r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15456
Expires: Sun, 11 Dec 2022 09:50:24 GMT
Date: Sun, 11 Dec 2022 05:32:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5377
Expires: Sun, 11 Dec 2022 07:02:25 GMT
Date: Sun, 11 Dec 2022 05:32:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 11 Dec 2022 05:08:29 GMT
content-type: application/json
age: 1459
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2266
Expires: Sun, 11 Dec 2022 06:10:34 GMT
Date: Sun, 11 Dec 2022 05:32:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6oZSgZcbhY5rdOYbFTAgNUDteBbydf8CmImDs1gmyk2Dnt5uiku5cQVjUp4W+UBz7xaNrheJX48=
x-amz-request-id: 2XQTAJZQQDXHEG68
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 11 Dec 2022 04:49:04 GMT
age: 2624
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
301 Moved Permanently 707 B URL HTTP/1.1 aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 11 Dec 2022 05:32:48 GMT
server: LiteSpeed
location: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 11 Dec 2022 05:07:55 GMT
age: 1493
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 44d4574b46375a2d215ae74bc5eae610
5257ed3edeb56231a9bee921671bb2e0c566000e
923454b28e4fa10085df809768a75c2d9f58f104afa016c06ccca7a26479073b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4218
Cache-Control: max-age=103460
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:48 GMT
Etag: "63944c2a-1d7"
Expires: Mon, 12 Dec 2022 10:17:08 GMT
Last-Modified: Sat, 10 Dec 2022 09:06:50 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash aaa7688116ed06c8a81c661fa6f8e1e5
0ad7fbf9a28f5e707716de925f498ee8fe2e49cc
bf8dbcf0515e276d8166b0ba745438bf0291a364cb81ed724bc166410d9a8ad6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 05:32:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 22:41:53 GMT
Expires: Thu, 15 Dec 2022 22:41:52 GMT
Etag: "0ad7fbf9a28f5e707716de925f498ee8fe2e49cc"
Cache-Control: max-age=406743,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 777bd7849950b4f3-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: deWCnDJ02/A+0JdKderz8A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lRq6RSRmSIhQd/dEV+e9Sel1AIs=
aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
200 OK 19 kB URL HTTP/2 aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Hash 020540abb3d1d01b2fe207d979d77954
8b7077e0ea6b7ba5e0d51c8b2d45e23a6d86bb8a
54df8a48cb009df3faeed5ecef814a7815a0771934831c359318ec5d74d3fab2
GET /leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-pingback: https://aneologism.com/leaked/xmlrpc.php
link: <https://aneologism.com/leaked/wp-json/>; rel="https://api.w.org/", <https://aneologism.com/leaked/wp-json/wp/v2/posts/8499>; rel="alternate"; type="application/json", <https://aneologism.com/leaked/?p=8499>; rel=shortlink
etag: "24276-1670708783;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 18551
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/ad-ace/assets/css/style.min.css?ver=1.3.21
200 OK 1.3 kB URL HTTP/2 aneologism.com/leaked/wp-content/plugins/ad-ace/assets/css/style.min.css?ver=1.3.21
IP
File type ASCII text, with very long lines (5379), with no line terminators
Hash dfefb172f1a1ac109710dc4891626ef3
7980f51a47b4eca12748462b3b783414eb660fa1
980766f73fee36e7ca6ada377efeaab9c901bf715459284aaffcd4aef4cd73ee
GET /leaked/wp-content/plugins/ad-ace/assets/css/style.min.css?ver=1.3.21 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: text/css
last-modified: Tue, 26 Jul 2022 08:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1278
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/css/classic-themes.min.css
200 OK 217 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/classic-themes.min.css
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /c/6.1.1/wp-includes/css/classic-themes.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
content-length: 217
last-modified: Tue, 25 Oct 2022 13:45:16 GMT
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/ad-ace/assets/css/shoppable-images-front.min.css?ver=1.3.21
200 OK 1.2 kB URL HTTP/2 aneologism.com/leaked/wp-content/plugins/ad-ace/assets/css/shoppable-images-front.min.css?ver=1.3.21
IP
File type ASCII text, with very long lines (6630), with no line terminators
Hash 8cbb9b62be4bc736799ad0ad5db1f42e
db2a46918b3963a0be3abb6c2131205748a791fa
b81e6f7d782eb2e62c40184b9e31a4a3d778d205470b147a34aeb2f75c8f1476
GET /leaked/wp-content/plugins/ad-ace/assets/css/shoppable-images-front.min.css?ver=1.3.21 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: text/css
last-modified: Tue, 26 Jul 2022 08:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1164
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/wp-socializer/public/css/wpsr.min.css?ver=7.4
200 OK 5.0 kB URL HTTP/2 aneologism.com/leaked/wp-content/plugins/wp-socializer/public/css/wpsr.min.css?ver=7.4
IP
File type ASCII text, with very long lines (15254)
Hash 8cbf7763a49b2d6996f88e885137d91e
a6624e7f9edd019fc97f115d6f0695d859b797f1
debeaef6e30f4c32a6363caf5b808619e931a15997ee121f5c0ca023cdf41944
GET /leaked/wp-content/plugins/wp-socializer/public/css/wpsr.min.css?ver=7.4 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: text/css
last-modified: Mon, 05 Dec 2022 22:56:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4999
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2
200 OK 8.8 kB URL HTTP/2 aneologism.com/leaked/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2
IP
File type ASCII text, with very long lines (739)
Hash b4588be584fdfc6f3c8997ce49940a0f
f1b50682d29aa349889fea0469a12ed31deb25cb
c609f96251492512f62d975430d7d977a812b78031dad2797d12dbdf34d562db
GET /leaked/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: text/css
last-modified: Fri, 12 Aug 2022 20:50:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8842
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.6/_inc/build/sharedaddy/sharing.min.js
200 OK 2.9 kB URL HTTP/2 c0.wp.com/p/jetpack/11.6/_inc/build/sharedaddy/sharing.min.js
IP
File type ASCII text, with very long lines (8517), with no line terminators
Hash 75fe8a202b4315aee6f288b9b5247f28
30e1fbf53125ebc840497efef77a72147009fc01
e9836653ecc10d1d6a655fa36fb44d0ace37c82ec8794b7bf13d8f4713281d80
GET /p/jetpack/11.6/_inc/build/sharedaddy/sharing.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 31 May 2022 10:02:49 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 8c8d810497dc403fc25333cc0ea36d94
498aad73b977f2fc6f0246282c082411f7a084e3
c339f555345421fa4ca75cb44723bc0fc1a64e69b619fe32c2fff89a52796786
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2756
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Last-Modified: Sun, 11 Dec 2022 04:46:53 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash a3853c04f9a2f998af742435483fcb95
482db763985a291747df48c610848e477aac51c0
72426ed15a463d845705f999129af9069538b7f1071108017ff4d0b9679eea9d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3215
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Last-Modified: Sun, 11 Dec 2022 04:39:14 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 74d82b5960e5e12af402b01fa10b0829
4b80baad99eaafa43a8a78dbcd8e0df4141b3dd7
328abed4a3d2ea1d745c64c5c40925ae5efca25846d2e1c8457a030347473b51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bbc2a332da069e062c141b6755efb07
e7cb19a32562264a6858b73f90caff1fe7887a29
5fad6e64460cced764a9d312bc67cf858e5b28e5b2e107dc790bc5973f1ecd1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-W8B27Z9XNN
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-W8B27Z9XNN
IP
File type ASCII text, with very long lines (22462)
Hash 0bc7f4ac5452c79c6d3bcc00646552dc
a3e4baacc383d72494bc8d158cbf60f57cd72eb4
971f0b6686ac0e251c8fb6b09a41cadf0c2b9c2ed4d91c8005a9846b23076989
GET /gtag/js?id=G-W8B27Z9XNN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Dec 2022 05:32:49 GMT
expires: Sun, 11 Dec 2022 05:32:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77818
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
200 OK 31 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 8924e09e32bf5224dcf655858fd59a24
e1d191d8588af5185afb6fc9c428e90d95288538
a57b6fdecad7f81786dde651e5fd2b2632799317cd5d8e667f37cf07e61fc3a0
GET /c/6.1.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 74d82b5960e5e12af402b01fa10b0829
4b80baad99eaafa43a8a78dbcd8e0df4141b3dd7
328abed4a3d2ea1d745c64c5c40925ae5efca25846d2e1c8457a030347473b51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aneologism.com/leaked/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
200 OK 6.7 kB URL HTTP/2 aneologism.com/leaked/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 97c6ce9b4936f66aa388ad33c39aba2d
3f14a7e78fbb4935cf35c20779dc2035531849a9
1eea453c424793fc56ef14093c10b373e3ca8388a70e847394e8084048c5ce38
GET /leaked/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: text/css
last-modified: Fri, 12 Aug 2022 20:50:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6658
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/ad-ace/assets/js/slideup.js?ver=1.3.21
200 OK 598 B URL HTTP/2 aneologism.com/leaked/wp-content/plugins/ad-ace/assets/js/slideup.js?ver=1.3.21
IP
Hash 7269e6547bb36d3df5fe785d4e92821e
2df2f91496d760a6821c9248928bc896d440fc14
73135c037f96325707402d347cc3b85470e21e07711693b8b26ff71feeaa62fa
GET /leaked/wp-content/plugins/ad-ace/assets/js/slideup.js?ver=1.3.21 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Tue, 26 Jul 2022 08:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 598
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/ad-ace/includes/shoppable-images/assets/js/shoppable-images-front.js?ver=1.3.21
200 OK 595 B URL HTTP/2 aneologism.com/leaked/wp-content/plugins/ad-ace/includes/shoppable-images/assets/js/shoppable-images-front.js?ver=1.3.21
IP
Hash eb7f893a901d759d5f963d538aae2b70
56ae9c95610a57526eada9dd23dcaa36d9aad2be
d83849d892e98d2b6234f3109091e82177d248c2b7b2b2d631b1bc96c0c8a18e
GET /leaked/wp-content/plugins/ad-ace/includes/shoppable-images/assets/js/shoppable-images-front.js?ver=1.3.21 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Tue, 26 Jul 2022 08:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 595
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/ad-ace/assets/js/coupons.js?ver=1.3.21
200 OK 548 B URL HTTP/2 aneologism.com/leaked/wp-content/plugins/ad-ace/assets/js/coupons.js?ver=1.3.21
IP
Hash 71233814cbc6bf637ada4851118eb8f2
d995101cc00c5c66fb45f5899c899ee67b649ad2
dea8aceb25aeb2050a800e40fb53609eb41e98416a48af91682a59b372bb4242
GET /leaked/wp-content/plugins/ad-ace/assets/js/coupons.js?ver=1.3.21 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Tue, 26 Jul 2022 08:30:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 548
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a3853c04f9a2f998af742435483fcb95
482db763985a291747df48c610848e477aac51c0
72426ed15a463d845705f999129af9069538b7f1071108017ff4d0b9679eea9d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3197
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Last-Modified: Sun, 11 Dec 2022 04:39:32 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bbc2a332da069e062c141b6755efb07
e7cb19a32562264a6858b73f90caff1fe7887a29
5fad6e64460cced764a9d312bc67cf858e5b28e5b2e107dc790bc5973f1ecd1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/assets.pinterest.com/images/pidgets/pinit_fg_en_rect_gray_20.png?w=678
200 OK 498 B URL HTTP/2 i0.wp.com/assets.pinterest.com/images/pidgets/pinit_fg_en_rect_gray_20.png?w=678
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c37c4702f51c7650bdffa08744fc7839
af5329ff155019e3a421cde90b0e2be502a59449
94fc10c5481f61b1fc887d64da9d548ee1647b687ba6d86724e0d556e79478d1
GET /assets.pinterest.com/images/pidgets/pinit_fg_en_rect_gray_20.png?w=678 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: image/webp
content-length: 498
last-modified: Tue, 14 Jun 2022 07:04:09 GMT
expires: Thu, 13 Jun 2024 19:04:09 GMT
cache-control: public, max-age=63115200
link: <http://assets.pinterest.com/images/pidgets/pinit_fg_en_rect_gray_20.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b046b0666ab491f4"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2
200 OK 11 kB URL HTTP/2 aneologism.com/leaked/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2
IP
File type ASCII text, with very long lines (21960)
Hash 2eadad08e686f6256300f68abbc9e781
79d828e10925973c9d60cc8465971233e0abdbba
11bc9f9824f106fcd705a41ffad0ec8ab8d6515ee403b9b0e4de85545acbcea7
GET /leaked/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Fri, 12 Aug 2022 20:50:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11268
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 4.6 kB URL HTTP/2 aneologism.com/leaked/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash 0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
GET /leaked/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 15:26:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
i0.wp.com/aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png?resize=678%2C381&ssl=1
200 OK 154 kB URL HTTP/2 i0.wp.com/aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png?resize=678%2C381&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 154 kB (154200 bytes)
Hash 8894cd2eb463027d2e6454272e9bef5b
f112a5d4090cf0a74b356b58b18ba8e121a6074b
9384ea0a0cf00ad77dfdde9afeabfb5f51cfc9816da56675bf818a9661952aa2
GET /aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png?resize=678%2C381&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: image/webp
content-length: 154200
last-modified: Sat, 10 Dec 2022 21:54:08 GMT
expires: Tue, 10 Dec 2024 09:54:08 GMT
cache-control: public, max-age=63115200
link: <https://aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png>; rel="canonical"
x-content-type-options: nosniff
etag: "1915e9fd02eb71e7"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1670280977
200 OK 2.8 kB URL HTTP/2 aneologism.com/leaked/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1670280977
IP
Hash 2cb66ffd8e98576a2e147db106723a08
3dd1a7e79e5daf63e15cdbb2d589c258940c8c3b
cfbc17480500b6dbf29ff10b37706e44f4aea399418084e90cdc0491d66fdf00
GET /leaked/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1670280977 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 22:56:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2819
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
aneologism.com/leaked/wp-content/plugins/wp-socializer/public/js/wp-socializer.min.js?ver=7.4
200 OK 2.9 kB URL HTTP/2 aneologism.com/leaked/wp-content/plugins/wp-socializer/public/js/wp-socializer.min.js?ver=7.4
IP
File type ASCII text, with very long lines (9303), with no line terminators
Hash 3cde831d2f7fbd0c4d8ff82f9d2b59f6
ff48761d3a80a7068954a1864106d4adb88991c9
08a401d28e50547371f62349af25b08f926f571a552888eae442d1ab435afb85
