Report - organicbonus.com/bz3hV.0-PR3wpQvgbhm_V/J/Z/DM0K0ZMOjccTzXN/DkYcxb?sId={subid}&tb=https://a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID&h=www.bigtitslust.com&subid=fucd.com&kw=Amateur,%20Big%20Cock,%20Ebony,%20Sex%20Toys,%20Masturbation,%20big%20cock,%20adult%20toys,%20big%20dick%20tight%20pussy,%20step%20fantasy,%20step%20sis,%20caught,%20throatpie,%20deep%20throat,%20doggystyle,%20thick,%20bbc,%20one%20on%20one,%20step%20bro,%20wtf,%20step,%20looking,%20me,%20masturbate,%20spy,%20drone,%20Gina%20WAP

Report Overview

Submitted URL
organicbonus.com/bz3hV.0-PR3wpQvgbhm_V/J/Z/DM0K0ZMOjccTzXN/DkYcxb?sId={subid}&tb=https://a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID&h=www.bigtitslust.com&subid=fucd.com&kw=Amateur,%20Big%20Cock,%20Ebony,%20Sex%20Toys,%20Masturbation,%20big%20cock,%20adult%20toys,%20big%20dick%20tight%20pussy,%20step%20fantasy,%20step%20sis,%20caught,%20throatpie,%20deep%20throat,%20doggystyle,%20thick,%20bbc,%20one%20on%20one,%20step%20bro,%20wtf,%20step,%20looking,%20me,%20masturbate,%20spy,%20drone,%20Gina%20WAP
IP
188.72.219.35
ASN
#35415 Webzilla B.V.
Submitted
2024-05-09 18:57:21
Access
public
Website Title
HQ Fuck. Free Sex Tube Videos.
Final URL
hqfuck.com/top.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hqfuck.com	unknown	unknown	No data	No data	5.0 kB	383 kB	172.67.212.104
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-09	941 B	3.1 kB	142.250.74.74
organicbonus.com	unknown	2024-03-29	2021-10-28	2024-04-18	987 B	665 B	188.72.219.35
a0f2l3m.com	unknown	2021-03-29	2021-04-01	2024-03-16	527 B	2.0 kB	141.95.203.63
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-09	425 B	32 kB	142.250.74.138
www.bigtitslust.com	unknown	2020-12-01	2020-12-01	2024-04-17	710 B	1.3 kB	104.21.23.47
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-09	1.6 kB	162 kB	216.58.207.227
tt.visitgate.com	408221	2019-08-15	2019-10-26	2024-04-30	12 kB	418 kB	93.184.223.22
p.1ts21.top	unknown	unknown	No data	No data	623 B	16 kB	104.21.82.183

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	organicbonus.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-05-20
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-20 13:23:00 Times Seen275401 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	hqfuck.com/app.min.js?v11	32 kB	2024-05-07	2024-05-20
Pretty URL hqfuck.com/app.min.js?v11 IP 172.67.212.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 00:06:42 Last Seen2024-05-20 01:03:51 Times Seen7 Hash 4246660c36b80b0602c0d5d103119625 79c47f5bfd2d33472db61ae39188cb58870dadca be936b0fc88638e38fdfcb2c4f17c8e668a849ac57ae529ff5a827c3d9009218 Loading...

	hqfuck.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-20
Pretty URL hqfuck.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 172.67.212.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-20 13:21:11 Times Seen57803 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

HTTP Transactions (48)

URL IP Response Size

organicbonus.com/bz3hV.0-PR3wpQvgbhm_V/J/Z/DM0K0ZMOjccTzXN/DkYcxb?sId={subid}&tb=https://a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID&h=www.bigtitslust.com&subid=fucd.com&kw=Amateur,%20Big%20Cock,%20Ebony,%20Sex%20Toys,%20Masturbation,%20big%20cock,%20adult%20toys,%20big%20dick%20tight%20pussy,%20step%20fantasy,%20step%20sis,%20caught,%20throatpie,%20deep%20throat,%20doggystyle,%20thick,%20bbc,%20one%20on%20one,%20step%20bro,%20wtf,%20step,%20looking,%20me,%20masturbate,%20spy,%20drone,%20Gina%20WAP

188.72.219.35

0 B

URL
organicbonus.com/bz3hV.0-PR3wpQvgbhm_V/J/Z/DM0K0ZMOjccTzXN/DkYcxb?sId={subid}&tb=https://a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID&h=www.bigtitslust.com&subid=fucd.com&kw=Amateur,%20Big%20Cock,%20Ebony,%20Sex%20Toys,%20Masturbation,%20big%20cock,%20adult%20toys,%20big%20dick%20tight%20pussy,%20step%20fantasy,%20step%20sis,%20caught,%20throatpie,%20deep%20throat,%20doggystyle,%20thick,%20bbc,%20one%20on%20one,%20step%20bro,%20wtf,%20step,%20looking,%20me,%20masturbate,%20spy,%20drone,%20Gina%20WAP
IP
188.72.219.35:0
ASN
#35415 Webzilla B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bz3hV.0-PR3wpQvgbhm_V/J/Z/DM0K0ZMOjccTzXN/DkYcxb?sId={subid}&tb=https://a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID&h=www.bigtitslust.com&subid=fucd.com&kw=Amateur,%20Big%20Cock,%20Ebony,%20Sex%20Toys,%20Masturbation,%20big%20cock,%20adult%20toys,%20big%20dick%20tight%20pussy,%20step%20fantasy,%20step%20sis,%20caught,%20throatpie,%20deep%20throat,%20doggystyle,%20thick,%20bbc,%20one%20on%20one,%20step%20bro,%20wtf,%20step,%20looking,%20me,%20masturbate,%20spy,%20drone,%20Gina%20WAP HTTP/1.1
Host: organicbonus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Thu, 09 May 2024 18:56:54 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
location: https://a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID
referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID

