urlquery - report: www.buttygirls.com/esus/multi/ms/7-216324/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
zeniocloud.com (1)	0	2022-02-16 15:44:21 UTC	2022-09-21 09:27:01 UTC	167.114.67.56	Unknown ranking
alexatracker.com (1)	0	2020-10-28 18:44:06 UTC	2022-09-21 09:27:01 UTC	51.68.197.173	Unknown ranking
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-09-21 04:18:32 UTC	143.204.55.110
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-09-21 04:20:37 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-09-21 04:20:37 UTC	52.38.146.2
accounts.google.com (2)	81	2016-09-05 09:39:47 UTC	2022-09-21 13:51:16 UTC	216.58.207.237
fonts.googleapis.com (1)	8877	2014-07-21 13:19:55 UTC	2022-09-21 14:09:32 UTC	142.250.74.10
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-09-21 10:25:05 UTC	143.204.55.27
www.buttygirls.com (16)	0	2022-02-11 16:35:02 UTC	2022-09-21 13:02:03 UTC	172.67.136.26	Unknown ranking
ocsp.pki.goog (5)	175	2017-06-14 07:23:31 UTC	2022-09-21 04:20:12 UTC	142.250.74.3
lh3.google.com (1)	213	2013-06-02 21:16:56 UTC	2022-09-21 09:27:02 UTC	142.250.74.142
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2022-09-21 04:18:22 UTC	23.36.77.32
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-09-21 10:02:25 UTC	93.184.220.29
img-getpocket.cdn.mozilla.net (5)	1631	2017-09-01 03:40:57 UTC	2022-09-21 14:38:57 UTC	34.120.237.76
static.production.almightypush.com (3)	214819	2021-09-25 16:34:18 UTC	2022-09-21 09:27:01 UTC	54.230.111.72
ip-api.com (1)	31425	2014-10-06 13:38:20 UTC	2022-09-21 12:19:52 UTC	208.95.112.1

Scan Date	Severity	Indicator	Comment
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/	Malware
2022-09-21	2	zeniocloud.com/JAIA.js?sub1=buttygirls.com	Phishing
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/js/inline_video.js	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/js/jquery.min.js	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/js/ip_api.js	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/js/backoffer.js	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic.woff	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/images/girl-v1.webm	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic-Bold.woff	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic.ttf	Malware
2022-09-21	2	www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic-Bold.ttf	Malware

Date	UQ / IDS / BL	URL	IP
2023-02-25 23:18:55 +0000	0 - 0 - 4	www.buttygirls.com/us/multi/ms/26-100739/	172.67.136.26
2023-02-24 07:22:55 +0000	0 - 0 - 3	www.buttygirls.com/us/multi/ms/26-100739/?cep (...)	172.67.136.26
2023-02-23 08:42:28 +0000	0 - 0 - 2	www.buttygirls.com/fr/multi/ms/1-131736/?cep= (...)	172.67.136.26
2023-02-20 19:01:34 +0000	0 - 0 - 1	www.buttygirls.com/de/multi/ms/8-466653/?cep= (...)	172.67.136.26
2023-02-20 06:08:00 +0000	0 - 0 - 4	www.buttygirls.com/us/multi/ms/26-100739/	172.67.136.26

Date	UQ / IDS / BL	URL	IP
2023-03-30 21:29:15 +0000	0 - 5 - 1	www.ddtools.top/handdiy_3.exe	188.114.97.1
2023-03-30 21:26:40 +0000	0 - 0 - 1	janitormoper.com/797c255adc63fe2c75ebb32121fcd76b	172.67.154.222
2023-03-30 21:25:03 +0000	0 - 2 - 0	download.filepuma.com/files/webcam/manycam/Ma (...)	104.26.0.63
2023-03-30 21:22:06 +0000	0 - 0 - 20	7om8qr3axsiake4eowtmr1i.lspower.xyz/usps/veri (...)	188.114.97.1
2023-03-30 21:20:11 +0000	0 - 1 - 0	cdn.discordapp.com/attachments/10886991025707 (...)	162.159.135.233

Date	UQ / IDS / BL	URL	IP
2023-02-26 22:22:55 +0000	0 - 0 - 3	www.buttygirls.com/us/multi/ms/26-100739/?cep (...)	104.21.86.190
2023-02-26 02:58:49 +0000	0 - 0 - 3	www.buttygirls.com/us/multi/ms/26-100739/?cep (...)	104.21.86.190
2023-02-25 23:18:55 +0000	0 - 0 - 4	www.buttygirls.com/us/multi/ms/26-100739/	172.67.136.26
2023-02-25 21:45:17 +0000	0 - 0 - 1	www.buttygirls.com/de/multi/ms/8-466653/?cep= (...)	104.21.86.190
2023-02-24 21:59:56 +0000	0 - 1 - 0	www.buttygirls.com/esus/multi/ms/7-216324/?ce (...)	104.21.86.190

Date	UQ / IDS / BL	URL	IP
2023-02-04 11:11:25 +0000	0 - 1 - 11	www.buttygirls.com/esus/multi/ms/7-216324/	104.21.86.190
2023-01-22 11:01:16 +0000	0 - 0 - 11	www.buttygirls.com/esus/multi/ms/7-216324/	104.21.86.190
2023-01-08 12:27:10 +0000	0 - 1 - 11	www.buttygirls.com/esus/multi/ms/7-216324/	172.67.136.26
2022-12-24 07:50:36 +0000	0 - 1 - 11	www.buttygirls.com/esus/multi/ms/7-216324/	104.21.86.190
2022-12-23 13:29:17 +0000	0 - 1 - 11	www.buttygirls.com/esus/multi/ms/7-216324/	104.21.86.190