GET /leaked/wp-content/plugins/wp-socializer/public/js/wp-socializer.min.js?ver=7.4 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:49 GMT
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 22:56:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2930
date: Sun, 11 Dec 2022 05:32:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
i0.wp.com/aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png?resize=768%2C585&ssl=1
200 OK 259 kB URL HTTP/2 i0.wp.com/aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png?resize=768%2C585&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 259 kB (259146 bytes)
Hash 61539d60858ed00b92351d74306c9ab6
b92d526d9654d0c0ce51b6d41822ab377283d509
88562f3d2a2e23b03f436578b5c046db1c184ec148a08d31bdcfbebf0d07f5a9
GET /aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png?resize=768%2C585&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: image/webp
content-length: 259146
last-modified: Sun, 11 Dec 2022 05:32:49 GMT
expires: Tue, 10 Dec 2024 17:32:49 GMT
cache-control: public, max-age=63115200
link: <https://aneologism.com/leaked/wp-content/uploads/2022/12/image-13.png>; rel="canonical"
x-content-type-options: nosniff
etag: "24162f9fb6536ebb"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15750
Expires: Sun, 11 Dec 2022 09:55:20 GMT
Date: Sun, 11 Dec 2022 05:32:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15750
Expires: Sun, 11 Dec 2022 09:55:20 GMT
Date: Sun, 11 Dec 2022 05:32:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15750
Expires: Sun, 11 Dec 2022 09:55:20 GMT
Date: Sun, 11 Dec 2022 05:32:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5de5d319f43d9c9c641419d96655541f
cde4c7fa0145d3645af17e34c83c63c08f76a076
fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7557
x-amzn-requestid: e68bff96-83e0-471c-95ed-d9773d2354a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c82_MHywoAMFe_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6395052d-23c53ea949b7266822b23787;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 22:16:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oe5TA8wzsxvsnupvCvyDKwfvJOxK3SLZsexG1tPiTWu3gVXBCXAhSw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 04:22:56 GMT
age: 4194
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ef6b75d-8f79-40b3-b1dd-ab0caa833119.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ef6b75d-8f79-40b3-b1dd-ab0caa833119.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b4cdf7ea5a907bcc30f80b24da0bfb1
4cd560ae03884699f3106a89964fa5f080032c27
bf99c79318c810799becd698b9b279ac32c8b5f613991d2522a6bc5bff3f80fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ef6b75d-8f79-40b3-b1dd-ab0caa833119.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9176
x-amzn-requestid: 1349cc8e-7545-4708-89a8-ac4f661bbd0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cqFFsEYWoAMF2ZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d8224-1100a1350760a02b76b8b539;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 05:31:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -KvBpM4jxh4RC2FuOrir_Gv1MW9o55fX7goUBPXzowMy0JJAcV4dQw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 05:13:23 GMT
age: 1167
etag: "4cd560ae03884699f3106a89964fa5f080032c27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.6/css/jetpack.css
200 OK 21 kB URL HTTP/2 c0.wp.com/p/jetpack/11.6/css/jetpack.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 5666f98a021001ad158b114f2b90b9c6
f305d7cac9b70c818b541f2e4bb6122ce5d9c978
9ee8f43f3376a2dc9fe5c4f6eea993b8a370f7015c7418583430df094b1247c5
GET /p/jetpack/11.6/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 28 Nov 2022 20:32:01 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SG-8rL_rUN3MpXHhkAaHmIqKf7mSHtv0kEAkBOAIPcqq755Qh-mc3Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 21:52:26 GMT
age: 27624
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b221401-6cb1-4300-a388-1a183cc94fc4.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b221401-6cb1-4300-a388-1a183cc94fc4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9089159256f8eb28d4c97a2adbec054a
f1f6703fc2b39f1b8fbd6fe53c7aa34d8b65505c
5651cd5b608aa3d87ecf7cfd78d15bc5a26213ea151c700eb700b10aa26b4ed7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b221401-6cb1-4300-a388-1a183cc94fc4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7657
x-amzn-requestid: e2e1a769-7fb5-482d-8f9e-6c0be0e01696
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUkoFR-IAMF1MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e67b7-42e2ab9f04020014757e8f4d;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:50:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gAKavDW6aKd5IgHLx3uelVvvXJwvjHH32qyeh7Jc_qlsWTNvevw78A==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 15:00:29 GMT
age: 52341
etag: "f1f6703fc2b39f1b8fbd6fe53c7aa34d8b65505c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F39e91c32-e507-4bcf-9b50-3aaa626266fc.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F39e91c32-e507-4bcf-9b50-3aaa626266fc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65a22dbdea1af7cf4c0000425a68d82e
cdd2b37a8e80835e25faac6d7d75e45c59f8c242
0fe96713b65b152ab441072f81d523be888b901f28b301ca704916713e0b62b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F39e91c32-e507-4bcf-9b50-3aaa626266fc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7168
x-amzn-requestid: b9ec183e-359a-449a-8dea-85cf695b5cef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xWaF7wIAMFteQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc28-6d1b8b552acfd01c27b82a71;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NT22cyl6OzxMqiv_4fPY-6c7UGssqAHXwvn-ujZKHir_KQWTuz7WAA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 21:52:49 GMT
age: 27601
etag: "cdd2b37a8e80835e25faac6d7d75e45c59f8c242"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 4.5 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
IP
File type ASCII text, with very long lines (11126)
Hash 121491b5fb40403e54db53d80b9c011d
b2a5e06e9f2b7a72e76876a41aa3072a2c0714d8
854149bf13aca2621d94328569229c2c48e7eb7eacca8b2b6497999719d408a8
GET /c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
revenuetonightperforming.com/5aee67c7aefb0a3dd872b0e9a2ad3c4b/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/5aee67c7aefb0a3dd872b0e9a2ad3c4b/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Hash 8506572ea98b7deed775fd14c13efeb5
acd8fbdf314ae088b2ee2d3c3df17cd4cbf030b8
d9f01a13a0b973503780de63b0d0600f9e9b687303b401d9ad0380e015894a29
GET /5aee67c7aefb0a3dd872b0e9a2ad3c4b/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 37c6a45aa025540b2b2eb96fd59788e6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
revenuetonightperforming.com/36531d5c08e43086f1897875f3357cc1/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/36531d5c08e43086f1897875f3357cc1/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26959), with no line terminators
Hash 45bcbba8ce96721f8bb736411f183572
7f1c897a65fa305033330774a3d5c609e2243fef
0ceffcd8ed0117e4d9ddae05f0e9576cd8c7e19e4d2df7527acc6fa7bb4ddb8b
GET /36531d5c08e43086f1897875f3357cc1/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 95c119c6afb2e1beb6548991ce38c900
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8af7d94cfd394aebb936e35ebd76f2b4
9bc2af030a485afda6bf376ed390d719bed54fab
7ff67179003bb029636427908b99a2bf17022b80ecd8f08d181f0f0ba6256e55
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117394
Date: Sun, 11 Dec 2022 05:32:50 GMT
Etag: "63948a18-1d7"
Expires: Mon, 12 Dec 2022 14:09:24 GMT
Last-Modified: Sat, 10 Dec 2022 13:31:04 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fdvQCdUF18MSBtFnZHJoDHwjD3QNYraZSyWTnz_qh3qC6CgDdU6WSg==
Age: 2300
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 2cf3f4cbba065930667add94d1e23af8
bceb4284f6253afc923a6068559a3900541c6750
529e435471c970185fbf99ba19b43639adfceffcb4e1e1707a54b7153d8505a4
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://aneologism.com
access-control-allow-credentials: true
set-cookie: uid_id2=7a895007-028b-4b2c-8f03-cd12271d5174:2:1; expires=Wed, 08 Dec 2032 05:32:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 4bece43acdabf2308edf16c697fc79e7
694baa85fbb4c8badf042a9fed77ee15aebb9bc9
e7dd37ba72c1338b29c5a0d4757c80a620756b42440f0b920b289ae95f4905dd
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://aneologism.com
access-control-allow-credentials: true
set-cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Wed, 08 Dec 2032 05:32:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
revenuetonightperforming.com/d3d6c60e59c88611fb31e42ba8a47fa1/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/d3d6c60e59c88611fb31e42ba8a47fa1/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26967), with no line terminators
Hash 1e1bbe83ee24475d1671bb9ccda46abf
7475d8bd23d600e6e7743fdaa97a80838196ab72
3015a2e4d9bd9857f5030195bfe8266b1b4444d4f4345d5d178cc67d5ab050c8
GET /d3d6c60e59c88611fb31e42ba8a47fa1/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cdbeed770f43abf2daa7798cd4ceee90
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
revenuetonightperforming.com/37f4e7c4dcdb7b8cfebbc7e29d796862/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/37f4e7c4dcdb7b8cfebbc7e29d796862/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26967), with no line terminators
Hash 9dde2881aeb7dfc4dcda499629e899c4
4f25811061bf97dc1cc61b578bfb70e8fc4d2d93
583b6a6ac4d8d945898260867a0ed13c43db7944de95f97831fddc3ed0885996
GET /37f4e7c4dcdb7b8cfebbc7e29d796862/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a3431dfeb3c36aa5bff393055aac54c2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a7767e45b676a6b8de9a31d6abdf44e9
bf95d279b515fd11a68b22ee3220a2590dc8f82b
04b1bace4c397a69dcc451f82d25ff518c282e5138141f4a65bc6985d9f13db5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04B1BACE4C397A69DCC451F82D25FF518C282E5138141F4A65BC6985D9F13DB5"
Last-Modified: Sun, 11 Dec 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14909
Expires: Sun, 11 Dec 2022 09:41:20 GMT
Date: Sun, 11 Dec 2022 05:32:51 GMT
Connection: keep-alive
revenuetonightperforming.com/80ddc576c91a295266e0307c66521a5c/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/80ddc576c91a295266e0307c66521a5c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26933), with no line terminators
Hash fc1a3e914dce2504b843d2919fe56934
f226dab75350f675ba6dc39ce1b2dbf9dfada207
7b47caee8b2f5c337570456f4b27904d537a12ffb9e47e6e061fa9c1109adfb3
GET /80ddc576c91a295266e0307c66521a5c/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6dbc0bcdee4c9a9ca1be884d034adde7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 610a5099d71ea9dbbdf7d480f220f812
bbae55458b1afc794373778748631e55e1cafe48
7b9095f8efefb1124c9b62078700c3864c36d5e6fe6e9a6a007a46efe02625c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B9095F8EFEFB1124C9B62078700C3864C36D5E6FE6E9A6A007A46EFE02625C2"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20809
Expires: Sun, 11 Dec 2022 11:19:40 GMT
Date: Sun, 11 Dec 2022 05:32:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30f11462333fc35d7561d81e16c39073
52109e02981889cb701cf4a83d8abe89c13ce1aa
ea0ae9e41454e65dd6a7f9e48197c453e0d85dd80976c2baefd7432f83375f84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA0AE9E41454E65DD6A7F9E48197C453E0D85DD80976C2BAEFD7432F83375F84"
Last-Modified: Fri, 09 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14937
Expires: Sun, 11 Dec 2022 09:41:48 GMT
Date: Sun, 11 Dec 2022 05:32:51 GMT
Connection: keep-alive
revenuetonightperforming.com/8f20b6bda8d6b58b2c900fda60660e56/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/8f20b6bda8d6b58b2c900fda60660e56/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Hash 8506572ea98b7deed775fd14c13efeb5
acd8fbdf314ae088b2ee2d3c3df17cd4cbf030b8
d9f01a13a0b973503780de63b0d0600f9e9b687303b401d9ad0380e015894a29
GET /8f20b6bda8d6b58b2c900fda60660e56/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c23ad80378b386b2d130d6354a28c2e6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
jewelbeeperinflection.com/watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 jewelbeeperinflection.com/watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1 HTTP/1.1
Host: jewelbeeperinflection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://jewelbeeperinflection.com/watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1&shu=d0942f7f6dca01dfbfdab0109f959c4f0cd100425a6c379fa40134af582c8498a9177b5fea256e627b7f2743bc8a425aea02ea342b8cae28727ca8d69147803f73249df43e92d90625b578ec7bbc6c69ed95140fc97f8e152de906c5b30352&pst=1670736831&rmtc=t
Set-Cookie: u_pl=17570601; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.A3xYV8GP0tcvzk9YaEivAaSKI4V7VN2ISPHpywHMJPE; expires=Sun, 11 Dec 2022 05:33:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1963699cee499d2c4f75f0b02b029bd3
Strict-Transport-Security: max-age=0; includeSubdomains
swelltomatoesguess.com/watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 swelltomatoesguess.com/watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: swelltomatoesguess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://swelltomatoesguess.com/watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=e96f5d00f45bf8c0e35768d8aca42f3f8ddd69e2aeba944e938eba672922160accf860875d56c051bf2b69122495a525de9fa4c7225c7966a61394ccb6db44ca626d4fdbee875dfdba0695b92d158aca5c2a79ccf79ca6e7be3eb783b42d9f07&pst=1670736831&rmtc=t
Set-Cookie: u_pl=17570585; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.hggD9SJJpF3XIHQVDoAQS_-A31rMlVx41s8Co9Au6pI; expires=Sun, 11 Dec 2022 05:33:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1a5e0f15abda30220384f95da1ee2d13
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 784e0439ec6be7b4ca1312cd7cfae85b
18dad06db451855d3009aa3207d868895c577666
6369a3e27c976088b4dda95da9422fdb201979fedfcb4edf9db60089fd9ea53b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.wp.com/p/jetpack/11.6/_inc/build/photon/photon.min.js
200 OK 788 B URL HTTP/2 c0.wp.com/p/jetpack/11.6/_inc/build/photon/photon.min.js
IP
File type ASCII text, with very long lines (685), with no line terminators
Hash 4196e03cb359f221f02e95292884c975
57996ebd2491dee23f376cb21a9fc8e94b0454e5
fb2e30eedbf130ee8f2244a9bda04d891dc291a801b1fc7d88f4945a9c0c7574
GET /p/jetpack/11.6/_inc/build/photon/photon.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e2daa1c76389a37641f9efb31588939a
3714817c3552ee291748386f8b2717378b648a23
c640e8e08872ac5ccc59a21436b6aa2ee0d023e47cff73366a7e36a873045085
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C640E8E08872AC5CCC59A21436B6AA2EE0D023E47CFF73366A7E36A873045085"
Last-Modified: Sun, 11 Dec 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14898
Expires: Sun, 11 Dec 2022 09:41:09 GMT