141.95.203.63

1.8 kB

URL
a0f2l3m.com/r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID
IP
141.95.203.63:0
ASN
#16276 OVH SAS

File type
HTML document, ASCII text, with very long lines (991), with CRLF line terminators
Size
1.8 kB (1792 bytes)
Hash
21eb575ea3099b95862cf091e0833486
be5468ab0777f02a40d7376a5e6a756108517a5b
35aac24053ebac82e5c6ac3c4cdd5284352ed5065811d4008812059317eb547a

HTTP Headers

GET /r/url.php?param=1422.56959367.0.584f80.BT-Popunder--IMAG-SBID HTTP/1.1
Host: a0f2l3m.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Thu, 09 May 2024 18:56:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.33

hqfuck.com/t.png

172.67.212.104

200 OK

930 B

URL GET HTTP/3
hqfuck.com/t.png
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Size
930 B (930 bytes)
Hash
6e43a52466acb6307642d866e85254e7
807c94f4c7359be041307cf8cb79782e897202e5
460619ae60d09dbce8f96579899142ba54fefdf829c9746d36745f9f8863d3e6

HTTP Headers

GET /t.png HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:55 GMT
content-type: image/png
content-length: 930
last-modified: Wed, 23 Jun 2021 09:39:14 GMT
etag: "60d30142-3a2"
expires: Thu, 09 May 2024 20:14:09 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 81766
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0yVGCmSb049p7k8hZVz5rSys0mFB7I6ei2OFYrDLG%2FPt4xXjj8ujc2fYx4jQUj2WId%2FQN7FpThUjyLjRqdiPCrGBtqk5xNsxTrazaAAuIWODY3ObCCH21H4BLnL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98bfbc856c4-OSL
alt-svc: h3=":443"; ma=86400

hqfuck.com/app.min.js?v11

172.67.212.104

200 OK

10 kB

URL GET HTTP/3
hqfuck.com/app.min.js?v11
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
gzip compressed data, from Unix
Size
10 kB (10253 bytes)
Hash
bee95777d1636a193db07768dce671eb
7b9dd294f825b9df9915bb5376ea0843d9517b48
20a7d6265ba38f18bfc6cf06d91a503a9db2394567585209c6586c9f0ef2bbda

HTTP Headers

GET /app.min.js?v11 HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:55 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 14:28:50 GMT
etag: W/"65d608a2-7daf"
expires: Fri, 10 May 2024 14:31:37 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 15918
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XyUdQFt2kLtM44POPJjVvBZq00OgkuyLLV9oZl1NHim4U2YCatMTwEhBs2Orf9u5FU7gsel6DuLBcdcXSdYHrtRFetszn72CuOAy5mjaeklIg5HJ3yqEms1qEoOS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98bfbc556c4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

142.250.74.138

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://hqfuck.com/top.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 15:45:31 GMT
expires: Fri, 09 May 2025 15:45:31 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 11484
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hqfuck.com/style.css?v7

172.67.212.104

200 OK

4.6 kB

URL GET HTTP/3
hqfuck.com/style.css?v7
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
gzip compressed data, from Unix
Size
4.6 kB (4564 bytes)
Hash
4b8ae57a1e3a3cc10323548c985a164b
ea9ef59d8c099c7623e4b286ddb3148af7df4daf
cffe5e019c655cf6e71d047127577da469645221443f7c0b2f3667f99823ce35

HTTP Headers

GET /style.css?v7 HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:55 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 15:20:58 GMT
etag: W/"66155cda-4513"
expires: Thu, 09 May 2024 20:13:44 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 81791
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZ11KILYtC8CLRyrinGV2R7fK7E%2FrAscoD7bbf6i0rZARLs4wZBDARTamm6xg4fn8A9O6IUegjIL3SO%2BSqhXOsI9ocKC5saoyT5IVJezZlT%2FvLIROlhj%2FJ0NUztJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98bebba56c4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext&display=swap

142.250.74.74

200 OK

1.3 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://hqfuck.com/top.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
1.3 kB (1276 bytes)
Hash
c527ace75b05e3879f5bd7a44e726590
dbb4e37d8ea173829d2421cba9c2f5e75e880960
4b48710ae617f2980b2803be468b751d77da59a9be4ffc7b18aa7c578883f2e3

HTTP Headers

GET /css?family=Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 May 2024 18:56:55 GMT
date: Thu, 09 May 2024 18:56:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hqfuck.com/assets/logo.png

172.67.212.104

200 OK

9.5 kB

URL GET HTTP/3
hqfuck.com/assets/logo.png
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
PNG image data, 590 x 200, 8-bit/color RGBA, non-interlaced
Size
9.5 kB (9534 bytes)
Hash
8925fcb370e21f185705339ac9405c68
89efce27ce726dd5fde3b2880ccd6be85baf5792
203f8c098b83fc206cef1c444c198698148da6048a0dadb2f0c2fd78c83d0b9e