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.27 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 143.204.55.27 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Wed, 21 Sep 2022 14:12:02 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: TKB19tS5ChV3ciL3xoNQmzFz2Ofc9paOiJWeHTiSvvw0tOZk7dJFnA== Age: 2940 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2" Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3973 Expires: Wed, 21 Sep 2022 16:07:15 GMT Date: Wed, 21 Sep 2022 15:01:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a26d0784548ecab22f417f3d689daf23 Sha1: 8893b79366bbadeb5c8d587b8f023e310694df1c Sha256: 35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 143.204.55.110 HASH: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770 143.204.55.110 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Sat, 10 Sep 2022 18:47:45 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Wed, 21 Sep 2022 04:35:14 GMT etag: "6113f8408c59aebe188d6af273b90743" x-cache: Hit from cloudfront via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: v0FK8Oi3BD0hjk06_rPY0TdpkF1t2jPgoJuog9MoZhx2FOdxvFCiUQ== age: 37549 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 6113f8408c59aebe188d6af273b90743 Sha1: 7398873bf00f99944eaa77ad3ebc0d43c23dba6b Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 21 Sep 2022 15:01:02 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.27 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.27 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Cache-Control: max-age=3600 Date: Wed, 21 Sep 2022 14:03:22 GMT Expires: Wed, 21 Sep 2022 14:42:15 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: eMZcdw7xQ6gv-IupoKbAIvLe4AhKCtAFpj9MmFRBBOBuCKrljByJ5w== Age: 3460 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6209 Cache-Control: 'max-age=158059' Date: Wed, 21 Sep 2022 15:01:02 GMT Last-Modified: Wed, 21 Sep 2022 13:17:34 GMT Server: ECS (ska/F71B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: ff6d50919e56aed75c47feb45ee2f2ec Sha1: 98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef Sha256: b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: IcVI1elGRwfXCoIpyqzTEg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.38.146.2 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.38.146.2 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: rhIfhgG2YAx9IFCfmq69uvtNm2w= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /esus/multi/ms/7-216324/ HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: www.buttygirls.com/esus/multi/ms/7-216324/ FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: ca8f752addf9c77af47da6bec8119091e6868663d1bc22c6000a4b599c615c8b 172.67.136.26 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Wed, 21 Sep 2022 15:01:03 GMT Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQRCdPfj6PpLQLhGGgSI0cYhDiswBbVxN8Ms60Z2pwAhW%2BPGVVzehjheAMliwKZcgPLp1VWohk4%2BzigiCUOfuWZORdvfSQ1UowHATNnc9d2kNr%2BZIbGKUsjoT%2FraJ0pr2BY9T54%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 74e3ac7fce94b4eb-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text Size: 3698 Md5: e772d60958fd4888ece61a228d3c9653 Sha1: 624dbbaee2796a3dbe295a0a620f278224bfd027 Sha256: ca8f752addf9c77af47da6bec8119091e6868663d1bc22c6000a4b599c615c8b Alerts: Blocklists: - fortinet: Malware
GET /mng/subs_window.js?ver=1644586917 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.buttygirls.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: static.production.almightypush.com/mng/subs_window.js?v (...) FQDN: static.production.almightypush.com IP: 54.230.111.72 HASH: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206 54.230.111.72 HTTP/2 200 OK content-type: application/javascript content-length: 19491 last-modified: Mon, 05 Sep 2022 12:24:26 GMT accept-ranges: bytes server: AmazonS3 date: Wed, 21 Sep 2022 04:29:13 GMT etag: "ae593f4be1dd1f0710123918b49c4933" x-cache: Hit from cloudfront via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: QrmovIo96DIJstm7mG2IPuA2bQ0s-i9S4Dfq0PiWUfRj-n03TtuNEg== age: 37971 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 19491 Md5: ae593f4be1dd1f0710123918b49c4933 Sha1: 66fbe30bb873e0a47d3d72e737d68aa4b6916c26 Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
GET /mng/channels/init.min.js?ver=1644586917 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.buttygirls.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: static.production.almightypush.com/mng/channels/init.mi (...) FQDN: static.production.almightypush.com IP: 54.230.111.72 HASH: 1475c052ae8dbc220775cd44b20e508e38db9f09168c57d4a73e0a9027f252f7 54.230.111.72 HTTP/2 200 OK content-type: application/javascript content-length: 21924 last-modified: Mon, 05 Sep 2022 12:24:26 GMT accept-ranges: bytes server: AmazonS3 date: Wed, 21 Sep 2022 06:05:23 GMT etag: "2ea196bb9d9670ec138eb0c8c23e6696" x-cache: Hit from cloudfront via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: OKmNKBSU6DCIGYVXP_hxGJUlkChQjiSXZBppoJMuGTEH1NH6VNgjIw== age: 32184 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 21924 Md5: 2ea196bb9d9670ec138eb0c8c23e6696 Sha1: b0876fd8c0c56c5d34368c16a829c040c23cbaba Sha256: 1475c052ae8dbc220775cd44b20e508e38db9f09168c57d4a73e0a9027f252f7
GET /mng/subs_window.css?ver=1644586917 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.buttygirls.