Date: Sun, 11 Dec 2022 05:32:51 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 784e0439ec6be7b4ca1312cd7cfae85b
18dad06db451855d3009aa3207d868895c577666
6369a3e27c976088b4dda95da9422fdb201979fedfcb4edf9db60089fd9ea53b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:41 GMT
expires: Tue, 05 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 470410
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
swelltomatoesguess.com/watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 swelltomatoesguess.com/watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: swelltomatoesguess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Cookie: u_pl=17570585; ain=eyJhbGciOiJIUzI1NiJ9.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.hggD9SJJpF3XIHQVDoAQS_-A31rMlVx41s8Co9Au6pI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://swelltomatoesguess.com/watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=b8e62bafa8f5c04000820234ebca9f778c7aef0c585d0c1a8e1ba38ed821813cb67f3b9eab9d51da02d83f97a8faf63d3dd219a67493dadd953ef82693863bf9ff466cd3c8c244e2fa4d451771db31d93e45254a40a6e77825ca6a54cc04ef15e2&pst=1670736831&rmtc=t
Set-Cookie: u_pl=17570585,17570588; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.rP-QD0MRARNmFCEGc7xQlNe-Rxr-T81akRsCiRQbSSw; expires=Sun, 11 Dec 2022 05:33:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d80f0841d222e0781366a37894f2f691
Strict-Transport-Security: max-age=0; includeSubdomains
patrondescendantprecursor.com/watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 patrondescendantprecursor.com/watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: patrondescendantprecursor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://patrondescendantprecursor.com/watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=c7d7afd75de10ea005d0876ddbdf6f00ae5ba4d2b24f87d628454907a4e538def35e155a2039d5862b539898666becf8745399f4bc35b0d1948cf00bc818246faf65d0d1a175a24286163939c153e41100cf2e6598eeda749570f576f2b7&pst=1670736831&rmtc=t
Set-Cookie: u_pl=17570597; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT10d2l0dGVyXHUwMDI2dXRtX21lZGl1bT1zb2NpYWxcdTAwMjZ1dG1fY2FtcGFpZ249UmV2aXZlT2xkUG9zdCJ9fQ.8NFcO5GqyKs_Kzo588ZJlc1ntpb5RPr3UEf9zzCDKiY; expires=Sun, 11 Dec 2022 05:33:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f112626c91ee8db492833a83f10487dd
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 784e0439ec6be7b4ca1312cd7cfae85b
18dad06db451855d3009aa3207d868895c577666
6369a3e27c976088b4dda95da9422fdb201979fedfcb4edf9db60089fd9ea53b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
revenuetonightperforming.com/5aee67c7aefb0a3dd872b0e9a2ad3c4b/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/5aee67c7aefb0a3dd872b0e9a2ad3c4b/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26961), with no line terminators
Hash 6198c2845a345936599942215798e653
bb0fc108db7b7c944b60cf08914b660507f3bce9
f817bf59ba0f66fc7254e090c21cd90e59e7f2aa04cc8eec820af58619561364
GET /5aee67c7aefb0a3dd872b0e9a2ad3c4b/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 34b940d24dce5ef9c6dc7d0743a5cf96
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
jewelbeeperinflection.com/watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1&shu=d0942f7f6dca01dfbfdab0109f959c4f0cd100425a6c379fa40134af582c8498a9177b5fea256e627b7f2743bc8a425aea02ea342b8cae28727ca8d69147803f73249df43e92d90625b578ec7bbc6c69ed95140fc97f8e152de906c5b30352&pst=1670736831&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 jewelbeeperinflection.com/watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1&shu=d0942f7f6dca01dfbfdab0109f959c4f0cd100425a6c379fa40134af582c8498a9177b5fea256e627b7f2743bc8a425aea02ea342b8cae28727ca8d69147803f73249df43e92d90625b578ec7bbc6c69ed95140fc97f8e152de906c5b30352&pst=1670736831&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2487)
Hash cb6b6dcc47b9d7602feed307d821a4a5
a006562640f10b9b9fdabed3e8bbe58afa2e1be5
1d8f48d3c7d0bf4427ba837e2fb6c19814e3c5df316eecdd887679f8b722097d
GET /watch.1492643761150.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=7a895007-028b-4b2c-8f03-cd12271d5174%3A2%3A1&shu=d0942f7f6dca01dfbfdab0109f959c4f0cd100425a6c379fa40134af582c8498a9177b5fea256e627b7f2743bc8a425aea02ea342b8cae28727ca8d69147803f73249df43e92d90625b578ec7bbc6c69ed95140fc97f8e152de906c5b30352&pst=1670736831&rmtc=t HTTP/1.1
Host: jewelbeeperinflection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570601; ain=eyJhbGciOiJIUzI1NiJ9.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.A3xYV8GP0tcvzk9YaEivAaSKI4V7VN2ISPHpywHMJPE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=7a895007-028b-4b2c-8f03-cd12271d5174:2:1; expires=Sun, 18 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 33cd74d2a2ff8547eb5626421af58841
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
swelltomatoesguess.com/watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=e96f5d00f45bf8c0e35768d8aca42f3f8ddd69e2aeba944e938eba672922160accf860875d56c051bf2b69122495a525de9fa4c7225c7966a61394ccb6db44ca626d4fdbee875dfdba0695b92d158aca5c2a79ccf79ca6e7be3eb783b42d9f07&pst=1670736831&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 swelltomatoesguess.com/watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=e96f5d00f45bf8c0e35768d8aca42f3f8ddd69e2aeba944e938eba672922160accf860875d56c051bf2b69122495a525de9fa4c7225c7966a61394ccb6db44ca626d4fdbee875dfdba0695b92d158aca5c2a79ccf79ca6e7be3eb783b42d9f07&pst=1670736831&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2474)
Hash 688abf4d2fb1cfb521ed42985f9179d4
5e7aae86763ba6f05c3f632499dac52518c820ad
cbd7a750fc3a5c12922641941ea9cc49f8f087938116adbbbe924593f37733d3
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1322073441020.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=e96f5d00f45bf8c0e35768d8aca42f3f8ddd69e2aeba944e938eba672922160accf860875d56c051bf2b69122495a525de9fa4c7225c7966a61394ccb6db44ca626d4fdbee875dfdba0695b92d158aca5c2a79ccf79ca6e7be3eb783b42d9f07&pst=1670736831&rmtc=t HTTP/1.1
Host: swelltomatoesguess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570585,17570588; ain=eyJhbGciOiJIUzI1NiJ9.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.rP-QD0MRARNmFCEGc7xQlNe-Rxr-T81akRsCiRQbSSw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 31fab0a6747c678dbedda8ba6a19886f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 933e279349f15eddc210c164699dfe30
94268ee7efcab894ba0ee2a448ef8f5134cbfc1f
5c4cd4c966af4a53a24f11ef58eb571755e30484b12bf52ba7fab0c51dd87d63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C4CD4C966AF4A53A24F11EF58EB571755E30484B12BF52BA7FAB0C51DD87D63"
Last-Modified: Sun, 11 Dec 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14949
Expires: Sun, 11 Dec 2022 09:42:00 GMT
Date: Sun, 11 Dec 2022 05:32:51 GMT
Connection: keep-alive
patrondescendantprecursor.com/watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=c7d7afd75de10ea005d0876ddbdf6f00ae5ba4d2b24f87d628454907a4e538def35e155a2039d5862b539898666becf8745399f4bc35b0d1948cf00bc818246faf65d0d1a175a24286163939c153e41100cf2e6598eeda749570f576f2b7&pst=1670736831&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 patrondescendantprecursor.com/watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=c7d7afd75de10ea005d0876ddbdf6f00ae5ba4d2b24f87d628454907a4e538def35e155a2039d5862b539898666becf8745399f4bc35b0d1948cf00bc818246faf65d0d1a175a24286163939c153e41100cf2e6598eeda749570f576f2b7&pst=1670736831&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2553)
Hash 080319403e5fe01d0442e2d64640edd2
de0855fb8a9e6fc7f86085a2e76a128cb1b6becf
8dfdd5391295a3179c3697855f899053e15307e574eaf5eab928897524bab42d
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.325576426416.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=c7d7afd75de10ea005d0876ddbdf6f00ae5ba4d2b24f87d628454907a4e538def35e155a2039d5862b539898666becf8745399f4bc35b0d1948cf00bc818246faf65d0d1a175a24286163939c153e41100cf2e6598eeda749570f576f2b7&pst=1670736831&rmtc=t HTTP/1.1
Host: patrondescendantprecursor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570597; ain=eyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT10d2l0dGVyXHUwMDI2dXRtX21lZGl1bT1zb2NpYWxcdTAwMjZ1dG1fY2FtcGFpZ249UmV2aXZlT2xkUG9zdCJ9fQ.8NFcO5GqyKs_Kzo588ZJlc1ntpb5RPr3UEf9zzCDKiY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv25=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs25=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b5fef79fbd461c64f7fffdc34423aac5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
politenesscalmantiquarian.com/watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 politenesscalmantiquarian.com/watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: politenesscalmantiquarian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://politenesscalmantiquarian.com/watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=cf2e7bd69436f7accc2452c352c3df9b9450a7ddf84cdda7af134f6499644591ebf9bb4243c15bd783442f452231af47ce667193fd843dcd2df7d62ad04549154e7293ab16f7fdd636f4d1a452d09d2abc86ba3d&pst=1670736831&rmtc=t
Set-Cookie: u_pl=17570593; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.iAuTZ5a9VM9cblU6r9ViPn7GSsQRNHooPaAp7G0MWvw; expires=Sun, 11 Dec 2022 05:33:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 51a6a146135d6386d7baa1180e44abee
Strict-Transport-Security: max-age=0; includeSubdomains
c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
200 OK 17 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
IP
File type ASCII text, with very long lines (47826)
Hash 538e0de40dc420c70abe1a56dfa9b85a
50f9b3dbfc973379cd01ee548d3b51f795b84c4e
dd7e03e96455337bbbee3f7c877f66a4cc2c9c3e74d1e9e5c835e5263640a7a5
GET /c/6.1.1/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 11 Nov 2022 14:56:45 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
revenuetonightperforming.com/36531d5c08e43086f1897875f3357cc1/invoke.js
200 OK 87 kB URL HTTP/1.1 revenuetonightperforming.com/36531d5c08e43086f1897875f3357cc1/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 8b7be4de0b39cee8bea37d98e19eeaa6
899181fe4374f02b617d276009dc9f4a15587eb4
61bcf2836b5ac317a32085e79c4258ba0313bdd5480cdfce71ff24387cfcbfe1
GET /36531d5c08e43086f1897875f3357cc1/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 13459833a3b2a5126fe4597ca42121b5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
swelltomatoesguess.com/watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=b8e62bafa8f5c04000820234ebca9f778c7aef0c585d0c1a8e1ba38ed821813cb67f3b9eab9d51da02d83f97a8faf63d3dd219a67493dadd953ef82693863bf9ff466cd3c8c244e2fa4d451771db31d93e45254a40a6e77825ca6a54cc04ef15e2&pst=1670736831&rmtc=t
200 OK 84 kB URL HTTP/1.1 swelltomatoesguess.com/watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=b8e62bafa8f5c04000820234ebca9f778c7aef0c585d0c1a8e1ba38ed821813cb67f3b9eab9d51da02d83f97a8faf63d3dd219a67493dadd953ef82693863bf9ff466cd3c8c244e2fa4d451771db31d93e45254a40a6e77825ca6a54cc04ef15e2&pst=1670736831&rmtc=t
IP
Hash e48537d0262c3ce089758951d36883bf
601117afebb37779a89835f7c228e25e4a29a5d9
e31c95f8adc155efe6ddc36983e2001295c4075315174833e1921dbf2f973563
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.614393129847.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=b8e62bafa8f5c04000820234ebca9f778c7aef0c585d0c1a8e1ba38ed821813cb67f3b9eab9d51da02d83f97a8faf63d3dd219a67493dadd953ef82693863bf9ff466cd3c8c244e2fa4d451771db31d93e45254a40a6e77825ca6a54cc04ef15e2&pst=1670736831&rmtc=t HTTP/1.1
Host: swelltomatoesguess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570585,17570588; ain=eyJhbGciOiJIUzI1NiJ9.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.rP-QD0MRARNmFCEGc7xQlNe-Rxr-T81akRsCiRQbSSw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv32=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs32=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0ec4d433af7c16795772e86d0a894eb4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
politenesscalmantiquarian.com/watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=cf2e7bd69436f7accc2452c352c3df9b9450a7ddf84cdda7af134f6499644591ebf9bb4243c15bd783442f452231af47ce667193fd843dcd2df7d62ad04549154e7293ab16f7fdd636f4d1a452d09d2abc86ba3d&pst=1670736831&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 politenesscalmantiquarian.com/watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=cf2e7bd69436f7accc2452c352c3df9b9450a7ddf84cdda7af134f6499644591ebf9bb4243c15bd783442f452231af47ce667193fd843dcd2df7d62ad04549154e7293ab16f7fdd636f4d1a452d09d2abc86ba3d&pst=1670736831&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2556)
Hash 59c5da8c7b63d92e5c3ec5c1e1716033
925f557d6ea6795081a1b3758b46d98def73cc46
43432569c40e37c88a18704d741ceb4b48984fd99556f3140659356d84d6a284
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1034029571560.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=cf2e7bd69436f7accc2452c352c3df9b9450a7ddf84cdda7af134f6499644591ebf9bb4243c15bd783442f452231af47ce667193fd843dcd2df7d62ad04549154e7293ab16f7fdd636f4d1a452d09d2abc86ba3d&pst=1670736831&rmtc=t HTTP/1.1
Host: politenesscalmantiquarian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570593; ain=eyJhbGciOiJIUzI1NiJ9.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.iAuTZ5a9VM9cblU6r9ViPn7GSsQRNHooPaAp7G0MWvw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
pdhtkv26=true; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
uncs26=1; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 561f3f3ac695cf4e78da8003999b462b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
sitepork.com/watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 sitepork.com/watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: sitepork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://sitepork.com/watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=a9ca66dd407909913dc4a98552ef72101ec4d79f11e163bd025ee3480108ba1d237d04778c22e541fb4a8839efbee15b58c9e9690872f854f488e49c2857d15748b25c566da1261dd18b3dfaf4cb39b7aec5c6b6a8fdb93447452b8564&pst=1670736831&rmtc=t
Set-Cookie: u_pl=17570577; expires=Mon, 12 Dec 2022 05:32:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sn1xhL1X3pOOV9cclbQTsVUlMUiyclUDUdjGTGdEKH4; expires=Sun, 11 Dec 2022 05:33:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c92557f9aed9314cdd1d4f154b23e2af
Strict-Transport-Security: max-age=0; includeSubdomains
revenuetonightperforming.com/d3d6c60e59c88611fb31e42ba8a47fa1/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/d3d6c60e59c88611fb31e42ba8a47fa1/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26961), with no line terminators
Hash 6198c2845a345936599942215798e653
bb0fc108db7b7c944b60cf08914b660507f3bce9
f817bf59ba0f66fc7254e090c21cd90e59e7f2aa04cc8eec820af58619561364
