTTP/3www.bareflirt.com/favicon/favicon.ico IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
File typeHTML document, ASCII text, with no line terminators Hashfcab2509a768c230695568997a0aef52 48dcac662292dbe622ab2a6035cc0e1055625eea a1fb5906f339546756fabd56394a4eaf547308a92401b7081d4e15dbddbb5a2d
GET /favicon/favicon.ico HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 20:32:05 GMT
server: Apache/2.4.58 (Ubuntu)
content-length: 279
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.bareflirt.com/landers/css/landing002.css | 35.227.204.77 | 200 OK | 27 kB |
URL GET HTTP/3www.bareflirt.com/landers/css/landing002.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectbareflirt.com Fingerprint7B:D7:68:8A:5E:94:07:D3:B4:56:F0:61:04:FB:7D:AB:75:F8:77:3A ValidityTue, 09 Apr 2024 03:25:32 GMT - Mon, 08 Jul 2024 04:20:06 GMT
Hashd860e021e1fa1425377dfcb43d8e0710 513da3c298f610523694349e5676d804bf2fa833 a76ab94832ea2166f8289b1894fd48a082d22930d26a6217a7f24a414ec6eb66
GET /landers/css/landing002.css HTTP/1.1
Host: www.bareflirt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 20:32:05 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: bareflirt.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 13207024
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.google.com/recaptcha/enterprise.js | 142.250.74.164 | 200 OK | 940 B |
URL GET HTTP/2www.google.com/recaptcha/enterprise.js IP142.250.74.164:443
Requested byhttps://www.bareflirt.com/landing2?cat=milf&pi=100661&pt1=418664433&pe=91&zci=FNg32Z4Ubn CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File typeJavaScript source, ASCII text, with very long lines (940), with no line terminators Hash796b5497d3c16bce195908f13b10fc72 381a26a96cea8cd5a03d2f70599a20b38ddf9d07 2f7e1ee849a9d78c4a8716630dc03be8afd7239c3575a836618487b10aa4dcd6
GET /recaptcha/enterprise.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bareflirt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 25 Apr 2024 20:32:04 GMT
date: Thu, 25 Apr 2024 20:32:04 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|