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: static.production.almightypush.com/mng/subs_window.css? (...) FQDN: static.production.almightypush.com IP: 54.230.111.72 HASH: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a 54.230.111.72 HTTP/2 200 OK content-type: text/css content-length: 6945 last-modified: Mon, 05 Sep 2022 12:24:26 GMT accept-ranges: bytes server: AmazonS3 date: Wed, 21 Sep 2022 02:24:15 GMT etag: "bd7dbae15f904a4e1213439ebfefddbe" x-cache: Hit from cloudfront via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: uYEn1-mxQ0nurEGuvMxycU15RatPfWBPAi6UJ7u-2Dgo5s78r-jSwA== age: 45445 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 6945 Md5: bd7dbae15f904a4e1213439ebfefddbe Sha1: 9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 21 Sep 2022 15:01:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 5f68499f2ba3b2c5aa7e979ee9b4d3a8 Sha1: 67a456fe80bd69aa2fbd0331ba343d1789509d0f Sha256: 394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 3a910cde9f8f65341f3422d28e35ca877558e136c99067b72daaeb56b3d9e76d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 21 Sep 2022 15:01:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: bcbb61a4f6f0beed45a5f963bfba6e9d Sha1: a07136aeace7036e3b7427d63c60576adbdc388f Sha256: 3a910cde9f8f65341f3422d28e35ca877558e136c99067b72daaeb56b3d9e76d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6e47f3267399d444c2b1de41cb523a4c8723381f5c7c4755a1a3e08c8f327ba0 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6E47F3267399D444C2B1DE41CB523A4C8723381F5C7C4755A1A3E08C8F327BA0" Last-Modified: Wed, 21 Sep 2022 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4432 Expires: Wed, 21 Sep 2022 16:14:55 GMT Date: Wed, 21 Sep 2022 15:01:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7472a29325bfcc16d1e820eb671d95bf Sha1: 156031974839cf8df1d3f9b99dcd2e70057bf682 Sha256: 6e47f3267399d444c2b1de41cb523a4c8723381f5c7c4755a1a3e08c8f327ba0
GET /esus/multi/ms/7-216324/css/normalize.css HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/css/normalize.css FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: 1a75f821f5beaf52dd5466522392998eaf1b150047fb58b144c001f14dd0a174 172.67.136.26 HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 11 Feb 2022 15:27:25 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UMRfxEb8s1YZTBTO0Y95m%2BbT28Ksng700zc%2FEJ7UlHZFcpfh%2Bcq566XBhkibZoh8%2Ber1Rsf9AOYA2uYnAd17incVboqCYDqf%2BI9WKBu9G2UpqwKzsQwknjZ2o1i9oAnlDOjYYJ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac86d8c3b4eb-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 2119 Md5: 3a8aa2b923c16206db04bc6c69f1a58f Sha1: f2d28e1d8ce197bbfbebf4314949ef8cb3e5d58e Sha256: 1a75f821f5beaf52dd5466522392998eaf1b150047fb58b144c001f14dd0a174
GET /esus/multi/ms/7-216324/css/style.css HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/css/style.css FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: f6b82e40f5b4eefbb63fa076d9f25c22dac47dab1b7302abfa63f9cc29dab356 172.67.136.26 HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 11 Feb 2022 15:27:25 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uPWNZ3rZjhEEpuTLKiOKi8A%2BNLQk%2FRg3V45a8f7w%2FwG4TqwKQrRsEUiCGsswK8tkjk8jsqhOwxFiy3QGDVP53EA02hN2FgXi%2BcbGLUIznHEAoHNpcbt2Pmbrs16HX6zeq4Xjc4U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac86ebc1b521-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 1809 Md5: 7eded0c259bed040a6838742da7f82fd Sha1: d7448cfc776a4fdc8fb6cd953bd77c72b1f3fe0c Sha256: f6b82e40f5b4eefbb63fa076d9f25c22dac47dab1b7302abfa63f9cc29dab356
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2" Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12787 Expires: Wed, 21 Sep 2022 18:34:11 GMT Date: Wed, 21 Sep 2022 15:01:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8ebb267e443b81854ef9a01b3eb6489d Sha1: b932e9e5679da5a9160da5429458041765509b52 Sha256: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2" Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12787 Expires: Wed, 21 Sep 2022 18:34:11 GMT Date: Wed, 21 Sep 2022 15:01:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8ebb267e443b81854ef9a01b3eb6489d Sha1: b932e9e5679da5a9160da5429458041765509b52 Sha256: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2" Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12787 Expires: Wed, 21 Sep 2022 18:34:11 GMT Date: Wed, 21 Sep 2022 15:01:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8ebb267e443b81854ef9a01b3eb6489d Sha1: b932e9e5679da5a9160da5429458041765509b52 Sha256: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2" Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12787 Expires: Wed, 21 Sep 2022 18:34:11 GMT Date: Wed, 21 Sep 2022 15:01:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8ebb267e443b81854ef9a01b3eb6489d Sha1: b932e9e5679da5a9160da5429458041765509b52 Sha256: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0be442b0-65b4-4d6f-bdd3-b9f3847359a1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 4f945ab342352aea3f4b2242d084d527bb517cf7c6efd0c10a828f0bee9f5d3f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9227 x-amzn-requestid: 26d977d3-f4d2-4218-a8f4-a56c873e6a26 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YiFzKG2zIAMFoDw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6323e9ad-0bfac6c453e6ea5a311a28a8;Sampled=0 x-amzn-remapped-date: Fri, 16 Sep 2022 03:12:45 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: K-lCBW5v2irK9UtfyGeaE7jkaIjQkpEUREIMd2hMXUrlsc6k-p6F1A== via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google date: Wed, 21 Sep 2022 05:27:48 GMT age: 34396 etag: "cb328d0f66f4c2779bc64342ef89735636ae5ded" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9227 Md5: 9556616ca10eb4383b1e15f360fbf6d4 Sha1: cb328d0f66f4c2779bc64342ef89735636ae5ded Sha256: 4f945ab342352aea3f4b2242d084d527bb517cf7c6efd0c10a828f0bee9f5d3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11832 x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YugI_EsLIAMFdmQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0 x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 7sCevVX1nGXxZxnrXSURjUcap1a7vCZwrMMIXfzcBPR1srMxJHLGUg== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google date: Tue, 20 Sep 2022 22:09:43 GMT age: 60681 etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11832 Md5: 2ed7323b395e757f7766ea0045efdaca Sha1: 8b91bc3069a3217bc719c27959d578b353b5d9dc Sha256: 8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e782fb5ede547e1b167719068c6821c62414dcb0991bf9ac38285cb3ce8894e3 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10038 x-amzn-requestid: 4cf38a70-a706-4e6a-b854-9404727c599d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Yxy1mHDCIAMF5-g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632a31bd-5aba5b0640221b302a19781b;Sampled=0 x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: hDCOWNm2vFa9h7BffUJwcwZ6i27jM2qBuSTasH9q_wsQ9oNWhVpQCg== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google date: Tue, 20 Sep 2022 21:47:24 GMT etag: "54ed14436a75ba2aeb8459bad2ce70229aff4203" age: 62020 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10038 Md5: dab1f2cd68979d2004ba4449d759a341 Sha1: 