HTTP Headers

GET /assets/logo.png HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/style.css?v7
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:55 GMT
content-type: image/png
content-length: 9534
last-modified: Wed, 23 Jun 2021 09:39:14 GMT
etag: "60d30142-253e"
expires: Thu, 09 May 2024 20:14:09 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 81766
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jm5NXI18FE3LCPiw%2BYTDxt1bMcGqddKbt3iyXtAYJN8thU3Dt6x6k4QaVHE8N698WWoVyLwOinFfg%2FymbsEqx4%2FqwaHtCxRSZ8gKfOgFnPfHJfxZXipk3wq7mEYE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98ddf2756c4-OSL
alt-svc: h3=":443"; ma=86400

www.bigtitslust.com/lap70/click-in.php?url=https%3A%2F%2Fp.1ts21.top%2Fpu.php%3FpartnersCode%3Dc3b7b6c3%26subid1%3D527754719%26ctgs%3D%7Bkeywords%7D%26bu%3Dhttps%3A%2F%2Fs.pemsrv.com%2Fsplash.php%3Fidzone%3D5194486%26type%3D8

104.21.23.47

637 B

URL
www.bigtitslust.com/lap70/click-in.php?url=https%3A%2F%2Fp.1ts21.top%2Fpu.php%3FpartnersCode%3Dc3b7b6c3%26subid1%3D527754719%26ctgs%3D%7Bkeywords%7D%26bu%3Dhttps%3A%2F%2Fs.pemsrv.com%2Fsplash.php%3Fidzone%3D5194486%26type%3D8
IP
104.21.23.47:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
637 B (637 bytes)
Hash
8943a296900b87f40793dd46676e9022
b35d3f567c646354149c98229f0f7373ad8dbed1
041b68934c19b139429218323974ed88e48344f14fcb70e6633b4a73bca7ff12

HTTP Headers

GET /lap70/click-in.php?url=https%3A%2F%2Fp.1ts21.top%2Fpu.php%3FpartnersCode%3Dc3b7b6c3%26subid1%3D527754719%26ctgs%3D%7Bkeywords%7D%26bu%3Dhttps%3A%2F%2Fs.pemsrv.com%2Fsplash.php%3Fidzone%3D5194486%26type%3D8 HTTP/1.1
Host: www.bigtitslust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a0f2l3m.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 18:56:54 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
x-robots-tag: noindex, nofollow
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S28CrLy%2FfZXRznBhu3qWvyrj5zCymVWFRFTQx9imF0B%2BjI462CYQlSUrCQR0ocobY6SQ1%2FYadnEoCQrrOTAeiutVmR%2BcKr0XawCYLeo3gIk2KGZ5n8trOzXZLJbE0%2BKbbJvLxdxy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8813e9874b321bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://hqfuck.com/top.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hqfuck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 466099
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://hqfuck.com/top.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Size
16 kB (15920 bytes)
Hash
3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hqfuck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:03:54 GMT
expires: Fri, 09 May 2025 02:03:54 GMT
cache-control: public, max-age=31536000
age: 60782
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2

216.58.207.227

200 OK

128 kB

URL GET HTTP/2
fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://hqfuck.com/top.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Size
128 kB (128352 bytes)
Hash
53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1

HTTP Headers

GET /s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hqfuck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 03:43:48 GMT
expires: Sat, 03 May 2025 03:43:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 19:04:47 GMT
content-type: font/woff2
age: 573188
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hqfuck.com/assets/apple-touch-icon.png

172.67.212.104

200 OK

12 kB

URL GET HTTP/3
hqfuck.com/assets/apple-touch-icon.png
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
12 kB (11529 bytes)
Hash
f31fa3c01107fc20b293fa50241a51be
56933ed5403af2cf84fdc42a83ffa3e3a9a9fb59
63a76991f1e4d8b12abbf1931bffe91daeb9032c05cfc16ddc3ade9bec124b87

HTTP Headers

GET /assets/apple-touch-icon.png HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:56 GMT
content-type: image/png
content-length: 11529
last-modified: Wed, 23 Jun 2021 09:39:13 GMT
etag: "60d30141-2d09"
expires: Fri, 10 May 2024 18:51:22 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 334
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJpT6H4t%2BOlj39H9dLe%2FCztoNJtnfmd6YcIGchGnER6vO%2BUNeFUeJBdBpfjT6yJ3V1udFwssD9lC6yZNgZ4JKFTiGo5WIUYW%2BAY3JdQSos5VNU653RP6iACnQdPZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98f296a56c4-OSL
alt-svc: h3=":443"; ma=86400

hqfuck.com/assets/favicon-16x16.png

172.67.212.104

200 OK

946 B

URL GET HTTP/3
hqfuck.com/assets/favicon-16x16.png
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
946 B (946 bytes)
Hash
59d4d9f1b9b08efef1ecf6a91aa6dabe
dec1d02e79f9f3c383b3c5784ba8fa77ba1466eb
8c1d07450025eeb8a4da97a78957be21be8a8069fc01c247da096184234cd32b

HTTP Headers

GET /assets/favicon-16x16.png HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:56 GMT
content-type: image/png
content-length: 946
last-modified: Wed, 23 Jun 2021 09:39:13 GMT
etag: "60d30141-3b2"
expires: Thu, 09 May 2024 19:03:54 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 85982
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=643di1gy4jtAWQH3xQC3bChcHrRr6vtA44zisQlABtSuzo9kb8omZVV5TakFUJRcMEq%2BRBlFOFk1lla6AQ%2Brc9b%2FTlJJhiS0fnAwI6Or3EgWsw1XoV2nL67JXFAd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98f296d56c4-OSL
alt-svc: h3=":443"; ma=86400

tt.visitgate.com/320x180/989/289/95.jpg

93.184.223.22

200 OK

17 kB

URL GET HTTP/2
tt.visitgate.com/320x180/989/289/95.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x180, components 3
Size
17 kB (17071 bytes)
Hash
3c25ef573b0e77e2502b2da50fa8e2a3
97197bda81fdba205865afc9fc1d59f995d4c11a
a9c5ad25bf368e13d9ef2ccafd9f1fb2a8924a54120f7c5fc74da41f82f6996a