GET /d3d6c60e59c88611fb31e42ba8a47fa1/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1389e89a23a81f9c2323c6d2b6f991f0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51c8b68f05eb0613ea1e49ad9239047d
c0fb28d2fdb6102cd013dbd3792bc09b4c61a8bd
e2862f2da29d77f660ac3095de6c4863e01bafdfedbcc7d34c0d242cf0bf6c38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2862F2DA29D77F660AC3095DE6C4863E01BAFDFEDBCC7D34C0D242CF0BF6C38"
Last-Modified: Sun, 11 Dec 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14136
Expires: Sun, 11 Dec 2022 09:28:28 GMT
Date: Sun, 11 Dec 2022 05:32:52 GMT
Connection: keep-alive
revenuetonightperforming.com/37f4e7c4dcdb7b8cfebbc7e29d796862/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/37f4e7c4dcdb7b8cfebbc7e29d796862/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26933), with no line terminators
Hash fc1a3e914dce2504b843d2919fe56934
f226dab75350f675ba6dc39ce1b2dbf9dfada207
7b47caee8b2f5c337570456f4b27904d537a12ffb9e47e6e061fa9c1109adfb3
GET /37f4e7c4dcdb7b8cfebbc7e29d796862/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f59d9649757602fd5df8e5bf2511a23a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
sitepork.com/watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=a9ca66dd407909913dc4a98552ef72101ec4d79f11e163bd025ee3480108ba1d237d04778c22e541fb4a8839efbee15b58c9e9690872f854f488e49c2857d15748b25c566da1261dd18b3dfaf4cb39b7aec5c6b6a8fdb93447452b8564&pst=1670736831&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 sitepork.com/watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=a9ca66dd407909913dc4a98552ef72101ec4d79f11e163bd025ee3480108ba1d237d04778c22e541fb4a8839efbee15b58c9e9690872f854f488e49c2857d15748b25c566da1261dd18b3dfaf4cb39b7aec5c6b6a8fdb93447452b8564&pst=1670736831&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2438)
Hash 80cf1ebe8a374f8031ce7d2496ce8da8
82ceed43f6c97e7641f7e37da3607a5eeb55adff
47cd8576e7fcf50c83b09ae9c812cc1ffab18c4b4da350a197a688f999a74f01
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.581974306518.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=a9ca66dd407909913dc4a98552ef72101ec4d79f11e163bd025ee3480108ba1d237d04778c22e541fb4a8839efbee15b58c9e9690872f854f488e49c2857d15748b25c566da1261dd18b3dfaf4cb39b7aec5c6b6a8fdb93447452b8564&pst=1670736831&rmtc=t HTTP/1.1
Host: sitepork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570577; ain=eyJhbGciOiJIUzI1NiJ9.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.sn1xhL1X3pOOV9cclbQTsVUlMUiyclUDUdjGTGdEKH4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv27=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs27=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f281e0be0e05dacaa16a7345978e7d36
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
aneologism.com/leaked/wp-content/themes/mh-magazine-lite/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 aneologism.com/leaked/wp-content/themes/mh-magazine-lite/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /leaked/wp-content/themes/mh-magazine-lite/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://aneologism.com/leaked/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 18 Dec 2022 05:32:51 GMT
content-type: font/woff2
last-modified: Fri, 12 Aug 2022 20:50:58 GMT
accept-ranges: bytes
content-length: 77160
date: Sun, 11 Dec 2022 05:32:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
stuckencouragedscalpel.com/watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 stuckencouragedscalpel.com/watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: stuckencouragedscalpel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://stuckencouragedscalpel.com/watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d3d01d46cb46221bc8e90ef30a8fafd4b2d94a2fb366165f03567fbbb0ddf2b7a284011254477c3ebbd7b6deaa16ca92937ddaa8e75df77feeee59e6d766f65262f8292e50f660544aebb527fc611ab24aa45c663f81995e1715427cdb4fc868c&pst=1670736832&rmtc=t
Set-Cookie: u_pl=17570601; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.A3xYV8GP0tcvzk9YaEivAaSKI4V7VN2ISPHpywHMJPE; expires=Sun, 11 Dec 2022 05:33:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad61c3e57fece9f5afaf2f35e7c643a9
Strict-Transport-Security: max-age=0; includeSubdomains
sitepork.com/watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 sitepork.com/watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: sitepork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Cookie: u_pl=17570577; ain=eyJhbGciOiJIUzI1NiJ9.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.sn1xhL1X3pOOV9cclbQTsVUlMUiyclUDUdjGTGdEKH4; uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://sitepork.com/watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d0e7f456e8f5bec6b20cf1d838d09b2b1d9e0863170d1ca00518b52756d961229319be77851c1d72691dd5157004164313f06998d370cf35091156c12cda8b76d6473633acb3714e7cbbc28828fcd1da459df&pst=1670736832&rmtc=t
Set-Cookie: u_pl=17570577,17570593; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.xcnqqOEJnpBenuvMB8SykdlT_YYjLQgw1yKT6dki444; expires=Sun, 11 Dec 2022 05:33:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3d9c2613c5aca115d04fd08cad834c8a
Strict-Transport-Security: max-age=0; includeSubdomains
stuckencouragedscalpel.com/watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 stuckencouragedscalpel.com/watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: stuckencouragedscalpel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://stuckencouragedscalpel.com/watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=240dbf831bcaba7a467b3edf18e043392edaf210a536e83dd357a9139769b6b333e9a2f999c283561dbed9dc9df72f4321cee898b02e7d6aa301efb33bda6e214f4bbdccd7baa0f2e773a2752d58f295129299f5fb56e36c5ebaa4bcb253c62f22ff9e&pst=1670736832&rmtc=t
Set-Cookie: u_pl=17570585; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MDU4NSwiayI6IjVhZWU2N2M3YWVmYjBhM2RkODcyYjBlOWEyYWQzYzRiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTM0ODc3LCJwaWQiOjQyMzMyOSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjUsInB0Ijo0LCJwayI6InpheXRqanRjeCIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2FuZW9sb2dpc20uY29tL2xlYWtlZC9raXJzdHktYnVjaGFuLWxlYWtlZC1vbmx5ZmFucy1vbi1yZWRkaXQtYW5kLXR3aXR0ZXItc2NvdHMtdGVhY2hlci1yZXNpZ25zLWFmdGVyLWV4cGxpY2l0Lz91dG1fc291cmNlPXR3aXR0ZXJcdTAwMjZ1dG1fbWVkaXVtPXNvY2lhbFx1MDAyNnV0bV9jYW1wYWlnbj1SZXZpdmVPbGRQb3N0In19.hggD9SJJpF3XIHQVDoAQS_-A31rMlVx41s8Co9Au6pI; expires=Sun, 11 Dec 2022 05:33:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf71f02665e06e15b6c71fa01e6c16a4
Strict-Transport-Security: max-age=0; includeSubdomains
stuckencouragedscalpel.com/watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 stuckencouragedscalpel.com/watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: stuckencouragedscalpel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://stuckencouragedscalpel.com/watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=814abf958520175f5079162d8408ed3d01dfac2ceb0c74162efc2f2117243ffef83178e442916d2b7d90044b4ffa5104aa4cc0d84d7ad321fc27e3aeeaf65b5cf0eb91c5bae9c7999a9739cb0771a2aed365557bdf081b9f56b6b43d2ac18f&pst=1670736832&rmtc=t
Set-Cookie: u_pl=17570597; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT10d2l0dGVyXHUwMDI2dXRtX21lZGl1bT1zb2NpYWxcdTAwMjZ1dG1fY2FtcGFpZ249UmV2aXZlT2xkUG9zdCJ9fQ.8NFcO5GqyKs_Kzo588ZJlc1ntpb5RPr3UEf9zzCDKiY; expires=Sun, 11 Dec 2022 05:33:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8d1c6e3fe897d09f8f565a706275f8d3
Strict-Transport-Security: max-age=0; includeSubdomains
stuckencouragedscalpel.com/watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=240dbf831bcaba7a467b3edf18e043392edaf210a536e83dd357a9139769b6b333e9a2f999c283561dbed9dc9df72f4321cee898b02e7d6aa301efb33bda6e214f4bbdccd7baa0f2e773a2752d58f295129299f5fb56e36c5ebaa4bcb253c62f22ff9e&pst=1670736832&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 stuckencouragedscalpel.com/watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=240dbf831bcaba7a467b3edf18e043392edaf210a536e83dd357a9139769b6b333e9a2f999c283561dbed9dc9df72f4321cee898b02e7d6aa301efb33bda6e214f4bbdccd7baa0f2e773a2752d58f295129299f5fb56e36c5ebaa4bcb253c62f22ff9e&pst=1670736832&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2567)
Hash 0f08de775eeadb7693c7f5f8fc991d6e
d03eb1ad4dd5ddce9166873d5ae5ef2c4faeaedb
45e4cb5c116456983b585b4957b0d696549d422c9cb96ba7b33795a3ec682674
GET /watch.225486109406.js?key=5aee67c7aefb0a3dd872b0e9a2ad3c4b&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=240dbf831bcaba7a467b3edf18e043392edaf210a536e83dd357a9139769b6b333e9a2f999c283561dbed9dc9df72f4321cee898b02e7d6aa301efb33bda6e214f4bbdccd7baa0f2e773a2752d58f295129299f5fb56e36c5ebaa4bcb253c62f22ff9e&pst=1670736832&rmtc=t HTTP/1.1
Host: stuckencouragedscalpel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570585; ain=eyJhbGciOiJIUzI1NiJ9.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.hggD9SJJpF3XIHQVDoAQS_-A31rMlVx41s8Co9Au6pI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3ac1e9abb4e67d2433d661419dc20acc
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
stuckencouragedscalpel.com/watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d3d01d46cb46221bc8e90ef30a8fafd4b2d94a2fb366165f03567fbbb0ddf2b7a284011254477c3ebbd7b6deaa16ca92937ddaa8e75df77feeee59e6d766f65262f8292e50f660544aebb527fc611ab24aa45c663f81995e1715427cdb4fc868c&pst=1670736832&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 stuckencouragedscalpel.com/watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d3d01d46cb46221bc8e90ef30a8fafd4b2d94a2fb366165f03567fbbb0ddf2b7a284011254477c3ebbd7b6deaa16ca92937ddaa8e75df77feeee59e6d766f65262f8292e50f660544aebb527fc611ab24aa45c663f81995e1715427cdb4fc868c&pst=1670736832&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2562)
Hash 60b469fc4d9d3f6d7e9e4578594a290f
5bdb3a27ddfb93e667d55b3a838345ef2995026f
0464862f9aef0808e4c5054a9b18fd7828eae83b2b10eeb5160e3f13a08781b4
GET /watch.1376608844562.js?key=36531d5c08e43086f1897875f3357cc1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d3d01d46cb46221bc8e90ef30a8fafd4b2d94a2fb366165f03567fbbb0ddf2b7a284011254477c3ebbd7b6deaa16ca92937ddaa8e75df77feeee59e6d766f65262f8292e50f660544aebb527fc611ab24aa45c663f81995e1715427cdb4fc868c&pst=1670736832&rmtc=t HTTP/1.1
Host: stuckencouragedscalpel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570601; ain=eyJhbGciOiJIUzI1NiJ9.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.A3xYV8GP0tcvzk9YaEivAaSKI4V7VN2ISPHpywHMJPE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bea95311e83346c8c6843b5e90229cdc
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
sitepork.com/watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d0e7f456e8f5bec6b20cf1d838d09b2b1d9e0863170d1ca00518b52756d961229319be77851c1d72691dd5157004164313f06998d370cf35091156c12cda8b76d6473633acb3714e7cbbc28828fcd1da459df&pst=1670736832&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 sitepork.com/watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d0e7f456e8f5bec6b20cf1d838d09b2b1d9e0863170d1ca00518b52756d961229319be77851c1d72691dd5157004164313f06998d370cf35091156c12cda8b76d6473633acb3714e7cbbc28828fcd1da459df&pst=1670736832&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2562)
Hash a30732453224324cde31966f214eb4b6
8479a1983f0719d05ba349e89cd5ae52646ee78a
58a0afd7e0433dd3d02e518d80288eb2ee291bdc7df1dfcde8d991aeb0ef7954
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1328481863511.js?key=37f4e7c4dcdb7b8cfebbc7e29d796862&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=0d0e7f456e8f5bec6b20cf1d838d09b2b1d9e0863170d1ca00518b52756d961229319be77851c1d72691dd5157004164313f06998d370cf35091156c12cda8b76d6473633acb3714e7cbbc28828fcd1da459df&pst=1670736832&rmtc=t HTTP/1.1
Host: sitepork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570577,17570593; ain=eyJhbGciOiJIUzI1NiJ9.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.xcnqqOEJnpBenuvMB8SykdlT_YYjLQgw1yKT6dki444; uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs=2; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv26=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs26=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 686e5b12a4bec97bafded1ec41d44d0c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
revenuetonightperforming.com/80ddc576c91a295266e0307c66521a5c/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/80ddc576c91a295266e0307c66521a5c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26941), with no line terminators
Hash 0a0829535489a9530419d95fec4b9548
8619b0110aa8d5b574f7cc8722f7462edb9a1d36
0cdce8a0dfc9b71dd06c24752ac659678745d52c5c3db8ad504bf4a49e297719
GET /80ddc576c91a295266e0307c66521a5c/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 975a696bea61a44b0d00a39f351498a1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
region1.google-analytics.com/g/collect?v=2&tid=G-W8B27Z9XNN>m=2oebu0&_p=1824534579&cid=1624331331.1670736770&ul=en-us&sr=1280x1024&_s=1&sid=1670736770&sct=1&seg=0&dl=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&dt=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-W8B27Z9XNN>m=2oebu0&_p=1824534579&cid=1624331331.1670736770&ul=en-us&sr=1280x1024&_s=1&sid=1670736770&sct=1&seg=0&dl=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&dt=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-W8B27Z9XNN>m=2oebu0&_p=1824534579&cid=1624331331.1670736770&ul=en-us&sr=1280x1024&_s=1&sid=1670736770&sct=1&seg=0&dl=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&dt=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://aneologism.com
date: Sun, 11 Dec 2022 05:32:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stuckencouragedscalpel.com/watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=814abf958520175f5079162d8408ed3d01dfac2ceb0c74162efc2f2117243ffef83178e442916d2b7d90044b4ffa5104aa4cc0d84d7ad321fc27e3aeeaf65b5cf0eb91c5bae9c7999a9739cb0771a2aed365557bdf081b9f56b6b43d2ac18f&pst=1670736832&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 stuckencouragedscalpel.com/watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=814abf958520175f5079162d8408ed3d01dfac2ceb0c74162efc2f2117243ffef83178e442916d2b7d90044b4ffa5104aa4cc0d84d7ad321fc27e3aeeaf65b5cf0eb91c5bae9c7999a9739cb0771a2aed365557bdf081b9f56b6b43d2ac18f&pst=1670736832&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2531)
Hash 9a116136c38096c3ba7ac2f5d17e7fc4
3e83986978c62ed79c06eabc7877b3bd05a2305e
5d65d214f9de00def5f482fe3361dc57ac4eebd122e054f249394c828a167e9f
GET /watch.559986302212.js?key=d3d6c60e59c88611fb31e42ba8a47fa1&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=814abf958520175f5079162d8408ed3d01dfac2ceb0c74162efc2f2117243ffef83178e442916d2b7d90044b4ffa5104aa4cc0d84d7ad321fc27e3aeeaf65b5cf0eb91c5bae9c7999a9739cb0771a2aed365557bdf081b9f56b6b43d2ac18f&pst=1670736832&rmtc=t HTTP/1.1