54ed14436a75ba2aeb8459bad2ce70229aff4203 Sha256: e782fb5ede547e1b167719068c6821c62414dcb0991bf9ac38285cb3ce8894e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06a0b4c5-4223-42cf-b012-2e09b250c8c1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 444f4359ac25747e7c5d7e09202f195d407bc94a4933ac7ebbbaf9839bf59aff 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12048 x-amzn-requestid: d9bd4ac9-5032-45d5-9689-c5c3347912d3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YO2wuFz4oAMFZug= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631c3804-6fb7d6a52eecab471f67d9a9;Sampled=0 x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT x-amz-cf-pop: SEA19-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: sfGk3C3HLGDYDSXw1d4R7wPRsGdHNKD31chUVzQ8KYBRnsIL0aOW1g== via: 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google date: Tue, 20 Sep 2022 21:41:17 GMT age: 62387 etag: "37222a70df5d9a69073b4b32ebc3a5da60006001" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12048 Md5: c2db94039cb675cb250519fe57b2b3c9 Sha1: 37222a70df5d9a69073b4b32ebc3a5da60006001 Sha256: 444f4359ac25747e7c5d7e09202f195d407bc94a4933ac7ebbbaf9839bf59aff
GET /JAIA.js?sub1=buttygirls.com HTTP/1.1 Host: zeniocloud.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.buttygirls.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: zeniocloud.com/JAIA.js?sub1=buttygirls.com FQDN: zeniocloud.com IP: 167.114.67.56 HASH: b7bb172c759b006828f5c670d7f34f89bbe9047e9f1408d1b8aa6cd856ee1713 167.114.67.56 HTTP/2 200 OK content-type: text/html; charset=UTF-8 server: nginx/1.18.0 (Ubuntu) date: Wed, 21 Sep 2022 15:01:03 GMT content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 10571 Md5: 9fe114832acf70a7c6658b2ad46c5217 Sha1: 9e6feef8f5edb97fe1c7be5a9f6c650f20515508 Sha256: b7bb172c759b006828f5c670d7f34f89bbe9047e9f1408d1b8aa6cd856ee1713 Alerts: Blocklists: - fortinet: Phishing
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9201 x-amzn-requestid: 6dbfae76-f9ab-4f31-9b62-bcf5d9ce4515 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YxzxlEYcoAMFaQQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632a333d-7d147481402cc46a751b72ed;Sampled=0 x-amzn-remapped-date: Tue, 20 Sep 2022 21:40:13 GMT x-amz-cf-pop: SFO5-P2, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: hI3FlJJRAUfr0EAcSvvuJajmyQDwBpTxuQIhYfA0Mtp9JyQgKnoDvA== via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google date: Tue, 20 Sep 2022 21:43:18 GMT age: 62266 etag: "1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9201 Md5: a692964324dbb9c460a1b855808d02e6 Sha1: 1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54 Sha256: 3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426
GET /esus/multi/ms/7-216324/js/inline_video.js HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/js/inline_video.js FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: b1d4e79daa51c97053fa4b2da8a5001ec23c2f7c9322ee7426bc2a16b2f34f5c 172.67.136.26 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uko0yMKwKnQiQ2k0El6%2BD1jHOkKRIGJE%2BArFA%2B5mT%2Fk%2BM5YrIiaKm9gJDW53UaXpRBeOSVptRqvPjuc%2FZThfxsMYckdPDSMhCgf%2BAZki8xAvu63zZIT3zTQaFBQFyFrkWUhd7h0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac86ee130afa-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (3011) Size: 1255 Md5: ab03e3a189486b315c2e0bc4de293527 Sha1: 59aa7f71eedcf7642f22a9c50ae955292cb3ea39 Sha256: b1d4e79daa51c97053fa4b2da8a5001ec23c2f7c9322ee7426bc2a16b2f34f5c Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/js/jquery.min.js HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/js/jquery.min.js FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d9a28a18def7d05077f968ad00a30534a017a097134f6da9c924862d93aa62ca 172.67.136.26 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pTQQNNbtxVOyeAny1ioue8gQKIsL2gNoheCPr4lVN1dZy8nmLtbfRTjdFSusbBcgFtWdjOBesJDFybF9keaV8GzIFXKf%2BMk%2BWpfgZEjqxNuhGLP4l531%2Fur0VXXUwLRjSGCs1hA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac86e8bffac4-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (32047) Size: 33353 Md5: 681f5acb09e41b111a796c7a4eddfe73 Sha1: 8793aadb0e45567d84f2c4bd03e9ff49e615e3cc Sha256: d9a28a18def7d05077f968ad00a30534a017a097134f6da9c924862d93aa62ca Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/js/ip_api.js HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/js/ip_api.js FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: f2aa9bae5d96991cbdf05bff51bc3606354a430c19dea760e4e1bbf3d28d8789 172.67.136.26 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=afA49Rst9oz30hTSBl688qjXhlaISWm8ACkTE82viU%2FG1TTv17oW7BRtb9a2lXo%2FN%2Frg0XSfQWjdrTIymO5vb46nCkysTVKji8MQ8X%2BcAgY25W755xsPKki3anYtTYYhq3x27a8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac86ed43b4ee-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 354 Md5: 792f5be3a6ab4b300b164593323d05b1 Sha1: b86d12ba7693b0d14bd5c59677eb4bc68265f17e Sha256: f2aa9bae5d96991cbdf05bff51bc3606354a430c19dea760e4e1bbf3d28d8789 Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/js/backoffer.js HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/js/backoffer.js FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: de8798dd7447b4651ec2d44931c15ceb0d3e5099997b2ddc2452d3f95092a1a2 172.67.136.26 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2FVxwBKh%2Fzt6vMUO9Q4zuEshiKSOQ9RV0otaxSDdANFRWiZ8IE7NwH%2BzNLtYDZDBm92IpdachYwcHPeewMYvo1oZCS2dcuba70mxwuDkdWUdfxr1i%2FU5iRhdCSOuhSay3pjmiz8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac870f4ab509-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (430), with no line terminators Size: 230 Md5: d1d761e3721375472889577260906f9c Sha1: c5e6e54e8b6b84af216d867dca79eb00c2819e42 Sha256: de8798dd7447b4651ec2d44931c15ceb0d3e5099997b2ddc2452d3f95092a1a2 Alerts: Blocklists: - fortinet: Malware
GET /json HTTP/1.1 Host: ip-api.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Origin: http://www.buttygirls.com Connection: keep-alive Referer: http://www.buttygirls.com/	URL: ip-api.com/json FQDN: ip-api.com IP: 208.95.112.1 HASH: 9df7a6b6ab363f5e4b96012311150f647cc5b24830f32f9cb621ddfbfab0d823 208.95.112.1 HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 21 Sep 2022 15:01:03 GMT Content-Length: 277 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 277 Md5: 47abdf32b87fc82ed4160af504891507 Sha1: 290f0d4d0cef4cd5983db4bfe53c02a3f4193a6e Sha256: 9df7a6b6ab363f5e4b96012311150f647cc5b24830f32f9cb621ddfbfab0d823