HTTP Headers

GET /320x180/989/289/95.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 954081
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "6606101d-42af"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Fri, 29 Mar 2024 00:49:33 GMT
server: ECAcc (ska/F751)
x-cache: HIT
content-length: 17071
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/703/213/92.jpg

93.184.223.22

200 OK

12 kB

URL GET HTTP/2
tt.visitgate.com/320x180/703/213/92.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
12 kB (12041 bytes)
Hash
2f79383078a4e064c1a6d8db188cf21f
5f2fe67b34c6375923ddc183d11ec209b5e653a9
cad43916c2f2064441c82a9031aac062e5a8e54b7eabf71e7b781a6d9862366d

HTTP Headers

GET /320x180/703/213/92.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1335344
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624b0e20-2f09"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 04 Apr 2022 15:26:24 GMT
server: ECAcc (ska/F74F)
x-cache: HIT
content-length: 12041
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/742/003/20.jpg

93.184.223.22

200 OK

13 kB

URL GET HTTP/2
tt.visitgate.com/320x180/742/003/20.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
13 kB (12942 bytes)
Hash
bb289217788ecc11e5ee1d81c03b0e5b
9237a019c018227a59ba0d5df6e38e7ddb980d7e
e4520915b0d20bb49a04c81c61fb8cdaf92739e6ddc401e0a52d24b2406376ab

HTTP Headers

GET /320x180/742/003/20.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1235145
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624cc09f-328e"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 05 Apr 2022 22:20:15 GMT
server: ECAcc (ska/F6F0)
x-cache: HIT
content-length: 12942
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/993/335/50.jpg

93.184.223.22

200 OK

11 kB

URL GET HTTP/2
tt.visitgate.com/320x180/993/335/50.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
11 kB (11271 bytes)
Hash
58bacf130e5ebe5912f2713cb028078e
ad531037fe8ab1b030b28a10d469bfb3fb101165
ca17251fe7cdced9fac8e7cc9eb8c1d8b9badf64d5b97263983f49aeccfdf1f9

HTTP Headers

GET /320x180/993/335/50.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 210797
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "66342b02-2c07"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Fri, 03 May 2024 00:08:34 GMT
server: ECAcc (ska/F6AD)
x-cache: HIT
content-length: 11271
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/992/959/25.jpg

93.184.223.22

200 OK

8.9 kB

URL GET HTTP/2
tt.visitgate.com/320x180/992/959/25.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
8.9 kB (8920 bytes)
Hash
ae4a7ef815d947e0b65af4a407bddd45
853a46a6138ae0667c4ef6cfd5a86f869c1dcd94
40a8852857238daf6038a29dbd9299f5e1f9a003cafad4e23d31ab3c9e3d1538

HTTP Headers

GET /320x180/992/959/25.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 804599
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "66302ed6-22d8"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 29 Apr 2024 23:35:50 GMT
server: ECAcc (ska/F6AD)
x-cache: HIT
content-length: 8920
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/814/290/97.jpg

93.184.223.22

200 OK

14 kB

URL GET HTTP/2
tt.visitgate.com/320x180/814/290/97.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
14 kB (14183 bytes)
Hash
10eafa5061db2688602c76b49767ab2d
2e720ef933bc8346f1e03eb14a8fbb0ba1ef3f3b
dbca4f633f55fa152afbe1f336d5ebda9404f181c1c79a4e13d207edf456e110

HTTP Headers

GET /320x180/814/290/97.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1327122
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "6349f457-3767"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Fri, 14 Oct 2022 23:44:23 GMT
server: ECAcc (ska/F73A)
x-cache: HIT
content-length: 14183
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/834/574/56.jpg

93.184.223.22

200 OK

16 kB

URL GET HTTP/2
tt.visitgate.com/320x180/834/574/56.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
16 kB (16330 bytes)
Hash
4c1886cc5d13c3bdb47eb7ca750158e8
e09db004be159f6313af29573d915b9ce3ddd7e5
c129ad34580ef6bed29d19a1416fec111c3836c742b253828a62cd7b3bbcf242

HTTP Headers

GET /320x180/834/574/56.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1371576
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "6369a564-3fca"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 08 Nov 2022 00:40:04 GMT
server: ECAcc (ska/F78F)
x-cache: HIT
content-length: 16330
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/932/150/23.jpg

93.184.223.22

200 OK

17 kB

URL GET HTTP/2
tt.visitgate.com/320x180/932/150/23.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
17 kB (16871 bytes)
Hash
a07f58ef1429479f49bc61eddb20ab7c
47d3d8fcc24323b16a95d1d28104df5385507d55
3589b9b78d2004d0bde6f290836c6104b4e5d47cde934e91067bb278029b7f9d

HTTP Headers

GET /320x180/932/150/23.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1349430
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "64c84328-41e7"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 31 Jul 2023 23:26:32 GMT
server: ECAcc (ska/F687)
x-cache: HIT
content-length: 16871
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/905/635/59.jpg

93.184.223.22

200 OK

12 kB

URL GET HTTP/2
tt.visitgate.com/320x180/905/635/59.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 29312x29293, segment length 16, baseline, precision 8, 320x180, components 3
Size
12 kB (11909 bytes)
Hash
8d8ea6555238d38056e19682a8b46ed7
7a5a4e95238647d0dffed2a68a19d154c44c4bb4
f8258f04011bce9b63b69223ff30a7ce2732ae3e61540898e2743c82368cb4a1