Host: stuckencouragedscalpel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570597; ain=eyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT10d2l0dGVyXHUwMDI2dXRtX21lZGl1bT1zb2NpYWxcdTAwMjZ1dG1fY2FtcGFpZ249UmV2aXZlT2xkUG9zdCJ9fQ.8NFcO5GqyKs_Kzo588ZJlc1ntpb5RPr3UEf9zzCDKiY; uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
pdhtkv25=true; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
uncs25=1; expires=Mon, 12 Dec 2022 05:32:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f70792dc0927dc92bd6e9eda901324e1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
revenuetonightperforming.com/8f20b6bda8d6b58b2c900fda60660e56/invoke.js
200 OK 9.8 kB URL HTTP/1.1 revenuetonightperforming.com/8f20b6bda8d6b58b2c900fda60660e56/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash b1d9491a6d4d9c8709803e2c36af5f04
9f32b45fd21dddd40d45dd2be6b90c48ecdde6f7
ead81000beaad01331c5e555c7d0311ae34c96f7273dc711d8745fc1c7e72e25
GET /8f20b6bda8d6b58b2c900fda60660e56/invoke.js HTTP/1.1
Host: revenuetonightperforming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 11 Dec 2022 05:32:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6f90da1c294b1817d132cc8a205c5c9b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pixel.wp.com/g.gif?v=ext&blog=212647023&post=8499&tz=0&srv=aneologism.com&j=1%3A11.6&host=aneologism.com&ref=&fcp=3522&rand=0.8627847519713189
200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&blog=212647023&post=8499&tz=0&srv=aneologism.com&j=1%3A11.6&host=aneologism.com&ref=&fcp=3522&rand=0.8627847519713189
IP
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&blog=212647023&post=8499&tz=0&srv=aneologism.com&j=1%3A11.6&host=aneologism.com&ref=&fcp=3522&rand=0.8627847519713189 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:52 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.getpocket.com/v1/j/btn.js?v=1
200 OK 1.0 kB URL HTTP/2 widgets.getpocket.com/v1/j/btn.js?v=1
IP
Hash 6fe3bf8d4c160bfc711114c20ab76143
7f4515422719eae093d7b1e0e4f0c88c795ad980
8db8803abb575763fb74a501fb54e8112dd949b8fe2ca0afeef61c2de57d75c6
GET /v1/j/btn.js?v=1 HTTP/1.1
Host: widgets.getpocket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 1037
server: Apache/2.4.25 (Debian)
last-modified: Thu, 08 Dec 2022 18:28:06 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: https://pocket.com,https://getpocket.com,https://widgets.getpocket.com
date: Sun, 11 Dec 2022 04:36:07 GMT
etag: "90b-5ef5532bc1980-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PX6kLN5eAkVYuOFx7REtBPhGJzWlnV8FGf4tYMVF7Gbcs-7woehPTQ==
age: 3511
X-Firefox-Spdy: h2
widgets.getpocket.com/v1/button?label=pocket&count=horizontal&v=1&url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&title=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&src=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&r=0.807369303104462
200 OK 551 B URL HTTP/2 widgets.getpocket.com/v1/button?label=pocket&count=horizontal&v=1&url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&title=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&src=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&r=0.807369303104462
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 29eb112df49c63695e37e03bc43eedd5
6ea1c6ac3e4d39062ba7cb5c7537f787270e21d9
855310381530042b2961b327359aea9bb691edb94cc17ebf2562007943db0275
GET /v1/button?label=pocket&count=horizontal&v=1&url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&title=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&src=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&r=0.807369303104462 HTTP/1.1
Host: widgets.getpocket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 551
date: Sun, 11 Dec 2022 04:55:53 GMT
server: Apache/2.4.25 (Debian)
content-location: button.php
tcn: choice
x-powered-by: PHP/5.6.40
content-encoding: gzip
access-control-allow-origin: https://pocket.com,https://getpocket.com,https://widgets.getpocket.com
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CM9CC-7fs7ZjRAqtWtD8npgNlcRwE5WIhGf9iapKU29MKXGxh8_1Rg==
age: 2219
X-Firefox-Spdy: h2
aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost&relatedposts=1
200 OK 2.8 kB URL HTTP/2 aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost&relatedposts=1
IP
File type JSON data\012- , ASCII text, with very long lines (2780), with no line terminators
Hash 6a74acea5efdcc089e38f61977514555
2dd2c770ce68e08185cf3ed3ee427399e2b9efd4
ba50e0bfa47e1e487e3a9795f758d67b0cebc79296f78b22f328d7fcf6193a3c
GET /leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost&relatedposts=1 HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
x-requested-with: XMLHttpRequest
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1389080%22%3A%7B%22page%22%3A1%7D%2C%22C1353381%22%3A%7B%22page%22%3A1%7D%2C%22C1368744%22%3A%7B%22page%22%3A1%7D%7D; _ga_W8B27Z9XNN=GS1.1.1670736770.1.0.1670736770.0.0.0; _ga=GA1.1.1624331331.1670736770
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-pingback: https://aneologism.com/leaked/xmlrpc.php
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
etag: "24286-1670709045;;;"
x-litespeed-cache: hit
content-length: 2780
date: Sun, 11 Dec 2022 05:32:52 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee56bc94d7af48851c96b72fd81471cc
172f310bc18c6c0b178ed9430404365f78220abd
12bc6f3fb7ecdfdbac083d0db58e19018f1af9c5f971a5e88cdab7f0d8fbd504
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12BC6F3FB7ECDFDBAC083D0DB58E19018F1AF9C5F971A5E88CDAB7F0D8FBD504"
Last-Modified: Sun, 11 Dec 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14984
Expires: Sun, 11 Dec 2022 09:42:36 GMT
Date: Sun, 11 Dec 2022 05:32:52 GMT
Connection: keep-alive
assets.tumblr.com/client/prod/standalone/share-button-internal/index.build.js?_v=8fdce1ef5bd0030943923cb383665c43
200 OK 91 kB URL HTTP/2 assets.tumblr.com/client/prod/standalone/share-button-internal/index.build.js?_v=8fdce1ef5bd0030943923cb383665c43
IP
File type ASCII text, with very long lines (32024)
Hash 17d49438ce3edeac15232acaf46b443a
7463223ad5feee4dd5705aa607bde3f0534ce92f
6f5b14307d720e3a1411953bd3eb1375601edcc35f0a7fea3678eb7a565ece9d
GET /client/prod/standalone/share-button-internal/index.build.js?_v=8fdce1ef5bd0030943923cb383665c43 HTTP/1.1
Host: assets.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://embed.tumblr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:52 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Dec 2022 07:24:26 GMT
vary: Accept-Encoding
etag: W/"63903faa-3474f"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, immutable
strict-transport-security: max-age=31536000; preload
timing-allow-origin: *
x-nc: HIT arn 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
s-img.mgid.com/g/13275073/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ194eV9jZW50ZXIscV9hdXRvOmdvb2Qsd18xMDIwLHhfMzY2LHlfMzExL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA2LzE3NTY4NS81ZTIyNjRmYmU0ZDQ3MWE2Nzc5ZjQxMDM1YzU5NDI0OS5qcGc.webp?v=1670736772-qs4uQcjEy3-lhh-lM7z6Ou6YEfwTdXq9hlmhHtBCG-I
200 OK 19 kB URL HTTP/2 s-img.mgid.com/g/13275073/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ194eV9jZW50ZXIscV9hdXRvOmdvb2Qsd18xMDIwLHhfMzY2LHlfMzExL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA2LzE3NTY4NS81ZTIyNjRmYmU0ZDQ3MWE2Nzc5ZjQxMDM1YzU5NDI0OS5qcGc.webp?v=1670736772-qs4uQcjEy3-lhh-lM7z6Ou6YEfwTdXq9hlmhHtBCG-I
IP
Hash ffcc1e7f0a8a74940acd0c191d10e16d
b7d05b593947b934f83c16dec8a833201e025e79
0e9980609e50e7e68dbb35f278b42dcabd82be1fb66caddbcc9a3994b1e936df
GET /g/13275073/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ194eV9jZW50ZXIscV9hdXRvOmdvb2Qsd18xMDIwLHhfMzY2LHlfMzExL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA2LzE3NTY4NS81ZTIyNjRmYmU0ZDQ3MWE2Nzc5ZjQxMDM1YzU5NDI0OS5qcGc.webp?v=1670736772-qs4uQcjEy3-lhh-lM7z6Ou6YEfwTdXq9hlmhHtBCG-I HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:52 GMT
content-type: image/webp
content-length: 17224
x-mg-request-uuid: d05a77b6-a9d0-419b-a714-b5ab94f19dfd
access-control-allow-origin: *
last-modified: Fri, 17 Jun 2022 00:15:12 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 4000979
accept-ranges: bytes
set-cookie: __cf_bm=qqegf_tH25O._fTYJEwoWBjaxVkt0EZ7Rd.Snxwbm8M-1670736772-0-AR9cZavSPGjqZ4GWg3fMV3ihq/0EQUZGdPUcICzzmoxsrYkLEorkaMiZjkmjfPECYMTFXb49+5XYLGURMqSSwug=; path=/; expires=Sun, 11-Dec-22 06:02:52 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 777bd79f09360b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/10881014/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMS0wMy8xMDE5MjQvZjk2NDFhNmQ4YTU0OTkwYTVhMTFmNDNjOWJlZjQ5N2QuanBn.webp?v=1670736772-aMeKpSEqEQJnjzAn7zDE6X1EbdNtRN4GhnDdEDHKdgM
200 OK 10 kB URL HTTP/2 s-img.mgid.com/g/10881014/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMS0wMy8xMDE5MjQvZjk2NDFhNmQ4YTU0OTkwYTVhMTFmNDNjOWJlZjQ5N2QuanBn.webp?v=1670736772-aMeKpSEqEQJnjzAn7zDE6X1EbdNtRN4GhnDdEDHKdgM
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 688ee3860ee5e9a536f273a728e0c2af
6ae8428a82757b6d0216f2a5855be7072bff00a9
856eef088aaa0d21313e76ffb84b14ce56355736fca7f0ce2dffa9cd1ce3bf86
GET /g/10881014/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMS0wMy8xMDE5MjQvZjk2NDFhNmQ4YTU0OTkwYTVhMTFmNDNjOWJlZjQ5N2QuanBn.webp?v=1670736772-aMeKpSEqEQJnjzAn7zDE6X1EbdNtRN4GhnDdEDHKdgM HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:52 GMT
content-type: image/webp
content-length: 10278
x-mg-request-uuid: 74557417-ef2c-434d-9d2c-3c1e8c3dc647
access-control-allow-origin: *
last-modified: Thu, 11 Nov 2021 15:52:49 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 4001006
accept-ranges: bytes
set-cookie: __cf_bm=ZXBES76w0PNLicMDz.nauA_EseEgSHJ1CZJ8M2cykns-1670736772-0-AaJM43jmpU6rPJlJzNabx6NSwnXt0vu42DXE1H5rv0w8YcIOnAdEMOLh801Bw0ka9kuyJnVd2Hu9whmo8jvlJi4=; path=/; expires=Sun, 11-Dec-22 06:02:52 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 777bd79f09380b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/10881005/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMS0wOS8xMDE5MjQvNmM2YmMzMzc2YWQ3MGEwMjg3NGU2NmE1Mzk1ZDM3NWUuanBlZw.webp?v=1670736772-GxnxQM8w0hSOodoCETObyfO7ssmmMFHcB5M0wOAPQYw
200 OK 13 kB URL HTTP/2 s-img.mgid.com/g/10881005/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMS0wOS8xMDE5MjQvNmM2YmMzMzc2YWQ3MGEwMjg3NGU2NmE1Mzk1ZDM3NWUuanBlZw.webp?v=1670736772-GxnxQM8w0hSOodoCETObyfO7ssmmMFHcB5M0wOAPQYw
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b73dfde69a072c7f2102dbddaa5690e2
ac9882fa563b3a85c3039ffb9e02079f618fc628
194c747163198072c818b9eb8b35b2afca979f93f54009c67903e1dcb7503aef
GET /g/10881005/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMS0wOS8xMDE5MjQvNmM2YmMzMzc2YWQ3MGEwMjg3NGU2NmE1Mzk1ZDM3NWUuanBlZw.webp?v=1670736772-GxnxQM8w0hSOodoCETObyfO7ssmmMFHcB5M0wOAPQYw HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:52 GMT
content-type: image/webp
content-length: 12622
x-mg-request-uuid: b820fca1-0c5d-4165-8242-154c6cb15a78
access-control-allow-origin: *
last-modified: Thu, 11 Nov 2021 15:59:44 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 4000993
accept-ranges: bytes
set-cookie: __cf_bm=0I_SGcdjzDUsFrrWvr9PDlNyxb0B2IOCazgnIiG4Sig-1670736772-0-AeaahC3lGdd76VFh1lN6YSd12d1SAj80q/XifI9BMVENLFYE7GqFzbamDrn/t6IXl5Zug9Oc0FuY9DqJKCSb3cA=; path=/; expires=Sun, 11-Dec-22 06:02:52 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 777bd79f09390b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
assets.getpocket.com/web/widgetButton.91d9e0cb42c020d8c4b1.css
200 OK 1.0 kB URL HTTP/1.1 assets.getpocket.com/web/widgetButton.91d9e0cb42c020d8c4b1.css
IP
File type ASCII text, with very long lines (2508)
Hash 527d016f3d5bc46b89a36744f44ad789
19bcf672dae1929250f8d70a334f887924d4b029
2e9d9ad9b238b59e2fc714e92479a5bf136732a05761486be4057310d4d857dc
GET /web/widgetButton.91d9e0cb42c020d8c4b1.css HTTP/1.1
Host: assets.getpocket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widgets.getpocket.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 05 Nov 2022 02:10:00 GMT
Last-Modified: Thu, 03 Nov 2022 16:23:24 GMT
ETag: W/"5ae752a86d7f88b510c944c8fdbd4398"
Cache-Control: max-age=31536000,s-maxage=31536000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7Cpt5SUjBKSD6pGTcXkI2H-VknvWN4lf2iH9cZbYPyuwOfXQSwe8-g==
Age: 3122573
assets.getpocket.com/web/widgetButton.feb550d464c5482ef251.js
200 OK 7.8 kB URL HTTP/1.1 assets.getpocket.com/web/widgetButton.feb550d464c5482ef251.js
IP
File type ASCII text, with very long lines (16442)
Hash 913fc154e9cc1f85bfd6aea9d742c840
c5834c615d6f84141ed66efe96a5c8404f75d97f
f10e4dee32cb8c7e73853021d2d3137fc3225a3d46b2ed334969344d50713a2c
GET /web/widgetButton.feb550d464c5482ef251.js HTTP/1.1
Host: assets.getpocket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widgets.getpocket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 31 Oct 2022 01:07:44 GMT
Last-Modified: Fri, 28 Oct 2022 19:20:28 GMT
ETag: W/"66a4e45e3310f3b82b2bb18daee63f70"
Cache-Control: max-age=31536000,s-maxage=31536000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f-Gj_yWyFhQJMj7OSXaFC7QBtrhBC11089v-J-JbMd7sylAH9xP33A==
Age: 3558310
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5365d15327a43aaa68fc7c3f7fdadf1e
2a206d9607e74029014407ecc60fab84e3f03b95
de86ebd21d1be589d03e6d7cc588d99898726e330b4f92364818d69084dfc8b6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE86EBD21D1BE589D03E6D7CC588D99898726E330B4F92364818D69084DFC8B6"
Last-Modified: Fri, 09 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8533
Expires: Sun, 11 Dec 2022 07:55:06 GMT
Date: Sun, 11 Dec 2022 05:32:53 GMT
Connection: keep-alive
slobcarpstun.com/watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 slobcarpstun.com/watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: slobcarpstun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://slobcarpstun.com/watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=da93903ef19d60665dbc0b15978166ce4f659cee588c30e516ca3182e24db551072db8c4c035b7c62dbab311c0613511633d3cd42389a6a356b5c6f1f07f24e5933d48d38e64e104f12150b24119ae8eaec200&pst=1670736833&rmtc=t
Set-Cookie: u_pl=17570577; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sn1xhL1X3pOOV9cclbQTsVUlMUiyclUDUdjGTGdEKH4; expires=Sun, 11 Dec 2022 05:33:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3b6a09e007d2dffe546e1fdda078efa9
Strict-Transport-Security: max-age=0; includeSubdomains
slobcarpstun.com/watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=da93903ef19d60665dbc0b15978166ce4f659cee588c30e516ca3182e24db551072db8c4c035b7c62dbab311c0613511633d3cd42389a6a356b5c6f1f07f24e5933d48d38e64e104f12150b24119ae8eaec200&pst=1670736833&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 slobcarpstun.com/watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=da93903ef19d60665dbc0b15978166ce4f659cee588c30e516ca3182e24db551072db8c4c035b7c62dbab311c0613511633d3cd42389a6a356b5c6f1f07f24e5933d48d38e64e104f12150b24119ae8eaec200&pst=1670736833&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2518)