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 52451ccc9c87c0c2092c40be74f82c790fb32efd4981cb4995fc137cbef144aa 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "52451CCC9C87C0C2092C40BE74F82C790FB32EFD4981CB4995FC137CBEF144AA" Last-Modified: Wed, 21 Sep 2022 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2881 Expires: Wed, 21 Sep 2022 15:49:05 GMT Date: Wed, 21 Sep 2022 15:01:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 9fbb07f75306c2a5e91f2e7157e6a48b Sha1: a8a52deaf9a2ab26336c9a3a11e0f8e911c508ff Sha256: 52451ccc9c87c0c2092c40be74f82c790fb32efd4981cb4995fc137cbef144aa
GET /esus/multi/ms/7-216324/css/CenturyGothic.woff HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css	URL: www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGo (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7nA6CkcY3MMoQYsYPofgGDLvavkx8%2B%2BkWiTJ9%2BsGxczxmJWOo1muO1yY7DEIKCD8wleYnsG73PV3U6aqjOArxBQngnb1DKtluWtSqZGCbAkuVQNVq97JvVqm%2BZnAryEWrVr%2Bfss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac8faf9f0afa-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 315 Md5: a34ac19f4afae63adc5d2f7bc970c07f Sha1: a82190fc530c265aa40a045c21770d967f4767b8 Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/images/loading.gif HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/images/loading.gif FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QCwEPULnf%2FW2jTXMK4Bn4wsPQPCxwcdt2fW%2FKguIUlb7Z1s%2F5ftyfxRCS%2B7u2dzvbhf%2F8wz9W1O8Iv0ub4sW%2BKd%2BXVixm20XjnJA2%2B7k1vz9ubDGKlc1vCHxQvjOjCedqoR2%2BZg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac8eadc1b521-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: f5945c4d5e4298d818d50d70865f2857 Sha1: f35c3593933af2db1933093809ef78f45b9b7144 Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /esus/multi/ms/7-216324/images/frame.jpg HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/images/frame.jpg FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RAmJsTs6BfpmY9UDT2tQMfSePoZ91LxyTPGp00oRPDHwuTMF3Z7taFXM4Jc%2FcPhJv5IVwe%2BJn9u3bFhOaDObRMzp0WVNBrFnLyOgeoFql17LCwM1DiV6HJZGCi0zk28xEhb%2BSgY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac8eae9ffac4-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: f5945c4d5e4298d818d50d70865f2857 Sha1: f35c3593933af2db1933093809ef78f45b9b7144 Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /jscode/JAIA.js?sub1=buttygirls.com&sub2=&sub3=&sub4=&sub5=&prid= HTTP/1.1 Host: alexatracker.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.buttygirls.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: alexatracker.com/jscode/JAIA.js?sub1=buttygirls.com&sub (...) FQDN: alexatracker.com IP: 51.68.197.173 HASH: 0f90404987164b5e53d32eeb3328be9f604aec598690b306c04c635f6db8a680 51.68.197.173 HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Server: nginx/1.18.0 (Ubuntu) Date: Wed, 21 Sep 2022 15:01:04 GMT Content-Length: 7946 Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: trbarid=d438b0424778fe5e323955a9cfeaa8db1fac47c26167f8b57016e36083ea9230a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22trbarid%22%3Bi%3A1%3Bi%3A2992967607061784368%3B%7D; expires=Wed, 25-Sep-2024 15:01:04 GMT; Max-Age=63504000; path=/; secure; HttpOnly; SameSite=None --- Additional Info --- Magic: ASCII text, with very long lines (7946), with no line terminators Size: 7946 Md5: 1330cceac9c215d0133900b1a2edd542 Sha1: 3e9cda4ac411649ad228780e9eb987a4c598b050 Sha256: 0f90404987164b5e53d32eeb3328be9f604aec598690b306c04c635f6db8a680
GET /esus/multi/ms/7-216324/images/girl-v1.webm HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: video/webm,video/ogg,video/;q=0.9,application/ogg;q=0.7,audio/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/images/girl-v (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=asDZnkwOrOU83xvwoIcA58ZTm466dvlX74OlJPbmGiqfNO3EcEd5n7J5sTaD6F1mGNbIjTB578FtS75LBG4FxCpyyct9QKsmRybZl25j6Nr2TtwcgFVPjAus00WZHCp727jfVSk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 74e3ac8fbbe5b509-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 315 Md5: a34ac19f4afae63adc5d2f7bc970c07f Sha1: a82190fc530c265aa40a045c21770d967f4767b8 Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic-Bold.woff HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css	URL: www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGo (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=27any6o0dBnsVhg0W%2FrH0IloFtcK%2FLRU14uuqkaYaptEsbfgJ6nYQupfEv%2BCrqUZvCnthH7I6iGvhVEyW7a7s8nrq%2BnBwcdHJLJtaHNqMR7GdIMRNL9YlxxfiQDhDVTzzl6m%2BQc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac8fa9c2b4ee-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 315 Md5: a34ac19f4afae63adc5d2f7bc970c07f Sha1: a82190fc530c265aa40a045c21770d967f4767b8 Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic.ttf HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css	URL: www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGo (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bPzSzrFH7%2FBv3BpJvk9kcnkmoK0RWu%2B0BFkVkxdHKsrq8rY91qtiEuXcevAh%2BdDv1%2BQfn40mjVy2RiqZxo5CAm8SWJZAm5%2BrI6C4KmQG3t%2BZFYbHA6FMeELyo0kBZY6KlsnA8xA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac8fe81d0afa-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: f5945c4d5e4298d818d50d70865f2857 Sha1: f35c3593933af2db1933093809ef78f45b9b7144 Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 Alerts: Blocklists: - fortinet: Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic-Bold.ttf HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css	URL: www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGo (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cp07CUkmo6HCU3nEdx4URdqMU6Oj7s1qpdaJRc1WuSDmZT%2Bb%2F8VBc1YWAPILYQrp7Kn1B41dyqWefs%2FeYDJclvdhhADbXv%2BwdWRT6CAevp9Q4J%2F%2BGH5sHOgO8nBS%2Bfv0h5Wra8U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac90c869fac4-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: f5945c4d5e4298d818d50d70865f2857 Sha1: f35c3593933af2db1933093809ef78f45b9b7144 Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 Alerts: Blocklists: - fortinet: Malware