HTTP Headers

GET /320x180/905/635/59.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 2184194
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "63eb63fc-2e85"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 14 Feb 2023 10:35:40 GMT
server: ECAcc (ska/F732)
x-cache: HIT
content-length: 11909
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/955/786/91.jpg

93.184.223.22

200 OK

15 kB

URL GET HTTP/2
tt.visitgate.com/320x180/955/786/91.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
15 kB (14937 bytes)
Hash
34e8b4a35d7f2ae47eafac0a7de4b43c
dc3f84a142b7d5adc88143b0f2a98c70bac31601
50555fec44f6e9d8b5f97bc4ce7f456d50f518bca4d388dc568e3a2edd4f699e

HTTP Headers

GET /320x180/955/786/91.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1351313
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "65935d69-3a59"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 02 Jan 2024 00:48:41 GMT
server: ECAcc (ska/F6C8)
x-cache: HIT
content-length: 14937
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/904/200/04.jpg

93.184.223.22

200 OK

16 kB

URL GET HTTP/2
tt.visitgate.com/320x180/904/200/04.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 320x180, components 3
Size
16 kB (15942 bytes)
Hash
889321733343a7c343a3e4d28a1aeff8
3d0181e36971cd8c23fc7edec7a8c2ada09f7d88
42ad1df61ebd124edd75bf37ee3270999d31cf1ab33be04b61c930688f94d6a7

HTTP Headers

GET /320x180/904/200/04.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1330151
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "63ebff07-3e46"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 14 Feb 2023 21:37:11 GMT
server: ECAcc (ska/F69C)
x-cache: HIT
content-length: 15942
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/936/848/14.jpg

93.184.223.22

200 OK

14 kB

URL GET HTTP/2
tt.visitgate.com/320x180/936/848/14.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
14 kB (13715 bytes)
Hash
9f5c136918b44f137d7f61d2fa83b2ec
5e324ab2f4e62077d6756958f3a4c787c1e88696
31c9ba301b163866d6c5a06acfe90a74baf6e6af90823cdc2769ba5373b8bad3

HTTP Headers

GET /320x180/936/848/14.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1337353
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "64f66f35-3593"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 04 Sep 2023 23:58:45 GMT
server: ECAcc (ska/F778)
x-cache: HIT
content-length: 13715
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/915/549/60.jpg

93.184.223.22

200 OK

13 kB

URL GET HTTP/2
tt.visitgate.com/320x180/915/549/60.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
13 kB (13020 bytes)
Hash
adc7a9a37451dea4f17517073bc5a641
0ac06c48b1509cdce407fcf0137b22a938ebfd13
5d586e617f33133d6ef4a6d61d897f10bac02f3116badc0ab4d7f47553e7bdc5

HTTP Headers

GET /320x180/915/549/60.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1309170
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "642f5524-32dc"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Thu, 06 Apr 2023 23:26:28 GMT
server: ECAcc (ska/F6D6)
x-cache: HIT
content-length: 13020
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/912/457/18.jpg

93.184.223.22

200 OK

26 kB

URL GET HTTP/2
tt.visitgate.com/320x180/912/457/18.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
26 kB (25641 bytes)
Hash
1cd329276a7923d6a33770041c023e90
224679d80b78fbf4eb7d84f79a16d212de858334
7b18aae5a2e8011d3589fe0a6ea2473163cbca85f9ea220394324addc8fe0041

HTTP Headers

GET /320x180/912/457/18.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1318488
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "641cf245-6429"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Fri, 24 Mar 2023 00:43:49 GMT
server: ECAcc (ska/F6F5)
x-cache: HIT
content-length: 25641
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/713/196/12.jpg

93.184.223.22

200 OK

12 kB

URL GET HTTP/2
tt.visitgate.com/320x180/713/196/12.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
12 kB (11984 bytes)
Hash
ec2fd74f55b67ba851bb4e4d073892d0
a9a305042fe3e88d8d3922098fad01a478b7a214
84ed49b532caff5143ed3ca176eca0d8c42c664dc61bde6894c9323a6cba3dd0

HTTP Headers

GET /320x180/713/196/12.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1346485
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624b50e0-2ed0"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 04 Apr 2022 20:11:12 GMT
server: ECAcc (ska/F6BC)
x-cache: HIT
content-length: 11984
X-Firefox-Spdy: h2

p.1ts21.top/pu.php?partnersCode=c3b7b6c3&subid1=527754719&ctgs={keywords}&bu=https://s.pemsrv.com/splash.php?idzone=5194486&type=8

104.21.82.183

302 Found

14 kB

URL User Request GET HTTP/2
p.1ts21.top/pu.php?partnersCode=c3b7b6c3&subid1=527754719&ctgs={keywords}&bu=https://s.pemsrv.com/splash.php?idzone=5194486&type=8
IP
104.21.82.183:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject1ts21.top
Fingerprint57:BB:58:6F:90:D0:D5:B4:71:E4:18:02:B1:37:61:97:39:6D:9E:D6
ValidityWed, 24 Apr 2024 02:29:40 GMT - Tue, 23 Jul 2024 02:29:39 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
14 kB (14203 bytes)
Hash
20148e8d77a8ad7a8cae5bc0575adcdc
d24e733b46e03e6b0e5f75bf350ca7cc034500a1
98e8fbaa462e07100dc6f7eed1aaa487184429a384d6d67bf2946f80ba658cf8