Hash 76f022c51a55a03da0c8d396677e0876
0997c0305369117fc384e70bc1b3276fe2748977
ba82d2c1fbad70d77891a10eee3edfe704e73058b504c484c6b6e1fa5985434b
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1336449560472.js?key=80ddc576c91a295266e0307c66521a5c&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=da93903ef19d60665dbc0b15978166ce4f659cee588c30e516ca3182e24db551072db8c4c035b7c62dbab311c0613511633d3cd42389a6a356b5c6f1f07f24e5933d48d38e64e104f12150b24119ae8eaec200&pst=1670736833&rmtc=t HTTP/1.1
Host: slobcarpstun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570577; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MDU3NywiayI6IjgwZGRjNTc2YzkxYTI5NTI2NmUwMzA3YzY2NTIxYTVjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTM0ODc3LCJwaWQiOjQyMzMyOSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI3LCJwdCI6NCwicGsiOiJla2FmYWhoMTRrIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vYW5lb2xvZ2lzbS5jb20vbGVha2VkL2tpcnN0eS1idWNoYW4tbGVha2VkLW9ubHlmYW5zLW9uLXJlZGRpdC1hbmQtdHdpdHRlci1zY290cy10ZWFjaGVyLXJlc2lnbnMtYWZ0ZXItZXhwbGljaXQvP3V0bV9zb3VyY2U9dHdpdHRlclx1MDAyNnV0bV9tZWRpdW09c29jaWFsXHUwMDI2dXRtX2NhbXBhaWduPVJldml2ZU9sZFBvc3QifX0.sn1xhL1X3pOOV9cclbQTsVUlMUiyclUDUdjGTGdEKH4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
pdhtkv27=true; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
uncs27=1; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4da59e1d0bd5fae6487efe471f3d9a51
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
restorationpencil.com/watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 restorationpencil.com/watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1 HTTP/1.1
Host: restorationpencil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Location: https://restorationpencil.com/watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=5f095d4387bf3de3c8e3492d38327d2b70d33c600f28defca8fa23194f710b93a81b1f44fc9381c59397e546b1e53a816444ee77ff17f0198db2e31de1bc11949b5d1b44cad0f48c174ce7d638d574a3312c66&pst=1670736833&rmtc=t
Set-Cookie: u_pl=17570588; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.rP-QD0MRARNmFCEGc7xQlNe-Rxr-T81akRsCiRQbSSw; expires=Sun, 11 Dec 2022 05:33:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d62280d5d7005d5d041d66cc1f71f3ba
Strict-Transport-Security: max-age=0; includeSubdomains
widgets.getpocket.com/api/saves?url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F
200 OK 11 B URL HTTP/2 widgets.getpocket.com/api/saves?url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9eac4ec8ff53af12f3998d9c03a87a32
4bdf1ce26a3f0f31dc0f9ddd8eb29ac9d499ebb8
70a18337b987c7639db9de27723cdb120997777f506cc3b419b055575ca9ff61
GET /api/saves?url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F HTTP/1.1
Host: widgets.getpocket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widgets.getpocket.com/v1/button?label=pocket&count=horizontal&v=1&url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&title=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit%20%C2%BB%20Aneologism&src=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&r=0.807369303104462
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 11
date: Sun, 11 Dec 2022 05:32:53 GMT
server: Apache/2.4.25 (Debian)
content-location: saves.php
tcn: choice
x-powered-by: PHP/5.6.40
access-control-allow-origin: https://pocket.com,https://getpocket.com,https://widgets.getpocket.com
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b3qFDBLmHfBe6tf_ldXhECfwKk9IzBmvb5id14Rkmr88wSXt3eSoUA==
X-Firefox-Spdy: h2
restorationpencil.com/watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=5f095d4387bf3de3c8e3492d38327d2b70d33c600f28defca8fa23194f710b93a81b1f44fc9381c59397e546b1e53a816444ee77ff17f0198db2e31de1bc11949b5d1b44cad0f48c174ce7d638d574a3312c66&pst=1670736833&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 restorationpencil.com/watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=5f095d4387bf3de3c8e3492d38327d2b70d33c600f28defca8fa23194f710b93a81b1f44fc9381c59397e546b1e53a816444ee77ff17f0198db2e31de1bc11949b5d1b44cad0f48c174ce7d638d574a3312c66&pst=1670736833&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2567)
Hash 295e9cd584ffbae2c81d1756eb669182
9ea1179d08fe0982a7dcb9384a356e7e1d128376
09029155f7655140985e8418a4d6d2397d7cc13c08b3d2ffef0162133001bf51
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.567292973701.js?key=8f20b6bda8d6b58b2c900fda60660e56&kw=%5B%22kirsty%22%2C%22buchan%22%2C%22leaked%22%2C%22onlyfans%22%2C%22on%22%2C%22reddit%22%2C%22and%22%2C%22twitter%22%2C%22scots%22%2C%22teacher%22%2C%22resigns%22%2C%22after%22%2C%22explicit%22%2C%22%C2%BB%22%2C%22aneologism%22%5D&refer=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%3Futm_source%3Dtwitter%26utm_medium%3Dsocial%26utm_campaign%3DReviveOldPost&tz=0&dev=e&res=12.1055&uuid=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1&shu=5f095d4387bf3de3c8e3492d38327d2b70d33c600f28defca8fa23194f710b93a81b1f44fc9381c59397e546b1e53a816444ee77ff17f0198db2e31de1bc11949b5d1b44cad0f48c174ce7d638d574a3312c66&pst=1670736833&rmtc=t HTTP/1.1
Host: restorationpencil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Referer: https://aneologism.com/
Connection: keep-alive
Cookie: u_pl=17570588; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MDU4OCwiayI6IjhmMjBiNmJkYThkNmI1OGIyYzkwMGZkYTYwNjYwZTU2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTM0ODc3LCJwaWQiOjQyMzMyOSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjMyLCJwdCI6NCwicGsiOiJzZHFucGFmZyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2FuZW9sb2dpc20uY29tL2xlYWtlZC9raXJzdHktYnVjaGFuLWxlYWtlZC1vbmx5ZmFucy1vbi1yZWRkaXQtYW5kLXR3aXR0ZXItc2NvdHMtdGVhY2hlci1yZXNpZ25zLWFmdGVyLWV4cGxpY2l0Lz91dG1fc291cmNlPXR3aXR0ZXJcdTAwMjZ1dG1fbWVkaXVtPXNvY2lhbFx1MDAyNnV0bV9jYW1wYWlnbj1SZXZpdmVPbGRQb3N0In19.rP-QD0MRARNmFCEGc7xQlNe-Rxr-T81akRsCiRQbSSw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 11 Dec 2022 05:32:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://aneologism.com
Access-Control-Allow-Origin: https://aneologism.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=dd0bd034-d082-4dac-9626-a4fef6aaaa88:2:1; expires=Sun, 18 Dec 2022 05:32:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
uncs=1; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
pdhtkv32=true; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
uncs32=1; expires=Mon, 12 Dec 2022 05:32:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f1e3326477139b13e8f49ea2807e26e5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
i0.wp.com/aneologism.com/leaked/wp-content/uploads/2022/07/cropped-cooltext416011088551775.png?fit=192%2C192&ssl=1
200 OK 24 kB URL HTTP/2 i0.wp.com/aneologism.com/leaked/wp-content/uploads/2022/07/cropped-cooltext416011088551775.png?fit=192%2C192&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d25085a0a4938e0069a20b8ba5b46448
28a4f7ae28c91181a7c4dc0a94b26c7ec01409af
a31d3815f6d9dd462baf16b83ee1e7161f6fc3f6629096525c829e5eb18b0eb9
GET /aneologism.com/leaked/wp-content/uploads/2022/07/cropped-cooltext416011088551775.png?fit=192%2C192&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:53 GMT
content-type: image/webp
content-length: 23580
last-modified: Tue, 22 Nov 2022 13:39:02 GMT
expires: Fri, 22 Nov 2024 01:39:02 GMT
cache-control: public, max-age=63115200
link: <https://aneologism.com/leaked/wp-content/uploads/2022/07/cropped-cooltext416011088551775.png>; rel="canonical"
x-content-type-options: nosniff
etag: "e97f42e01bebda86"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
jsc.mgid.com/a/n/aneologism.com.1353382.js
200 OK 2.4 kB URL HTTP/2 jsc.mgid.com/a/n/aneologism.com.1353382.js
IP
File type ASCII text, with very long lines (2345), with no line terminators
Hash cc078b93d4d3b26d91195433d9917a80
ac70728bd1dc3a437aac21888916125b0356648d
fa0c8bb43cadc7dd1b3cc18c5c608dc23053de1074ea47dcffcfddee42608b78
GET /a/n/aneologism.com.1353382.js HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=2346
etag: W/"7be0dc456cb3e0827cbab5dae58cda3c"
last-modified: Wed, 23 Nov 2022 11:59:32 GMT
x-amz-id-2: dlixgeltOuUozxtsH6w62Q2h5SUsvoFp4ANl6UqOD9Dvhca7g0pg1mWc0z9JFhepgA8t2CMD0YM=
x-amz-request-id: F8E5DA4XRJY12MZ9
x-amz-version-id: gkvD1_ubqCSUF1MMvvV32aXKO7PU66M8
cf-cache-status: HIT
expires: Sun, 11 Dec 2022 08:32:49 GMT
cache-control: public, max-age=10800
set-cookie: __cf_bm=nuxqNSHGYGfNOwPCPIioKcsxgPqLlbPXrD3QO5zFunM-1670736769-0-AbEtOaCkZqfcAe7vOKFSJvDcojYLEI3lYAG9oKFINCMyQ6FQ8EUC2mvjcqnqOnd+/wiJ8vMfXxqL77L6YBbl+w4=; path=/; expires=Sun, 11-Dec-22 06:02:49 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 777bd789dfe9b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 3d9433b427439cd2956663c3b3a9c22a
45ec1c0cc101f50f39048ef05c857a4eb484c0a5
8bb3cdf126659ae66d9dfbeb73d147a9f5caa7df4b111fb4e382a4e0f400369a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1427
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:53 GMT
Last-Modified: Sun, 11 Dec 2022 05:09:06 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 172
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Sun, 11 Dec 2022 05:32:53 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70F)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
platform.linkedin.com/in.js?async=true
200 OK 163 kB URL HTTP/2 platform.linkedin.com/in.js?async=true
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (41563)
Size 163 kB (163354 bytes)
Hash 8d63beff9a1b763068ba44885fa1c296
49432f853e447f1e851a03b9ae3a9f222b01af93
23ba033b48eae5111e3122d9738464927d7a61a828d7539633ddfcee4e796311
GET /in.js?async=true HTTP/1.1
Host: platform.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Play
expires: Sun, 11 Dec 2022 05:57:22 GMT
cache-control: public, max-age=3600
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
content-length: 163354
x-li-fabric: prod-lva1
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
x-li-uuid: AAXvhjjaYsESg3LBio6OhA==
date: Sun, 11 Dec 2022 05:32:53 GMT
vary: Accept-Encoding
x-cdn-client-ip-version: IPV4
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b10da7c40fd218e052cac5276be21d93
723dfdd1320ae0949196715d2d073320c4e4753d
ad3a489d2aa632e337fda00c7851dda9ecfb04798f432b6d5656f976c7ab3f2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5748
Cache-Control: max-age=153239
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:53 GMT
Etag: "639508a8-1d7"
Expires: Tue, 13 Dec 2022 00:06:52 GMT
Last-Modified: Sat, 10 Dec 2022 22:31:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
swx.cdn.skype.com/shared/v/latest/skypewebsdk.js
200 OK 260 B URL HTTP/2 swx.cdn.skype.com/shared/v/latest/skypewebsdk.js
IP
File type ASCII text, with CRLF line terminators
Hash 1a42122f1bb5668225354fad2cfcc281
c039c1b151268ae12a9ea671fdc37ee22d09e75d
486bf9d565b80f56b89157bed188ab08477c6041620ca5d32cdbdc15637325cf
GET /shared/v/latest/skypewebsdk.js HTTP/1.1
Host: swx.cdn.skype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
age: 151772
content-md5: mpocD6xlbe0bgJ8Pv08HTw==
content-type: application/x-javascript
date: Sun, 11 Dec 2022 05:32:53 GMT
etag: 0x8D2E0809A8DD755
last-modified: Thu, 29 Oct 2015 16:47:16 GMT
server: ECAcc (ska/F6D0)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 58883fb5-401e-001a-3ec0-0bcb8b000000
x-ms-version: 2009-09-19
content-length: 260
X-Firefox-Spdy: h2
assets.pinterest.com/js/pinit.js
200 OK 203 B URL HTTP/2 assets.pinterest.com/js/pinit.js
IP
File type ASCII text, with very long lines (361), with no line terminators
Hash 62d32c28f14783b94192cd8d35bc010d
78c1ba11e104bbd01a07225d0f8c41d7712094d4
e823b68f75484d37c74ebb652e2a5b183a1b65c43f1592985e519a8cabc44b2e
GET /js/pinit.js HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "62d32c28f14783b94192cd8d35bc010d"
content-encoding: br
content-type: application/javascript; charset=utf-8
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=300
date: Sun, 11 Dec 2022 05:32:53 GMT
content-length: 203
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3033bd8847386097a343fcf9d5682f65
bcb7541f3a6ae15299e0d0d13c07a15881fab12a
4d6be2772e7ad39f4625fcc76ca4fe6a8e96b3d68ba5ddab525d1d37aaf09b36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5329
Cache-Control: max-age=165416
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:53 GMT
Etag: "639539dc-1d7"
Expires: Tue, 13 Dec 2022 03:29:49 GMT
Last-Modified: Sun, 11 Dec 2022 02:01:00 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash b10da7c40fd218e052cac5276be21d93
723dfdd1320ae0949196715d2d073320c4e4753d
ad3a489d2aa632e337fda00c7851dda9ecfb04798f432b6d5656f976c7ab3f2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5748
Cache-Control: max-age=153239
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:53 GMT
Etag: "639508a8-1d7"
Expires: Tue, 13 Dec 2022 00:06:52 GMT
Last-Modified: Sat, 10 Dec 2022 22:31:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
aneologism.com/leaked/wp-admin/admin-ajax.php?action=wpsr_share_count
200 OK 79 B URL HTTP/2 aneologism.com/leaked/wp-admin/admin-ajax.php?action=wpsr_share_count
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 83882219518ba5db577c410d25609291
451e3493f2daa0e030f4736a66283e9c5c88c5bb
2bbaf86a8f172d0959b90cc8d156fa1196c4e61ecca6d0570c8320536b0328c9
POST /leaked/wp-admin/admin-ajax.php?action=wpsr_share_count HTTP/1.1
Host: aneologism.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aneologism.com/leaked/kirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit/?utm_source=twitter&utm_medium=social&utm_campaign=ReviveOldPost
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 213
Origin: https://aneologism.com
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=dd0bd034-d082-4dac-9626-a4fef6aaaa88%3A2%3A1; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1389080%22%3A%7B%22page%22%3A1%7D%2C%22C1353381%22%3A%7B%22page%22%3A1%7D%2C%22C1368744%22%3A%7B%22page%22%3A1%7D%7D; _ga_W8B27Z9XNN=GS1.1.1670736770.1.0.1670736770.0.0.0; _ga=GA1.1.1624331331.1670736770
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://aneologism.com/leaked
content-type: application/json; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-litespeed-cache-control: no-cache
content-length: 79
date: Sun, 11 Dec 2022 05:32:53 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload;
X-Firefox-Spdy: h2
cdn.id5-sync.com/api/1.0/id5-api.js
200 OK 122 kB URL HTTP/2 cdn.id5-sync.com/api/1.0/id5-api.js
IP
File type ASCII text, with very long lines (58530)
Size 122 kB (122211 bytes)
Hash c483cf1eecffe8884332a072beabf369
da849305a91007eed685bf482c41d0a0406d2bc2
6b4c24bd7ea1d41d8073bc9e4db29ad97541bf2a53a9dcc383927cf2c8c049c7
GET /api/1.0/id5-api.js HTTP/1.1