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 21 Sep 2022 15:01:04 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: bb4bdc4c3c6869c822618f0b9ef1bdc5 Sha1: 6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d Sha256: eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac
GET /u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0=w100 HTTP/1.1 Host: lh3.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1x (...) FQDN: lh3.google.com IP: 142.250.74.142 HASH: f432da756645f1aa0bdfff17c86556d7343c5ae482f941597552d9701560d6bb 142.250.74.142 HTTP/2 302 Found content-type: text/html; charset=UTF-8 location: https://accounts.google.com/ServiceLogin?continue=https://lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en cache-control: private vary: Origin access-control-allow-origin: * timing-allow-origin: * x-content-type-options: nosniff date: Wed, 21 Sep 2022 15:01:04 GMT server: fife content-length: 337 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators Size: 337 Md5: 66a43eafe19fd2e9782007272dd06ced Sha1: 9d5112f8b4482ef224d10b0d0a17bfaf053e8e23 Sha256: f432da756645f1aa0bdfff17c86556d7343c5ae482f941597552d9701560d6bb
GET /esus/multi/ms/7-216324/images/android-chrome-192x192.png HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/images/androi (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RP1IQcQ9V2LURaRC%2BsbOs61fkJgalzSfupOUDoSurWewbpeVjQhzkjd78CrjWp2zeNsFjTig59Guo%2Fifaxr88ZsBOnyTMNwsyBpFyqSn87FdGrkDh9WGJPgORKKQXcMVQhtq2ys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac91189afac4-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: f5945c4d5e4298d818d50d70865f2857 Sha1: f35c3593933af2db1933093809ef78f45b9b7144 Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /esus/multi/ms/7-216324/images/favicon-16x16.png HTTP/1.1 Host: www.buttygirls.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/	URL: www.buttygirls.com/esus/multi/ms/7-216324/images/favico (...) FQDN: www.buttygirls.com IP: 172.67.136.26 HASH: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38 172.67.136.26 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 21 Sep 2022 15:01:04 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EMHFBx0PpURl2RlBFjTQW4dqbbZyHGY3d4rGOs7d1QPKzx3ctqe1oKz%2BZ7aHRDI5zuXLmabz1bH6tRKbWmTUkWatwKw0ZTN8u45WM1pt209TO4Q%2FQXWciyQJoOB9Da4etxu%2Fqx0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 74e3ac9118f3b521-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: f5945c4d5e4298d818d50d70865f2857 Sha1: f35c3593933af2db1933093809ef78f45b9b7144 Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 21 Sep 2022 15:01:04 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: bb4bdc4c3c6869c822618f0b9ef1bdc5 Sha1: 6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d Sha256: eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 69dc599e96ce0e553637ca5b3d45dddcdd4b0eb0a73eeae55aa36955419182ac 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 21 Sep 2022 15:01:04 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3d2761b1a3fedeb7e00a122148ffd245 Sha1: 99a1dd8c59c36325d722ff751154e55a789af58b Sha256: 69dc599e96ce0e553637ca5b3d45dddcdd4b0eb0a73eeae55aa36955419182ac
GET /ServiceLogin?continue=https://lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en HTTP/1.1 Host: accounts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: accounts.google.com/ServiceLogin?continue=https://lh3.g (...) FQDN: accounts.google.com IP: 216.58.207.237 HASH: 7afcff67ebcfdd943f720a10653f13e78845ac8b94984ccf2b5907b3be60da88 216.58.207.237 HTTP/2 302 Found content-type: text/html; charset=UTF-8 x-frame-options: DENY cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Wed, 21 Sep 2022 15:01:04 GMT location: https://accounts.google.com/v3/signin/identifier?dsh=S-1861331958%3A1663772464972665&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWqpkKq7-b01EGnCyfIoWtCTKPG5Eqh42leDV-Qo-euEaxhqeeYhS0vCFb-NI4f8GtxSU_BjBQ strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-gvIEbv7eOje-vb2Ghbp0OA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk" report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]} content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block content-length: 414 server: GSE set-cookie: __Host-GAPS=1:6va5L9CEwPwxDY1_ncOugNg6heiWWg:V4PubV4rIIu5sf-g;Path=/;Expires=Fri, 20-Sep-2024 15:01:04 GMT;Secure;HttpOnly;Priority=HIGH alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (387) Size: 414 Md5: 5cd1fa9276eeaf1293e9dadd3cb9640b Sha1: a5ef844010b36dd219c5d7c62e7a5d33c41d5533 Sha256: 7afcff67ebcfdd943f720a10653f13e78845ac8b94984ccf2b5907b3be60da88
GET /css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.buttygirls.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: fonts.googleapis.com/css?family=Source+Sans+Pro:400,700 (...) FQDN: fonts.googleapis.com IP: 142.250.74.10 142.250.74.10 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Wed, 21 Sep 2022 15:01:03 GMT date: Wed, 21 Sep 2022 15:01:03 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info ---
GET /v3/signin/identifier?dsh=S-1861331958%3A1663772464972665&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWqpkKq7-b01EGnCyfIoWtCTKPG5Eqh42leDV-Qo-euEaxhqeeYhS0vCFb-NI4f8GtxSU_BjBQ HTTP/1.1 Host: accounts.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: accounts.google.com/v3/signin/identifier?dsh=S-18613319 (...) FQDN: accounts.google.com IP: 216.58.207.237 216.58.207.237 HTTP/2 403 Forbidden content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Wed, 21 Sep 2022 15:01:05 GMT vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-kY7AGkKUjilJXY4tUZGHYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cross-origin-opener-policy-report-only: same-origin permissions-policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version= content-encoding: gzip server: ESF x-xss-protection: 0 x-content-type-options: nosniff set-cookie: NID=511=qHwFUNPfsU1QoO-hO-nhYsIkUX0KMx-uy7Z4udIQGyOYcY1RmqeQ98EULtHhUeHc3JawaxLm4DKRq2S-Y-7zHVZ48muz3ZvscaUEPukeAEpno0-SqfDT_L8oIRU2ZvLN01xB2MVY5kOU9t8R7peeZlWhAESYDm6uFqeDDi2Jc1A; expires=Thu, 23-Mar-2023 15:01:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Wed, 21 Sep 2022 14:12:02 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: TKB19tS5ChV3ciL3xoNQmzFz2Ofc9paOiJWeHTiSvvw0tOZk7dJFnA== 