HTTP Headers

GET /pu.php?partnersCode=c3b7b6c3&subid1=527754719&ctgs={keywords}&bu=https://s.pemsrv.com/splash.php?idzone=5194486&type=8 HTTP/1.1
Host: p.1ts21.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bigtitslust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 09 May 2024 18:56:55 GMT
content-type: text/html;charset=UTF-8
location: https://hqfuck.com/fd.php?fd=ts&site=bigtitslust.com&spot=ts&to=https://hqfuck.com/top.html
pragma: no-cache
cache-control: no-cache, must-revalidate
expires: Sun, 1 Jan 2012 00:00:01 GMT
set-cookie: u=NENHd0xai45qbmyngbW8ipfNqNmo4r3Ey8bU2d%2Fq6vP5%2FQIGPBohHioqNDdDQkdOWGNfb2s%3D; expires=Fri, 09-May-2025 18:56:55 GMT; Max-Age=31536000; path=/; domain=.1ts21.top
c=NENATExWWWVkaXB6hYKRjZGZnaWpsbW9wcnN1dnh5e3x%2Bf0FCREVHSEpLTU5QUVNUVldZWlxdX6BiY2VmaE%3D; expires=Fri, 09-May-2025 18:56:55 GMT; Max-Age=31536000; path=/; domain=.1ts21.top
puq=a%3A1%3A%7Bi%3A91493%3Bs%3A12%3A%221715281015%3A1%22%3B%7D; expires=Fri, 10-May-2024 18:56:55 GMT; Max-Age=86400; path=/; domain=p.1ts21.top
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3cDCjbZTy%2BXne6s6VXT6zDYNzWwOBxg%2BIeWcyA9TPsCqr%2FPngfmnXfNTXZRnY%2Frl48A4u42uDuXF4Z%2BdGg0X2ECVeKEOuAjvBWO%2BdEBmRmxCwKze%2BTq2GcvKRQDzcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8813e989daa6568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/919/149/92.jpg

93.184.223.22

200 OK

17 kB

URL GET HTTP/2
tt.visitgate.com/320x180/919/149/92.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
17 kB (16865 bytes)
Hash
c1577cc851e9a2a59bbf8b7062e6cde8
3b26bf7abc66f1cd960e6685593424f5e4750651
68d2c03c270c6b31ad55c5cb9fd1ff1dff0103cd7922ba956fbff04c19376428

HTTP Headers

GET /320x180/919/149/92.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1354096
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "6451a05c-41e1"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 02 May 2023 23:44:28 GMT
server: ECAcc (ska/F747)
x-cache: HIT
content-length: 16865
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/993/671/46.jpg

93.184.223.22

200 OK

19 kB

URL GET HTTP/2
tt.visitgate.com/320x180/993/671/46.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
19 kB (18667 bytes)
Hash
ad09a1bfdbe7f1ceb7c3ab9d4c827475
5302e5b525b917bfb3bd2238c214f4ad40faa9e7
fba3396d8aadf0a94d5b2a07cf808c2a9bb2b53652551ca087d40cfac6f50dec

HTTP Headers

GET /320x180/993/671/46.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 260118
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "66381f67-48eb"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 06 May 2024 00:08:07 GMT
server: ECAcc (ska/F759)
x-cache: HIT
content-length: 18667
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/743/559/59.jpg

93.184.223.22

200 OK

18 kB

URL GET HTTP/2
tt.visitgate.com/320x180/743/559/59.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
18 kB (17868 bytes)
Hash
815970fa38651931b7b546d3a7cffc56
d1117472b04d46d10a02afda95a80db7196d35fe
51ca83d8d2962112c7c0945d5fed53cba195335f7166beadde792e8c90de1371

HTTP Headers

GET /320x180/743/559/59.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1314466
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624cdc0d-45cc"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Wed, 06 Apr 2022 00:17:17 GMT
server: ECAcc (ska/F799)
x-cache: HIT
content-length: 17868
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/951/262/02.jpg

93.184.223.22

200 OK

16 kB

URL GET HTTP/2
tt.visitgate.com/320x180/951/262/02.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
16 kB (16222 bytes)
Hash
fe289922412b74c671c0776911134a37
88254d196ea45e3551c6d8a6c64748868b1b034a
487fdfc0ceca9f565a9d2070a0c4da72e530d73dbd2ec0af652507892942c1a5

HTTP Headers

GET /320x180/951/262/02.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1356190
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "656bcae7-3f5e"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Sun, 03 Dec 2023 00:25:11 GMT
server: ECAcc (ska/F690)
x-cache: HIT
content-length: 16222
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/814/235/40.jpg

93.184.223.22

200 OK

18 kB

URL GET HTTP/2
tt.visitgate.com/320x180/814/235/40.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
18 kB (17560 bytes)
Hash
41db023006b73428728874804afc2c24
b94a27dc111339804491057838e4a4ffcebf3cba
63337db282b2943fead7e57fb19c9969949c29a29fb333c5bafcba9ec452bb8e

HTTP Headers

GET /320x180/814/235/40.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 1333686
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "6348a177-4498"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Thu, 13 Oct 2022 23:38:31 GMT
server: ECAcc (ska/F7BF)
x-cache: HIT
content-length: 17560
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/722/156/92.jpg

93.184.223.22

200 OK

15 kB

URL GET HTTP/2
tt.visitgate.com/320x180/722/156/92.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
15 kB (14744 bytes)
Hash
c72b6684022eda979f46a8a20856e560
a279825f9592598760c6f92a4b326e76d9758798
b4410993557218f6ed2e9eb2fb58a2119c161d8014a84e8701a75b4aff42d66d