Host: cdn.id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:53 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: NzzDMQRIzsXNjVR7/B6e4yrrDcazBk60q2/S2QH7YxwqiaX7/iQchWRPdgPY0BswypKEPiqaJg8=
x-amz-request-id: EK159HTWSS7GNBQ8
last-modified: Thu, 24 Nov 2022 12:48:29 GMT
etag: W/"9ee82d693d1e83b3a37ee20226716f78"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 828
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 777bd7a329a70b59-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
swx.cdn.skype.com/shared/v/1.2.5/SkypeBootstrap.min.js
200 OK 1.9 kB URL HTTP/2 swx.cdn.skype.com/shared/v/1.2.5/SkypeBootstrap.min.js
IP
File type ASCII text, with very long lines (4142), with no line terminators
Hash 01f0451c448293d34bdc2b0e6a576832
6a4b91983b6c07d46ab36e484d7b45b071f5e32b
0721d9fc997e8890e05e2444d2ac5fef07ce996a11b19883dc045c535db4b8a0
GET /shared/v/1.2.5/SkypeBootstrap.min.js HTTP/1.1
Host: swx.cdn.skype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
age: 523841
content-md5: eFHv4baRuzbahX9hdJWxIw==
content-type: text/javascript; charset=utf-8
date: Sun, 11 Dec 2022 05:32:53 GMT
etag: 0x8D2732E7EF2F781
last-modified: Fri, 12 Jun 2015 13:54:54 GMT
server: ECAcc (ska/F77E)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 8512df83-901e-011c-3d5e-087aa6000000
x-ms-version: 2009-09-19
content-length: 1930
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=c66317b5af8832c34e9668865f02cb5d
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=c66317b5af8832c34e9668865f02cb5d
IP
File type ASCII text, with very long lines (13192)
Hash fb99ab0eb44a751b9119ea4cf55ddb47
6f1422ea586b90ca24c102afce22514659f6e6db
f4e46b35574fe41c9ce513804ee6857bee94aebff0fc5880f0a456b281a31197
GET /en_US/sdk.js?hash=c66317b5af8832c34e9668865f02cb5d HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 8fa2f98c47dff76e084e12f43cce3464
etag: "35a1631b4cd86c538e21230a3fdad3a6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 11 Dec 2023 03:49:45 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: +5mrDrRKdRuRGepM9V3bRw==
x-fb-debug: kGEgy1zsiYnCZOhxdtV/tA6dpup95FMoh0SSSNyrjN3xfse16u0cPvEX7p/vSAWb6++Gicc85xKE/g5tQfwKLA==
content-length: 87000
x-fb-trip-id: 1904183273
date: Sun, 11 Dec 2022 05:32:53 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e8d575811c2d77a745d4cb6b3584414
0147c34e51b36cbd7111e5eb5697c1ab53a82eb1
ff8e431c44a39e35511f44d787bcfd34aa6f1da9ddece641fb092845f421b69b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF8E431C44A39E35511F44D787BCFD34AA6F1DA9DDECE641FB092845F421B69B"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3755
Expires: Sun, 11 Dec 2022 06:35:28 GMT
Date: Sun, 11 Dec 2022 05:32:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e8d575811c2d77a745d4cb6b3584414
0147c34e51b36cbd7111e5eb5697c1ab53a82eb1
ff8e431c44a39e35511f44d787bcfd34aa6f1da9ddece641fb092845f421b69b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF8E431C44A39E35511F44D787BCFD34AA6F1DA9DDECE641FB092845F421B69B"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3755
Expires: Sun, 11 Dec 2022 06:35:28 GMT
Date: Sun, 11 Dec 2022 05:32:53 GMT
Connection: keep-alive
lbs.eu-1-id5-sync.com/lbs/v1
200 OK 34 B URL HTTP/1.1 lbs.eu-1-id5-sync.com/lbs/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 366e3a73dbf6b35d0c0cdffa8f496a4b
a8db0ce964540812e7284702d1d52454760ca7ea
38566577b41dc6ae422e57b62854841bc1d2a8164107f4c74915ed3dcd6bc622
GET /lbs/v1 HTTP/1.1
Host: lbs.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 11 Dec 2022 05:32:53 GMT
access-control-allow-origin: https://aneologism.com
vary: Origin
content-type: application/json
content-length: 34
strict-transport-security: max-age=63072000; includeSubDomains; preload
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 55930629b3416d83931199a60c288d95
67c49c5d981630d720b11086ba0194bfcc35b468
0379e9c3a81a35b2b2767a92b5a48f44f75da4e6d689d3a252803b4fcf09059f
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://aneologism.com
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 11 Dec 2022 05:32:52 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.digicert.com/
200 OK 314 B IP
Hash 2ac276a037954d448aa95f53aca7559d
fb9620c7b617e3d08eb1b27fc209f65b13fc973c
2cc24e64b1bd424ae447613eb93d0ec7c1fbef047bf379b33b9d8c3e77b93433
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1735
Cache-Control: max-age=86551
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 05:32:53 GMT
Etag: "639413d5-13a"
Expires: Mon, 12 Dec 2022 05:35:24 GMT
Last-Modified: Sat, 10 Dec 2022 05:06:29 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 314
syndication.twitter.com/settings?session_id=a4862c85eaaa90dbaf18b72b97b09ecf9aadc35d
200 OK 386 B URL HTTP/2 syndication.twitter.com/settings?session_id=a4862c85eaaa90dbaf18b72b97b09ecf9aadc35d
IP
File type JSON data\012- , ASCII text, with very long lines (980), with no line terminators
Hash d8191391c888619de075f6e68400d5d0
c50e4465150fa960db0be7c1eb5907a5f96eb5ed
115d700c917d36ef2d666d1c634f3b77413b2bccb78266bdba043b318009f773
GET /settings?session_id=a4862c85eaaa90dbaf18b72b97b09ecf9aadc35d HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:53 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Sun, 11 Dec 2022 05:32:54 GMT
content-length: 386
content-encoding: gzip
x-transaction-id: fe2c3533fef423fb
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 108
x-connection-hash: ea82781bc3cc2cf07af21b71164f017ccfe83987ecf3529541c0cb0559da3ba3
X-Firefox-Spdy: h2
a.config.skype.com/config/v1/SkypeLyncWebExperience/905_1.2.5.0?apikey=shareButton&fingerprint=ffabfcd6-7bbc-49d7-a3b6-334f784bffeb&callback=Skype.onConfigurationLoaded
200 OK 823 B URL HTTP/2 a.config.skype.com/config/v1/SkypeLyncWebExperience/905_1.2.5.0?apikey=shareButton&fingerprint=ffabfcd6-7bbc-49d7-a3b6-334f784bffeb&callback=Skype.onConfigurationLoaded
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1488), with no line terminators
Hash 028124a953d264c62eff218d70bc4a18
42d848d88e37f007ed6d20fb0b3b58568972bf44
d454e14b0a030d6e5d50ff53f2963d873fb9bdff91baa913b2bd7dfe494d36e0
GET /config/v1/SkypeLyncWebExperience/905_1.2.5.0?apikey=shareButton&fingerprint=ffabfcd6-7bbc-49d7-a3b6-334f784bffeb&callback=Skype.onConfigurationLoaded HTTP/1.1
Host: a.config.skype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,max-age=3600
content-length: 823
content-type: application/javascript
content-encoding: br
expires: Sun, 11 Dec 2022 06:32:54 GMT
etag: "rFqGee4XhITkzQVzmkQxk4a9IrhqftJUvvYe+eztj7U="
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4D61C38FA88846858C3972703D781EC5 Ref B: OSL30EDGE0122 Ref C: 2022-12-11T05:32:53Z
date: Sun, 11 Dec 2022 05:32:53 GMT
X-Firefox-Spdy: h2
swx.cdn.skype.com/skypewebsdk/shareButton/v/1.4.0.0/js/shareButton.min.js
200 OK 25 kB URL HTTP/2 swx.cdn.skype.com/skypewebsdk/shareButton/v/1.4.0.0/js/shareButton.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (47702), with CRLF line terminators
Hash 9c46f1d170ee4ce7ca220865537020a4
6fda2eded6e22d215edc54873df104f39bbaea9c
dede6fe42a039684fd5630f5f0c70bc89de734214eb54861499daa8652ad9f99
GET /skypewebsdk/shareButton/v/1.4.0.0/js/shareButton.min.js HTTP/1.1
Host: swx.cdn.skype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 442224
content-md5: nEbx0XDuTOfKIghlU3AgpA==
content-type: text/javascript;charset=utf-8
date: Sun, 11 Dec 2022 05:32:54 GMT
etag: 0x8D3D898C4539BF4
last-modified: Fri, 09 Sep 2016 10:05:02 GMT
server: ECAcc (ska/F6BD)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: cbc97f37-201e-0089-541c-095dc0000000
x-ms-version: 2009-09-19
content-length: 24840
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da299424be0e5dcca38c10eaf53b8bff
0bbdfd4328b80889b9abd9149672f01b9b93e70c
621b4338d3fee53dd195b6a94fb580c9515b2e57af8ebf121e7d8d180ff0801e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "621B4338D3FEE53DD195B6A94FB580C9515B2E57AF8EBF121E7D8D180FF0801E"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13167
Expires: Sun, 11 Dec 2022 09:12:21 GMT
Date: Sun, 11 Dec 2022 05:32:54 GMT
Connection: keep-alive
swx.cdn.skype.com/skypewebsdk/shareButton/v/1.4.0.0/assets/css/shareButton.css
200 OK 533 B URL HTTP/2 swx.cdn.skype.com/skypewebsdk/shareButton/v/1.4.0.0/assets/css/shareButton.css
IP
File type ASCII text, with very long lines (1405)
Hash 4a194a1f5547dd5271a5672459e529ca
04c3e0cedd43319109dd8a631231f04490189c23
b0c1fa681b39576d2e00d218daa6f042e7ac32f4d48df56caf138d1ee3e139ef
GET /skypewebsdk/shareButton/v/1.4.0.0/assets/css/shareButton.css HTTP/1.1
Host: swx.cdn.skype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 151740
content-md5: ShlKH1VH3VJxpWckWeUpyg==
content-type: text/css
date: Sun, 11 Dec 2022 05:32:54 GMT
etag: 0x8D3D898C49F74B2
last-modified: Fri, 09 Sep 2016 10:05:03 GMT
server: ECAcc (ska/F6E2)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 3feb3a0f-101e-0009-13c0-0bfe6a000000
x-ms-version: 2009-09-19
content-length: 533
X-Firefox-Spdy: h2
platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
IP
File type ASCII text, with very long lines (7017), with no line terminators
Hash 83616664e4155f8af0efb0576f8920cf
1277b0f4f935bec3ada0f87c45395bb6d9b2efbc
bb19d85932c5e8a952b6fc28c1df42aed6d6920f79ee3f2217d2484294d575d3
GET /js/button.d2f864f87f544dc0c11d7d712a191c1f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 281295
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Sun, 11 Dec 2022 05:32:54 GMT
Etag: "7bb2d17ac20be3bd6ec1079356afecd9+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70F)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2362
widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&callback=PIN_1670736772405.f.callback[0]
200 OK 38 kB URL HTTP/2 widgets.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&callback=PIN_1670736772405.f.callback[0]
IP
File type ASCII text, with no line terminators
Hash cd3417eeb3eb254ba0e55a200d19f477
e3df3a43a9acd581da2c878b5922b5b281ac6ce9
092656c28745eb0f4ae01214a6bf98532d292c16b1aabe056fa71e5c6afb379d
GET /v1/urls/count.json?url=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&callback=PIN_1670736772405.f.callback[0] HTTP/1.1
Host: widgets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
cache-control: must-revalidate, max-age=887
expires: Sun, 11 Dec 2022 05:47:53 GMT
x-envoy-upstream-service-time: 1
x-pinterest-rid: 1100406183490079
date: Sun, 11 Dec 2022 05:32:53 GMT
age: 0
content-encoding: br
vary: accept-encoding
accept-ranges: none
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b287425c31c55a3c0bdcf1cf9d828a6a
a30dfd8939773593bce40fd367eebec1b658a18b
21c25fb6b0eceba5dfb8462ed6be2094f40259299ed7439d1cf9e128df12602d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C25FB6B0ECEBA5DFB8462ED6BE2094F40259299ED7439D1CF9E128DF12602D"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8649
Expires: Sun, 11 Dec 2022 07:57:03 GMT
Date: Sun, 11 Dec 2022 05:32:54 GMT
Connection: keep-alive
cdn.cloudimagesb.com/bi/79/03/b3/7903b3cfa4c8ade65821ccd6ac4c2c18/1643388007.gif
200 OK 27 kB URL HTTP/2 cdn.cloudimagesb.com/bi/79/03/b3/7903b3cfa4c8ade65821ccd6ac4c2c18/1643388007.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 468 x 60\012- data
Hash 5203c9ee6e869ebef2dd62e23f9114e5
8d8ed4a3f146a5b17bff4e76f8b42db5e2ae174a
d11922e82b5359db44fefd0e655c3739097eb58d336a0c5515cf8cadbc6da68e
GET /bi/79/03/b3/7903b3cfa4c8ade65821ccd6ac4c2c18/1643388007.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/gif
content-length: 27308
server: nginx/1.17.6
last-modified: Fri, 28 Jan 2022 16:40:14 GMT
etag: "61f41c6e-6aac"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/47/de/43/47de435b05704ef8f04d5ba96af98076/1659523922.jpg
200 OK 10 kB URL HTTP/2 cdn.cloudimagesb.com/bi/47/de/43/47de435b05704ef8f04d5ba96af98076/1659523922.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x50, components 3\012- data
Hash 4c5ebd89a8f5274bbdd4c99cf7cd421f
14c2ee06b662d6b1864d5e2e1dbc6c68e17609be
e8d47b996abf41c0081e3d4e6195170fcdc1738788baba7401b6218b322e7ba7
GET /bi/47/de/43/47de435b05704ef8f04d5ba96af98076/1659523922.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/jpeg
content-length: 10101
server: nginx/1.17.6
last-modified: Wed, 03 Aug 2022 10:52:10 GMT
etag: "62ea535a-2775"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32033)
Hash cd8176e04a5a760140a9de9ffe9d8a17
f3b4514c9df71da30eadd2d87fd6131e5c3bf7e3
601089b9e7dcd29e255c391dff1c3da64dd80bb72ee047561592d86dbbc4c472
GET /widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 281289
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Sun, 11 Dec 2022 05:32:54 GMT
Etag: "126ffb93f08e989b18a6e1fc082c9e33+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:56 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70F)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13753
cdn.cloudimagesb.com/cti/4a/73/9a/4a739ae3337782d6f0857c15107ef3da/1663334721.png
200 OK 43 kB URL HTTP/2 cdn.cloudimagesb.com/cti/4a/73/9a/4a739ae3337782d6f0857c15107ef3da/1663334721.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash 43893a3257a410b3a4b589e870af60f3
9ea4647756d691daf7c3eddb37edecc5ca474b8c
95b1410fd0574179bb1266eef2996feb3a3796665454b3b6df4f5f95c58fa15a
GET /cti/4a/73/9a/4a739ae3337782d6f0857c15107ef3da/1663334721.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/png
content-length: 43431
server: nginx/1.17.6
last-modified: Fri, 16 Sep 2022 13:25:29 GMT
etag: "63247949-a9a7"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
id5-sync.com/g/v2/231.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/231.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7a1e963f09cd337e0f87e912c41bfd02
2fe7ffd2edb97290981aafc47617c78eb7128a48
bc14b47f45bc47a4807397db2e2f065bfd10481185d07d2d5d3eaf2ecc2d9fd2
POST /g/v2/231.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://aneologism.com
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 11 Dec 2022 05:32:53 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
cdn.cloudimagesb.com/bi/72/ed/cb/72edcb8bd017e763bc251627c0f30c91/1663242777.jpg
200 OK 26 kB URL HTTP/2 cdn.cloudimagesb.com/bi/72/ed/cb/72edcb8bd017e763bc251627c0f30c91/1663242777.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 160x600, components 3\012- data
Hash a94fd896e074ace62a4c2d562023a365
76f7ca5ab7936b7b5f747778b4ec94295f307fee
95289ab057a78befab31336e9f9ff3e7b4e8b0b96c771d3774c29ac73abddc30
GET /bi/72/ed/cb/72edcb8bd017e763bc251627c0f30c91/1663242777.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/jpeg
content-length: 25450
server: nginx/1.17.6
last-modified: Thu, 15 Sep 2022 11:53:05 GMT
etag: "63231221-636a"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/f9/86/9e/f9869efd86307f7311982fcf8fe030e5/1647005116.gif
200 OK 105 kB URL HTTP/2 cdn.cloudimagesb.com/bi/f9/86/9e/f9869efd86307f7311982fcf8fe030e5/1647005116.gif
IP
ASN #39572 DataWeb Global Group B.V.