                                        
                                            
Age: 2940 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    2d12f67fe57a87e7366b662d153a5582

                                                Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1

                                                Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.110

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
content-length: 5348 

                                        
                                            
last-modified: Sat, 10 Sep 2022 18:47:45 GMT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Wed, 21 Sep 2022 04:35:14 GMT 

                                        
                                            
etag: "6113f8408c59aebe188d6af273b90743" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-C1 

                                        
                                            
x-amz-cf-id: v0FK8Oi3BD0hjk06_rPY0TdpkF1t2jPgoJuog9MoZhx2FOdxvFCiUQ== 

                                        
                                            
age: 37549 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    6113f8408c59aebe188d6af273b90743

                                                Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b

                                                Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 329 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Date: Wed, 21 Sep 2022 14:03:22 GMT 

                                        
                                            
Expires: Wed, 21 Sep 2022 14:42:15 GMT 

                                        
                                            
ETag: "1648230346554" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: eMZcdw7xQ6gv-IupoKbAIvLe4AhKCtAFpj9MmFRBBOBuCKrljByJ5w== 

                                        
                                            
Age: 3460 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: IcVI1elGRwfXCoIpyqzTEg== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         52.38.146.2

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: rhIfhgG2YAx9IFCfmq69uvtNm2w= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /mng/subs_window.js?ver=1644586917 HTTP/1.1 

                                        
                                            
Host: static.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.buttygirls.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         54.230.111.72

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
content-length: 19491 

                                        
                                            
last-modified: Mon, 05 Sep 2022 12:24:26 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Wed, 21 Sep 2022 04:29:13 GMT 

                                        
                                            
etag: "ae593f4be1dd1f0710123918b49c4933" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: QrmovIo96DIJstm7mG2IPuA2bQ0s-i9S4Dfq0PiWUfRj-n03TtuNEg== 

                                        
                                            
age: 37971 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text

                                                Size:   19491

                                                Md5:    ae593f4be1dd1f0710123918b49c4933

                                                Sha1:   66fbe30bb873e0a47d3d72e737d68aa4b6916c26

                                                Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206

                                        
                                            GET /mng/subs_window.css?ver=1644586917 HTTP/1.1 

                                        
                                            
Host: static.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.buttygirls.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         54.230.111.72

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
content-length: 6945 

                                        
                                            
last-modified: Mon, 05 Sep 2022 12:24:26 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Wed, 21 Sep 2022 02:24:15 GMT 

                                        
                                            
etag: "bd7dbae15f904a4e1213439ebfefddbe" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: uYEn1-mxQ0nurEGuvMxycU15RatPfWBPAi6UJ7u-2Dgo5s78r-jSwA== 

                                        
                                            
age: 45445 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text

                                                Size:   6945

                                                Md5:    bd7dbae15f904a4e1213439ebfefddbe

                                                Sha1:   9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e

                                                Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:03 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    bcbb61a4f6f0beed45a5f963bfba6e9d

                                                Sha1:   a07136aeace7036e3b7427d63c60576adbdc388f

                                                Sha256: 3a910cde9f8f65341f3422d28e35ca877558e136c99067b72daaeb56b3d9e76d

                                        
                                            GET /esus/multi/ms/7-216324/css/normalize.css HTTP/1.1 

                                        
                                            
Host: www.buttygirls.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/

                                         172.67.136.26

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 11 Feb 2022 15:27:25 GMT 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: REVALIDATED 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UMRfxEb8s1YZTBTO0Y95m%2BbT28Ksng700zc%2FEJ7UlHZFcpfh%2Bcq566XBhkibZoh8%2Ber1Rsf9AOYA2uYnAd17incVboqCYDqf%2BI9WKBu9G2UpqwKzsQwknjZ2o1i9oAnlDOjYYJ8%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 74e3ac86d8c3b4eb-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   2119

                                                Md5:    3a8aa2b923c16206db04bc6c69f1a58f

                                                Sha1:   f2d28e1d8ce197bbfbebf4314949ef8cb3e5d58e

                                                Sha256: 1a75f821f5beaf52dd5466522392998eaf1b150047fb58b144c001f14dd0a174

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2" 

                                        
                                            
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12787 

                                        
                                            
Expires: Wed, 21 Sep 2022 18:34:11 GMT 

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    8ebb267e443b81854ef9a01b3eb6489d

                                                Sha1:   b932e9e5679da5a9160da5429458041765509b52

                                                Sha256: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2" 

                                        
                                            
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12787 

                                        
                                            
Expires: Wed, 21 Sep 2022 18:34:11 GMT 

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    8ebb267e443b81854ef9a01b3eb6489d

                                                Sha1:   b932e9e5679da5a9160da5429458041765509b52

                                                Sha256: 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0be442b0-65b4-4d6f-bdd3-b9f3847359a1.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9227 

                                        
                                            
x-amzn-requestid: 26d977d3-f4d2-4218-a8f4-a56c873e6a26 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: YiFzKG2zIAMFoDw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6323e9ad-0bfac6c453e6ea5a311a28a8;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 16 Sep 2022 03:12:45 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: K-lCBW5v2irK9UtfyGeaE7jkaIjQkpEUREIMd2hMXUrlsc6k-p6F1A== 

                                        
                                            
via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 21 Sep 2022 05:27:48 GMT 

                                        
                                            
age: 34396 

                                        
                                            
etag: "cb328d0f66f4c2779bc64342ef89735636ae5ded" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9227

                                                Md5:    9556616ca10eb4383b1e15f360fbf6d4

                                                Sha1:   cb328d0f66f4c2779bc64342ef89735636ae5ded

                                                Sha256: 4f945ab342352aea3f4b2242d084d527bb517cf7c6efd0c10a828f0bee9f5d3f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10038 

                                        
                                            
x-amzn-requestid: 4cf38a70-a706-4e6a-b854-9404727c599d 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Yxy1mHDCIAMF5-g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-632a31bd-5aba5b0640221b302a19781b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: hDCOWNm2vFa9h7BffUJwcwZ6i27jM2qBuSTasH9q_wsQ9oNWhVpQCg== 

                                        
                                            
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 20 Sep 2022 21:47:24 GMT 

                                        
                                            
etag: "54ed14436a75ba2aeb8459bad2ce70229aff4203" 

                                        
                                            
age: 62020 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10038

                                                Md5:    dab1f2cd68979d2004ba4449d759a341

                                                Sha1:   54ed14436a75ba2aeb8459bad2ce70229aff4203

                                                Sha256: e782fb5ede547e1b167719068c6821c62414dcb0991bf9ac38285cb3ce8894e3

                                        
                                            GET /json HTTP/1.1 

                                        
                                            