HTTP Headers

GET /320x180/722/156/92.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 1259607
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624bb678-3998"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Tue, 05 Apr 2022 03:24:40 GMT
server: ECAcc (ska/F6E5)
x-cache: HIT
content-length: 14744
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/989/425/44.jpg

93.184.223.22

200 OK

14 kB

URL GET HTTP/2
tt.visitgate.com/320x180/989/425/44.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
14 kB (13853 bytes)
Hash
f1cbdc40a47eaf5e66d39724b815f661
f42c3d7023a6200e2047b99cfe72d2d620333f7b
64a6cc06ef2e7c60a1d5effb830cabbe2c404e41c428517f97586c205f7e819c

HTTP Headers

GET /320x180/989/425/44.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 895417
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "66076538-361d"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Sat, 30 Mar 2024 01:04:56 GMT
server: ECAcc (ska/F75B)
x-cache: HIT
content-length: 13853
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/782/844/69.jpg

93.184.223.22

200 OK

15 kB

URL GET HTTP/2
tt.visitgate.com/320x180/782/844/69.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
15 kB (14589 bytes)
Hash
10b126e83abd731ca64202aac0ddf2ae
9d098aaaf76c1423db6ccbc7412c174a31f64f9d
150ed0e7d048f1940af489972c6cd8f1eeb5dff234a4826694005d62a8425c6b

HTTP Headers

GET /320x180/782/844/69.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 2228355
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624f4172-38fd"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Thu, 07 Apr 2022 19:54:26 GMT
server: ECAcc (ska/F6D5)
x-cache: HIT
content-length: 14589
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/950/935/92.jpg

93.184.223.22

200 OK

11 kB

URL GET HTTP/2
tt.visitgate.com/320x180/950/935/92.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
11 kB (11145 bytes)
Hash
cb8e2eeddc86e48af7bba84171a6135a
4a487c4123ae9d97999ab701f83af1a1526d0c5c
979a2ed4b457415ba41c09b3e9e5399919b99be8a9ac9870196bf2dee0c8b433

HTTP Headers

GET /320x180/950/935/92.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 1336601
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "65691cbf-2b89"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Thu, 30 Nov 2023 23:37:35 GMT
server: ECAcc (ska/F69F)
x-cache: HIT
content-length: 11145
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/992/019/40.jpg

93.184.223.22

200 OK

12 kB

URL GET HTTP/2
tt.visitgate.com/320x180/992/019/40.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
12 kB (11867 bytes)
Hash
cc2feedc76b04cc69fb41ae9467ed6e4
70e3d8e8c309d752f53df7e4bbcdae083feda2b8
31aad613fda25172bb587033b57135dea22d7fcde7f93bec5b36ba216fe87983

HTTP Headers

GET /320x180/992/019/40.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 1499983
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "6625ab2b-2e5b"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 22 Apr 2024 00:11:23 GMT
server: ECAcc (ska/F6A5)
x-cache: HIT
content-length: 11867
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/792/511/43.jpg

93.184.223.22

200 OK

8.9 kB

URL GET HTTP/2
tt.visitgate.com/320x180/792/511/43.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x180, components 3
Size
8.9 kB (8859 bytes)
Hash
79c81ca20f4ba46ebb273b7235163c76
79cd4d147b9da86ff045bb2d1b6b6f163a59ca33
14c41631ac70b64e732250a84e394cf31c3895eeb2e07434f6e6aaa5240fd69f

HTTP Headers

GET /320x180/792/511/43.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 732470
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "625002ba-229b"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Fri, 08 Apr 2022 09:39:06 GMT
server: ECAcc (ska/F77A)
x-cache: HIT
content-length: 8859
X-Firefox-Spdy: h2

hqfuck.com/i.php

172.67.212.104

200 OK

15 kB

URL POST HTTP/3
hqfuck.com/i.php
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
gzip compressed data, from Unix
Size
15 kB (14985 bytes)
Hash
ebb70c8234406dc03c9959cb21c7b736
794473efac721f8df9f1ec34c2f446bc4fe6f7a1
1ba5cebf3456d19e6609d3ef6d67018a231ca33e6b8d65c43f75a804356212c3

HTTP Headers

POST /i.php HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 40
Origin: https://hqfuck.com
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:56 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
set-cookie: acjref=feeder-ts-ts-bigtitslust.com%3Abigtitslust.com%7C1715281016; expires=Thu, 16-May-2024 18:56:56 GMT; Max-Age=604800; path=/
acjt=1715281016; expires=Sat, 08-Jun-2024 18:56:56 GMT; Max-Age=2592000; path=/
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Pf6cj7595jHN1nDtCiDUFEz9qnBLiw43jfaR5J8RVnNN3wF%2FKKcHlpHfpQzw3qJYNTpjEHXklhePvjnUtq6aSGwX4hIkUwUti0BE0uC4YjbUiwqbmuVJjcl%2FgvT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8813e9905b3a56c4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/icon?family=Material+Icons

142.250.74.74

200 OK

565 B

URL GET HTTP/2
fonts.googleapis.com/icon?family=Material+Icons
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://hqfuck.com/top.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (588), with no line terminators
Size
565 B (565 bytes)
Hash
959a533a3dc02649e0cc3f8f67d942af
34db49ff64aed8b51beaba5b9928ad504a4df335
24864ed3ee6fab66640980d4c24640e579e5583764a8ee8c4f09decf27977247

HTTP Headers

GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 May 2024 18:56:55 GMT
date: Thu, 09 May 2024 18:56:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hqfuck.com/top.html