Size 105 kB (104608 bytes)
Hash c2372a9a32443944bb9aa9ba6477f3e1
e7e1dbf9a583b425f7163dd0f64b354488e2b220
0b3ade185dfd1c5e404da110dc3cee890bafbcc980bcc5129b18990099b0c31f
GET /bi/f9/86/9e/f9869efd86307f7311982fcf8fe030e5/1647005116.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/gif
content-length: 28818
server: nginx/1.17.6
last-modified: Fri, 11 Mar 2022 13:25:24 GMT
etag: "622b4dc4-7092"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/0d/4f/53/0d4f5377976a56040433d5a0fa10995f/1660566579.jpg
200 OK 17 kB URL HTTP/2 cdn.cloudimagesb.com/bi/0d/4f/53/0d4f5377976a56040433d5a0fa10995f/1660566579.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 160x300, components 3\012- data
Hash d5a57abcf48b4adfc316e56b4337daaf
0f24c4fc607a5cdf92a3ea245ac23a8f9bc2b40d
c16f215cf29422f54163b0f3dfe97e95a932bf54286538bc7859ebb15175c3df
GET /bi/0d/4f/53/0d4f5377976a56040433d5a0fa10995f/1660566579.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/jpeg
content-length: 17164
server: nginx/1.17.6
last-modified: Mon, 15 Aug 2022 12:29:47 GMT
etag: "62fa3c3b-430c"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/4b/96/68/4b96685c0a3091928ea888570b86bf0e/1627917142.png
200 OK 30 kB URL HTTP/2 cdn.cloudimagesb.com/cti/4b/96/68/4b96685c0a3091928ea888570b86bf0e/1627917142.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced\012- data
Hash 84492852893bb0a3be45fee0a0068ab6
99f7af18f0b8e6bef900db182ae34cde9d5ff93d
d01b52546146a16b27bc3178ea4155e47dc0cb8c0fdd558fc0c82e695e1f4f20
GET /cti/4b/96/68/4b96685c0a3091928ea888570b86bf0e/1627917142.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/png
content-length: 30010
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 15:12:29 GMT
etag: "61080b5d-753a"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/74/c1/94/74c1945e14b45aa3191f984373718b0c/1660565932.jpg
200 OK 20 kB URL HTTP/2 cdn.cloudimagesb.com/bi/74/c1/94/74c1945e14b45aa3191f984373718b0c/1660565932.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 3ed39bbf2c8f8e6a3b6c7d654b4aef85
55bb67e2a6e3bbc64ee25d44a110ff51684fe082
205a0877654d7b4b43f260ba5a99128c2c23d1b2683eb0d0fbf99c493c4fdeec
GET /bi/74/c1/94/74c1945e14b45aa3191f984373718b0c/1660565932.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/jpeg
content-length: 20099
server: nginx/1.17.6
last-modified: Mon, 15 Aug 2022 12:19:00 GMT
etag: "62fa39b4-4e83"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/fe/c0/72/fec072c4a0fcf71db55414bb9d55d10b/1667984161.jpg
200 OK 19 kB URL HTTP/2 cdn.cloudimagesb.com/bi/fe/c0/72/fec072c4a0fcf71db55414bb9d55d10b/1667984161.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 728x90, components 3\012- data
Hash 5a8908239427c7a0e9617439b67f3f07
e136d02f3363764a01ef42246820eb18e94a37af
4fdc17091f71f98ebef4a2ee8cdcff540a7c0bb76ebe65833fdb81880c411d28
GET /bi/fe/c0/72/fec072c4a0fcf71db55414bb9d55d10b/1667984161.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/jpeg
content-length: 18848
server: nginx/1.17.6
last-modified: Wed, 09 Nov 2022 08:56:09 GMT
etag: "636b6b29-49a0"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/f0/d1/fa/f0d1fad35001f205f9d2aa97f8b9268d/1667984701.jpg
200 OK 15 kB URL HTTP/2 cdn.cloudimagesb.com/bi/f0/d1/fa/f0d1fad35001f205f9d2aa97f8b9268d/1667984701.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 160x300, components 3\012- data
Hash a92c0121ea6805dc89377fd3217acea9
4c1def116f1c42ba5c3748e4e2d68827610304be
2fc1b5ab08d505202abb5ff12093ed1a76ef2028c48d6255af57509f0be6fec8
GET /bi/f0/d1/fa/f0d1fad35001f205f9d2aa97f8b9268d/1667984701.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/jpeg
content-length: 14834
server: nginx/1.17.6
last-modified: Wed, 09 Nov 2022 09:05:09 GMT
etag: "636b6d45-39f2"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/f7/46/d9/f746d9f9df58ac470499b58ac5af2e2b/1663334679.png
200 OK 40 kB URL HTTP/2 cdn.cloudimagesb.com/cti/f7/46/d9/f746d9f9df58ac470499b58ac5af2e2b/1663334679.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 600, 8-bit/color RGB, non-interlaced\012- data
Hash a3aaf967f3b5225b6e416c3f639f5066
557bb8150547c13fe8e5bead437d138704bf009e
5562f313c56a33fd5fc8f7ab46aafc9b28edb31c367d590d4f6f5744370f9532
GET /cti/f7/46/d9/f746d9f9df58ac470499b58ac5af2e2b/1663334679.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
content-type: image/png
content-length: 39782
server: nginx/1.17.6
last-modified: Fri, 16 Sep 2022 13:24:47 GMT
etag: "6324791f-9b66"
expires: Tue, 13 Dec 2022 05:32:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670736772856%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=a4862c85eaaa90dbaf18b72b97b09ecf9aadc35d
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670736772856%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=a4862c85eaaa90dbaf18b72b97b09ecf9aadc35d
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670736772856%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=a4862c85eaaa90dbaf18b72b97b09ecf9aadc35d HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:54 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Sun, 11 Dec 2022 05:32:54 GMT
content-length: 43
x-transaction-id: 56b162c8f387be7a
strict-transport-security: max-age=631138519
x-response-time: 108
x-connection-hash: ea82781bc3cc2cf07af21b71164f017ccfe83987ecf3529541c0cb0559da3ba3
X-Firefox-Spdy: h2
log.pinterest.com/?type=pidget&guid=Eki8NLxHzPVX&tv=2021110201&event=init&sub=www&button_count=4&follow_count=0&pin_count=0&button_hover=1&custom_local=1&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&viaSrc=canonical
200 OK 0 B URL HTTP/2 log.pinterest.com/?type=pidget&guid=Eki8NLxHzPVX&tv=2021110201&event=init&sub=www&button_count=4&follow_count=0&pin_count=0&button_hover=1&custom_local=1&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&viaSrc=canonical
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?type=pidget&guid=Eki8NLxHzPVX&tv=2021110201&event=init&sub=www&button_count=4&follow_count=0&pin_count=0&button_hover=1&custom_local=1&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&viaSrc=canonical HTTP/1.1
Host: log.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-envoy-upstream-service-time: 3
server: envoy
x-pinterest-rid: 5609820525992537
accept-ranges: bytes
date: Sun, 11 Dec 2022 05:32:54 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670736775.846630,VS0,VE42
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.4.0&x-apikey=bc1a88c3ef7240a99d650eacd67609ae-b21a92f6-51f2-46d6-be26-e7f9b8722dfa-7553
200 OK 0 B URL HTTP/1.1 browser.pipe.aria.microsoft.com/Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.4.0&x-apikey=bc1a88c3ef7240a99d650eacd67609ae-b21a92f6-51f2-46d6-be26-e7f9b8722dfa-7553
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=ACT-Web-JS-2.4.0&x-apikey=bc1a88c3ef7240a99d650eacd67609ae-b21a92f6-51f2-46d6-be26-e7f9b8722dfa-7553 HTTP/1.1
Host: browser.pipe.aria.microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1205
Origin: https://aneologism.com
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: application/json
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
time-delta-millis: 2499
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id
Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis
Date: Sun, 11 Dec 2022 05:32:55 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc78a24f8-f4ee-4791-974e-e408b46447ee.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc78a24f8-f4ee-4791-974e-e408b46447ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 543eb7d498947c0243a738eebbf4f91b
9c5fef3b2f00118482a35ac86fcc5dc77dca203d
d52693896b3d70dee4e2f59202431c65bfcd03fd10ef1fe243515e651ec8cb1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc78a24f8-f4ee-4791-974e-e408b46447ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: dd357eb8-0b2b-4207-82c9-9cdf9a19da75
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c82_rENsoAMFU-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63950530-26aa64c532aead900741ba9b;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 22:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WdTZlWwIonNT7H6qDMi7fiu_bY386f4UCUNoPNJZiLPQOZay21O6vw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 01:03:43 GMT
age: 16154
etag: "9c5fef3b2f00118482a35ac86fcc5dc77dca203d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
assets.tumblr.com/share-button.js
200 OK 0 B URL HTTP/2 assets.tumblr.com/share-button.js
IP
GET /share-button.js HTTP/1.1
Host: assets.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 07 Aug 2020 05:05:18 GMT
vary: Accept-Encoding
etag: W/"5f2ce10e-2d2f"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, immutable
strict-transport-security: max-age=31536000; preload
timing-allow-origin: *
x-nc: HIT arn 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.facebook.com/v2.3/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df250ba89c0d27c6%26domain%3Daneologism.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Faneologism.com%252Ff68630348909f%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&layout=button_count&locale=en_US&sdk=joey
200 OK 0 B URL HTTP/2 www.facebook.com/v2.3/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df250ba89c0d27c6%26domain%3Daneologism.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Faneologism.com%252Ff68630348909f%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&layout=button_count&locale=en_US&sdk=joey
IP
GET /v2.3/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df250ba89c0d27c6%26domain%3Daneologism.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Faneologism.com%252Ff68630348909f%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&layout=button_count&locale=en_US&sdk=joey HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: J1b8+7wKEWRCi5hS+wqbMG3g0noBqEPnGOBm0l8pAP/8vOZWIIfrYqL0o75BWlksthkJBj0NIiJUn18I7xxmvw==
date: Sun, 11 Dec 2022 05:32:54 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/comment-reply.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/comment-reply.min.js
IP
GET /c/6.1.1/wp-includes/js/comment-reply.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/e-202249.js
200 OK 0 B IP
GET /e-202249.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Sun, 26 Nov 2023 23:19:16 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,600
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,600
IP
GET /css?family=Open+Sans:400,400italic,700,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 11 Dec 2022 05:32:49 GMT
date: Sun, 11 Dec 2022 05:32:49 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
embed.tumblr.com/widgets/share/button?canonicalUrl=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&postcontent%5Btitle%5D=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit&postcontent%5Bcontent%5D=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F
200 OK 0 B URL HTTP/2 embed.tumblr.com/widgets/share/button?canonicalUrl=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&postcontent%5Btitle%5D=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit&postcontent%5Bcontent%5D=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F
IP
GET /widgets/share/button?canonicalUrl=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F&postcontent%5Btitle%5D=Kirsty%20Buchan%20leaked%20onlyfans%20on%20reddit%20and%20twitter%2C%20Scots%20teacher%20resigns%20after%20explicit&postcontent%5Bcontent%5D=https%3A%2F%2Faneologism.com%2Fleaked%2Fkirsty-buchan-leaked-onlyfans-on-reddit-and-twitter-scots-teacher-resigns-after-explicit%2F HTTP/1.1
Host: embed.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:52 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-rid: 0782125c6bca9a16a8ef83285262697d
p3p: CP="Tumblr's privacy policy is available here: https://www.tumblr.com/policy/en/privacy"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-robots-tag: noindex
cache-control: max-age=120
x-ua-compatible: IE=Edge,chrome=1
content-encoding: br
x-nc: MISS arn 1
access-control-allow-origin: *
strict-transport-security: max-age=31536000; preload
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.6/_inc/social-logos/social-logos.min.css
200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.6/_inc/social-logos/social-logos.min.css
IP
GET /p/jetpack/11.6/_inc/social-logos/social-logos.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 30 Jun 2020 14:24:10 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
jsc.mgid.com/a/n/aneologism.com.1389080.js
200 OK 0 B URL HTTP/2 jsc.mgid.com/a/n/aneologism.com.1389080.js
IP
GET /a/n/aneologism.com.1389080.js HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=2346
etag: W/"cd0cc3594b7882b27ce5ecf98d8c050a"
last-modified: Mon, 21 Nov 2022 18:46:24 GMT
x-amz-id-2: ZPdhWVV5jFkR5TEhXan3xkUCaNRr6+HNpNPoNe74btTveEAAjHdJQKyuy82J5dTmwwxNooGXRsM=
x-amz-request-id: 99F0PY3R2B91B49Q
x-amz-version-id: h1aRIp.dlg_j83seiniiJ4VB1zArY1RK
cf-cache-status: HIT
expires: Sun, 11 Dec 2022 08:32:49 GMT
cache-control: public, max-age=10800
set-cookie: __cf_bm=kiA8NgmRU71PTx8KPPLxWWCXdk1K_YUJGM8Dp4RyDUY-1670736769-0-AbfOyDvCen2QuydGkJjssnzPmTyScgpgy0zPiUN4v7BrLryT+2YnhbCN239ka09zdz5TkAg17qdG7L3e+BmiW+E=; path=/; expires=Sun, 11-Dec-22 06:02:49 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 777bd789dfefb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.3/css/all.css?ver=7.4
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.15.3/css/all.css?ver=7.4
IP
GET /releases/v5.15.3/css/all.css?ver=7.4 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
x-amz-id-2: eqShVquJQKY9tjM61Vuq+loI4OCGb20/3DT8RPAHWy1Il+8tqI0HS7ImpR4nhrzFD6OesBkOUEA=
x-amz-request-id: HG8Y9WYKF3CH360M
last-modified: Wed, 30 Jun 2021 15:41:15 GMT
etag: W/"74bab4578692993514e7f882cc15c218"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1073794
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6CTKa0Me2Uw1GadO248J91p1wLWOt8kkwN%2B%2BriYKRTsFNDgH0PeP6KkFZxV4J3gKjpnFZ2%2FCT51Ot%2BimwuH9Bmh3DbaFPNX6BRpAs4qqzJToLDJxRHC4q5XlIqXR7MEOQvsEqvWe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 777bd78a0d2a887f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP
GET /c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.6/_inc/build/related-posts/related-posts.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.6/_inc/build/related-posts/related-posts.min.js
IP
GET /p/jetpack/11.6/_inc/build/related-posts/related-posts.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aneologism.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 05:32:49 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Mon, 11 Dec 2023 05:32:49 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
162.0.229.98
93.184.220.66
162.19.138.117
104.19.134.78
23.36.76.226
18.185.190.54
151.101.84.84
104.46.162.226