Host: ip-api.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json, text/javascript, */*; q=0.01 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Origin: http://www.buttygirls.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.buttygirls.com/

                                         208.95.112.1

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json; charset=utf-8

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:03 GMT 

                                        
                                            
Content-Length: 277 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
X-Ttl: 60 

                                        
                                            
X-Rl: 44 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   277

                                                Md5:    47abdf32b87fc82ed4160af504891507

                                                Sha1:   290f0d4d0cef4cd5983db4bfe53c02a3f4193a6e

                                                Sha256: 9df7a6b6ab363f5e4b96012311150f647cc5b24830f32f9cb621ddfbfab0d823

                                        
                                            GET /esus/multi/ms/7-216324/images/frame.jpg HTTP/1.1 

                                        
                                            
Host: www.buttygirls.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/

                                         172.67.136.26

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=iso-8859-1

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: EXPIRED 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RAmJsTs6BfpmY9UDT2tQMfSePoZ91LxyTPGp00oRPDHwuTMF3Z7taFXM4Jc%2FcPhJv5IVwe%2BJn9u3bFhOaDObRMzp0WVNBrFnLyOgeoFql17LCwM1DiV6HJZGCi0zk28xEhb%2BSgY%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 74e3ac8eae9ffac4-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   238

                                                Md5:    f5945c4d5e4298d818d50d70865f2857

                                                Sha1:   f35c3593933af2db1933093809ef78f45b9b7144

                                                Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    bb4bdc4c3c6869c822618f0b9ef1bdc5

                                                Sha1:   6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d

                                                Sha256: eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac

                                        
                                            GET /esus/multi/ms/7-216324/images/android-chrome-192x192.png HTTP/1.1 

                                        
                                            
Host: www.buttygirls.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/

                                         172.67.136.26

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=iso-8859-1

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RP1IQcQ9V2LURaRC%2BsbOs61fkJgalzSfupOUDoSurWewbpeVjQhzkjd78CrjWp2zeNsFjTig59Guo%2Fifaxr88ZsBOnyTMNwsyBpFyqSn87FdGrkDh9WGJPgORKKQXcMVQhtq2ys%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 74e3ac91189afac4-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   238

                                                Md5:    f5945c4d5e4298d818d50d70865f2857

                                                Sha1:   f35c3593933af2db1933093809ef78f45b9b7144

                                                Sha256: d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    bb4bdc4c3c6869c822618f0b9ef1bdc5

                                                Sha1:   6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d

                                                Sha256: eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac

                                        
                                            GET /ServiceLogin?continue=https://lh3.google.com/u/0/d/1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en HTTP/1.1 

                                        
                                            
Host: accounts.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.237

                                        
                                            HTTP/2 302 Found 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
x-frame-options: DENY 

                                        
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Mon, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
date: Wed, 21 Sep 2022 15:01:04 GMT 

                                        
                                            
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1861331958%3A1663772464972665&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWqpkKq7-b01EGnCyfIoWtCTKPG5Eqh42leDV-Qo-euEaxhqeeYhS0vCFb-NI4f8GtxSU_BjBQ 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-gvIEbv7eOje-vb2Ghbp0OA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk" 

                                        
                                            
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]} 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
content-length: 414 

                                        
                                            
server: GSE 

                                        
                                            
set-cookie: __Host-GAPS=1:6va5L9CEwPwxDY1_ncOugNg6heiWWg:V4PubV4rIIu5sf-g;Path=/;Expires=Fri, 20-Sep-2024 15:01:04 GMT;Secure;HttpOnly;Priority=HIGH 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (387)

                                                Size:   414

                                                Md5:    5cd1fa9276eeaf1293e9dadd3cb9640b

                                                Sha1:   a5ef844010b36dd219c5d7c62e7a5d33c41d5533

                                                Sha256: 7afcff67ebcfdd943f720a10653f13e78845ac8b94984ccf2b5907b3be60da88

                                        
                                            GET /v3/signin/identifier?dsh=S-1861331958%3A1663772464972665&continue=https%3A%2F%2Flh3.google.com%2Fu%2F0%2Fd%2F1l0frEmdXyaOzgdSdyzEFLxHRz8nZsme1xNv0ZMbsDI0%3Dw100&hl=en&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWqpkKq7-b01EGnCyfIoWtCTKPG5Eqh42leDV-Qo-euEaxhqeeYhS0vCFb-NI4f8GtxSU_BjBQ HTTP/1.1 

                                        
                                            
Host: accounts.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         216.58.207.237

                                        
                                            HTTP/2 403 Forbidden 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Mon, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
date: Wed, 21 Sep 2022 15:01:05 GMT 

                                        
                                            
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site 

                                        
                                            
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-kY7AGkKUjilJXY4tUZGHYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist 

                                        
                                            
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin 

                                        
                                            
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=* 

                                        
                                            
content-encoding: gzip 

                                        
                                            
server: ESF 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
set-cookie: NID=511=qHwFUNPfsU1QoO-hO-nhYsIkUX0KMx-uy7Z4udIQGyOYcY1RmqeQ98EULtHhUeHc3JawaxLm4DKRq2S-Y-7zHVZ48muz3ZvscaUEPukeAEpno0-SqfDT_L8oIRU2ZvLN01xB2MVY5kOU9t8R7peeZlWhAESYDm6uFqeDDi2Jc1A; expires=Thu, 23-Mar-2023 15:01:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	www.buttygirls.com/esus/multi/ms/7-216324/
IP	172.67.136.26 (United States)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-09-21 15:01:13 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	11
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (16)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.136.26

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: buttygirls.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (13)

Executed Evals (1)

#1 JavaScript::Eval (size: 1851) - SHA256: 6edade51d5afa9e60fdb1cad181990da5f0bc0d48042b70b9c5515266dd5f1bd

Executed Writes (0)

HTTP Transactions (49)

Overview

Domain Summary (16)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.136.26

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: buttygirls.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (13)

Executed Evals (1)

#1 JavaScript::Eval (size: 1851) - SHA256: 6edade51d5afa9e60fdb1cad181990da5f0bc0d48042b70b9c5515266dd5f1bd

Executed Writes (0)

HTTP Transactions (49)

Network Intrusion Detection Systems