172.67.212.104

200 OK

161 kB

URL User Request GET HTTP/2
hqfuck.com/top.html
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
HTML document, ASCII text, with very long lines (34452)
Size
161 kB (161118 bytes)
Hash
530c3ea23b386e5169ed984b4a441255
b0c08abf839fdecd76b439b79d5019cd24c9c7af
27d9b2f7c133c1426bd87680fc3418c7dab2b81ed4955e153252a76cfa980575

HTTP Headers

GET /top.html HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bigtitslust.com/
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 18:56:55 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bwck9AkoDtW7ccMw1%2BCcJe1Xw0Rea%2Bw%2F0eCC%2FrCTdwD%2FzuKhuEfTjnycsSR0B2QOmSytf951ywNfFFbLLWBn9Zs%2FwCkwiEWr1b4FJmIEuC7PcSCRJ01BbQkGwLx1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8813e98ade177128-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

hqfuck.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

172.67.212.104

200 OK

1.2 kB

URL GET HTTP/3
hqfuck.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hqfuck.com/top.html
Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type
HTML document, ASCII text, with very long lines (1271), with no line terminators
Size
1.2 kB (1239 bytes)
Hash
40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqfuck.com/top.html
DNT: 1
Connection: keep-alive
Cookie: br=ts-ts-bigtitslust.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 09 May 2024 18:56:55 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:31:53 GMT
etag: W/"663b4689-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OPTwrYwieU6RatMqNNICdVCimbmBXAhFcYIFh5dLeShHiB%2BFCv0fgk4pA%2BoIArzKjMFj%2FR%2Ftn96LnuyDM7Fd3wvKCaqxJnpcVSUk9vb%2Fdfhqa5618wkgk5Vzad7p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98bfbca56c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 11 May 2024 18:56:55 GMT
cache-control: max-age=172800, public
content-encoding: gzip

tt.visitgate.com/320x180/993/345/96.jpg

93.184.223.22

200 OK

15 kB

URL GET HTTP/2
tt.visitgate.com/320x180/993/345/96.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
15 kB (14960 bytes)
Hash
1d6fb7a0ae6fe591292b9e99d4290339
1bfb5db2e737ae6539b3adfbc5342448746fbbfc
3d24ffc8bc22fbb5124d1f1223085bc9927f7f3d924d459f1796b631daa27e38

HTTP Headers

GET /320x180/993/345/96.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 505664
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "663426a9-3a70"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Thu, 02 May 2024 23:50:01 GMT
server: ECAcc (ska/F758)
x-cache: HIT
content-length: 14960
X-Firefox-Spdy: h2

tt.visitgate.com/320x180/712/973/27.jpg

93.184.223.22

200 OK

14 kB

URL GET HTTP/2
tt.visitgate.com/320x180/712/973/27.jpg
IP
93.184.223.22:443
ASN
#15133 EDGECAST

Requested by
https://hqfuck.com/top.html
Certificate
IssuerSectigo Limited
Subject*.visitgate.com
FingerprintCC:DB:34:8A:8E:40:A3:85:91:A8:13:E2:CF:88:DC:5E:48:51:B4:F9
ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Size
14 kB (14203 bytes)
Hash
20148e8d77a8ad7a8cae5bc0575adcdc
d24e733b46e03e6b0e5f75bf350ca7cc034500a1
98e8fbaa462e07100dc6f7eed1aaa487184429a384d6d67bf2946f80ba658cf8

HTTP Headers

GET /320x180/712/973/27.jpg HTTP/1.1
Host: tt.visitgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqfuck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 1088739
cache-control: max-age=2592000
content-type: image/jpeg
date: Thu, 09 May 2024 18:56:56 GMT
etag: "624b4e9c-377b"
expires: Sat, 08 Jun 2024 18:56:56 GMT
last-modified: Mon, 04 Apr 2022 20:01:32 GMT
server: ECAcc (ska/F6C9)
x-cache: HIT
content-length: 14203
X-Firefox-Spdy: h2

hqfuck.com/fd.php?fd=ts&site=bigtitslust.com&spot=ts&to=https://hqfuck.com/top.html

172.67.212.104

302 Found

161 kB

URL User Request GET HTTP/2
hqfuck.com/fd.php?fd=ts&site=bigtitslust.com&spot=ts&to=https://hqfuck.com/top.html
IP
172.67.212.104:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjecthqfuck.com
Fingerprint4C:3F:A1:E0:E9:B3:77:62:98:87:C7:13:A8:75:F5:DE:B4:7B:11:17
ValiditySun, 14 Apr 2024 00:24:14 GMT - Sat, 13 Jul 2024 00:24:13 GMT

File type

Size
161 kB (161118 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fd.php?fd=ts&site=bigtitslust.com&spot=ts&to=https://hqfuck.com/top.html HTTP/1.1
Host: hqfuck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.bigtitslust.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 09 May 2024 18:56:55 GMT
content-type: text/html; charset=UTF-8
location: https://hqfuck.com/top.html
x-powered-by: PHP/7.1.33
set-cookie: br=ts-ts-bigtitslust.com; expires=Fri, 10-May-2024 00:56:55 GMT; Max-Age=21600; path=/
cache-control: no-cache
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MSuyp66ZSAfOMjJcFLDFyHvbQ42wEtsJFPGiRGFOM4Rkr8mqiUCvy5A1OpAJ2%2FuIhq5v19J%2BGlNtLbxvV%2FqvjhJg%2BGdT2uyNHNP%2B4DL%2BIEaimMDPzA9H%2BqmLhRmq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8813e98a9d817128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (48)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash