r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 82b16eb14f1e6142328812a7ce23aba0
e593e3d39cb7ed0051636ab154c90fb7830a2d6c
070df865bb5000b932fd03a0ee3c0ce972c1c3a3bd3d3bd4bbe69a4e03e6fd8d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "070DF865BB5000B932FD03A0EE3C0CE972C1C3A3BD3D3BD4BBE69A4E03E6FD8D"
Last-Modified: Sat, 17 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6816
Expires: Mon, 19 Sep 2022 22:02:17 GMT
Date: Mon, 19 Sep 2022 20:08:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9721
Expires: Mon, 19 Sep 2022 22:50:42 GMT
Date: Mon, 19 Sep 2022 20:08:41 GMT
Connection: keep-alive
www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
68.65.121.234301 Moved Permanently 707 B URL HTTP/1.1 www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
IP 68.65.121.234:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Mon, 19 Sep 2022 20:08:41 GMT
server: LiteSpeed
location: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
x-turbo-charged-by: LiteSpeed
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 19 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bHN6n_5tBkwdoWfaColdgyq3RZ6eduImGIag4rCpveICdDX1q0KcWA==
age: 56008
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
34.120.5.221200 OK 36 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP 34.120.5.221:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f8a538188b2b7942fa9204490a60ca24
a22a2c7ec26ec81e3e88107fbdffed74092028ef
03540994e7a1969b705b0f0dce6a1bd5edda2a825f263c0afbb881a5d088023d
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: C86-_QC10o5SWLCSCUAIQ832dBJX4kUv8pNq-4C7y-4xaB764_kVng==
content-encoding: gzip
via: 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 20:03:41 GMT
age: 352
content-type: application/json
content-length: 36158
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 19 Sep 2022 19:12:48 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OBXxuF3D4D_3i8eq2M_-UPOq_LHzfJP86VFKY56OV1cyBFGVjxEtgg==
Age: 3353
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 19 Sep 2022 20:03:22 GMT
Cache-Control: max-age=3600
Expires: Mon, 19 Sep 2022 20:30:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BNnUkSZu8MuNCmSBYsgPQsZ8u4BtUdbgWWBV61Rnp6hgOXcneXE__w==
Age: 319
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash ee4a15998f5fb5834c4c23565aee8ca3
d2265bc825e4efe9747722e22441a6c827136467
c781a1be20c5453f3b1c67271478a0feac786566458fe307cf24bc50a7ebf04b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 19 Sep 2022 20:08:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 16 Sep 2022 13:21:46 GMT
Expires: Fri, 23 Sep 2022 13:21:45 GMT
Etag: "d2265bc825e4efe9747722e22441a6c827136467"
Cache-Control: max-age=320583,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74d4f46cf8dfb505-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5c817aa82ca8ed4a4257fd1e1628b423
7905c62b6bbc582860c07b75eddae371a4b8d02b
dce1783ecfe50c83d30878b48d60e1cf3fe42a3fa4090fb5d318194de73e53d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5701
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:42 GMT
Last-Modified: Mon, 19 Sep 2022 18:33:41 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.148.148.62101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.148.62:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Zq3pE0ZWdEC7h/ei7w18Pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0+7QCTg7FBAgi8kZYsCKXOgH6jY=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash eaa8b4aa123f9dd7237c5c51d2f848d9
1082f5f6ef7229ec76f94f3d236f273b26294563
d1ad33dae2fcab5c7d66875f0e7a01cc30e0b3a031606917fa5448c54f84e20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
192.0.77.37200 OK 2.9 kB URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP 192.0.77.37:0
File type ASCII text, with very long lines (11256), with no line terminators
Hash 81580df5c14153f01944b0783bc9cb13
98ad6d0f44a4aa3559fa0af11df9e2b09e855c85
1b7571b1951f993204b1f235a8de3a12d52cb463882ebce894770deac4805233
GET /c/6.0.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash eaa8b4aa123f9dd7237c5c51d2f848d9
1082f5f6ef7229ec76f94f3d236f273b26294563
d1ad33dae2fcab5c7d66875f0e7a01cc30e0b3a031606917fa5448c54f84e20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-D1LD43Q71C
142.250.74.72200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-D1LD43Q71C
IP 142.250.74.72:0
File type ASCII text, with very long lines (20189)
Hash a38cf014694e5e962a8823a3359c9bc8
5bb437701478dcdd349721538e6bb69914a26adf
d94cbe09b60f0ae6443b92abd13cd66505356de3e9fe8a71ca8f3887dd53f501
GET /gtag/js?id=G-D1LD43Q71C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 19 Sep 2022 20:08:42 GMT
expires: Mon, 19 Sep 2022 20:08:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76394
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/plugins/super-rss-reader/public/css/style.min.css?ver=4.7
68.65.121.234200 OK 974 B URL HTTP/2 www.pagzsix.com/wp-content/plugins/super-rss-reader/public/css/style.min.css?ver=4.7
IP 68.65.121.234:0
File type ASCII text, with very long lines (2925)
Hash 01e16e7029f71852ec4756498d63b1ac
c6b80c5d39e2c23c640512c0cff898da6492261b
ab7f3d60aa51213a38efd04729e2099ef53df717005c07c587ba64c3f7b839cc
GET /wp-content/plugins/super-rss-reader/public/css/style.min.css?ver=4.7 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Thu, 08 Sep 2022 16:07:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 974
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
68.65.121.234200 OK 719 B URL HTTP/2 www.pagzsix.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
IP 68.65.121.234:0
Hash af243c11fd71eae0cf9a5a4be911c5cd
eb0e3363cfd539f0badf690024437b32bab522b0
92ff6e3870fdfa9fd62aa5e9e48b462a7eafd26e6db9ef8c57f5538a5a8e7712
GET /wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:08:36 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 719
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/style.css
68.65.121.234200 OK 7.3 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/style.css
IP 68.65.121.234:0
File type ASCII text, with very long lines (374), with CRLF line terminators
Hash 9f0d2b74c4657d0d5d833f249215b978
7ff3407318328d13d786a1e089d8ef24c56ffe69
489c1098d67263c6eccccd418f2cfc6d0c33104c5f11d1bbbbda45656216fbb0
GET /wp-content/themes/maglist/style.css HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 7269
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/bootstrap/bootstrap.css?ver=4.3.1
68.65.121.234200 OK 10 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/bootstrap/bootstrap.css?ver=4.3.1
IP 68.65.121.234:0
File type ASCII text, with CRLF line terminators
Hash fe710c809d74d6cf32cbb4a723575c50
a9ba1bfe8f7650c3a0c00b0e7474bd00a949c7d0
8f059a35cbd8e012771ae28cb719d73e998ab83aa3e2824829a97f97b2038783
GET /wp-content/themes/maglist/assets/css/vendor/bootstrap/bootstrap.css?ver=4.3.1 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 10250
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto
142.250.74.10200 OK 983 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto
IP 142.250.74.10:0
Hash d7e22cfddfc98189ac60a2547ae685f8
b51497ce10e8edc98dcd2d9cb09d716dc809766c
e99fb029dbab4512f6cd71eb91defee2ef33d5aada0b6105cdb37373b27a4541
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 19 Sep 2022 20:08:42 GMT
date: Mon, 19 Sep 2022 20:08:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/css/dist/block-library/style.min.css
192.0.77.37200 OK 11 kB URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/css/dist/block-library/style.min.css
IP 192.0.77.37:0
File type ASCII text, with very long lines (43771)
Hash 50d6ff94af85febc6fcba40952992ace
0b37ec7e4dbf2796886b31214e3828da721b6e67
76b0b2b57c396983989d80ef510a2236799c191703f4c1fe028739885997cc9a
GET /c/6.0.2/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/font-awesome/css/font-awesome.css?ver=4.7.0
68.65.121.234200 OK 8.5 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/font-awesome/css/font-awesome.css?ver=4.7.0
IP 68.65.121.234:0
File type troff or preprocessor input, ASCII text, with very long lines (372), with CRLF line terminators
Hash 5e0c9ec865e31fcb0cfeea7aef84b98e
77e8ff3dbe9fcf9f91cc455dd6d0de97bd5e836a
b6cdeb00858a286aa81a2bc7080f65e9438da19cf1b5432282cc58b6a742c134
GET /wp-content/themes/maglist/assets/css/vendor/font-awesome/css/font-awesome.css?ver=4.7.0 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 8511
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/css/blocks.css
68.65.121.234200 OK 2.5 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/css/blocks.css
IP 68.65.121.234:0
File type ASCII text, with CRLF line terminators
Hash b39ffb01072286a2b6061a90eab96e0c
9b117beb8d585df927017e08e5f116bdbab10a69
4fbd6cbf7554e31a5ee51dd0962a67eb559590c328fee32560571e5cba4ce998
GET /wp-content/themes/maglist/assets/css/blocks.css HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 2480
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/slick.css
68.65.121.234200 OK 628 B URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/slick.css
IP 68.65.121.234:0
File type ASCII text, with CRLF line terminators
Hash 91c6b2863afed2270ba1687dfc45aeb1
67929a2c7bed59c5857f5a750ca0c67d255235ca
8182a6e9ac72616bb3ecaf116fb3a1870f4ab7d25c3f847597e48b18d7e186c0
GET /wp-content/themes/maglist/assets/css/vendor/slick.css HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 628
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/css/main.css
68.65.121.234200 OK 20 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/css/main.css
IP 68.65.121.234:0
File type ASCII text, with very long lines (449), with CRLF line terminators
Hash b2b6a9dc3405732528ec658eff091ef2
6bf705806c1ebb36f135ef15cc052bc9dd62e841
c0950973f72d92fdd1f314f395cae9fc5ad38a46808c95721a9d38492392bfe7
GET /wp-content/themes/maglist/assets/css/main.css HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: text/css
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 19854
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
68.65.121.234200 OK 18 kB URL HTTP/2 www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
IP 68.65.121.234:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 4159da08339f7e5aa6cd90254dcbf154
7f1c0047c8e47794f347d69c1396a20ee10cb56f
7a2d8a562ecca24b3d658c490fd0ad510ff03a833cff5a2b3a0fb19fbc027554
GET /krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-pingback: https://www.pagzsix.com/xmlrpc.php
link: <https://www.pagzsix.com/wp-json/>; rel="https://api.w.org/", <https://www.pagzsix.com/wp-json/wp/v2/posts/26258>; rel="alternate"; type="application/json", <https://www.pagzsix.com/?p=26258>; rel=shortlink
etag: "21732-1663608314;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding,User-Agent
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/plugins/super-rss-reader/public/js/script.min.js?ver=4.7
68.65.121.234200 OK 300 B URL HTTP/2 www.pagzsix.com/wp-content/plugins/super-rss-reader/public/js/script.min.js?ver=4.7
IP 68.65.121.234:0
File type ASCII text, with very long lines (802)
Hash 6dc2f16fbf53d349c81f22cb35d0427c
86efbab8ea1ae385283ca344ddf531520f21b399
baefa1b2ad29762720ac2828ef430677c2e0bb21d94689a1374f4be7a6047940
GET /wp-content/plugins/super-rss-reader/public/js/script.min.js?ver=4.7 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 16:07:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 300
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.0.2
68.65.121.234200 OK 399 B URL HTTP/2 www.pagzsix.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.0.2
IP 68.65.121.234:0
Hash d19f9e97449f052221c8f47e91b41fb1
f42de4cfc25e671971d668c6f6877c54aea9dc72
9082a2c9374ef8c15d296cf2ea62bac4bf97552637e5a9b13dd942724e1f2cba
GET /wp-content/plugins/wp-automatic/js/main-front.js?ver=6.0.2 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 16:08:36 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 399
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js?ver=680
68.65.121.234200 OK 5.3 kB URL HTTP/2 www.pagzsix.com/wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js?ver=680
IP 68.65.121.234:0
File type ASCII text, with very long lines (12498), with no line terminators
Hash 8048b6d6e47095728d83c70b07662c04
bd5b48fd8fa84daa82c89fce9f2d9f2feb2b8a2a
d2be36cf870400f6f5757f62fc574ec91a2ac80b4e63262c3a3aa55079eb1131
GET /wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js?ver=680 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Sat, 17 Sep 2022 01:38:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 5250
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/js/slick.js
68.65.121.234200 OK 15 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/js/slick.js
IP 68.65.121.234:0
File type ASCII text, with CRLF line terminators
Hash 30cc4f5f308f3e2aa69f8513f5c7e856
ccc6aea3e73ebc99c1ddd5719536d4d9d8a74ab8
e1557dda01fd27b6a1aa70e8625d35dbcfca8e2d1b5d495212733403b1e87cd5
GET /wp-content/themes/maglist/assets/js/slick.js HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 14940
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 98ca1622c31a46438396d1165c01feb3
291b64f4f658d01bde25457ef594b418f6c73974
395be3edfc9410a541142f506ddc4bfb6963390368a3bd38daad0e8cf8c879ea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "395BE3EDFC9410A541142F506DDC4BFB6963390368A3BD38DAAD0E8CF8C879EA"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21514
Expires: Tue, 20 Sep 2022 02:07:17 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
www.pagzsix.com/wp-content/themes/maglist/assets/js/jquery.marquee.js
68.65.121.234200 OK 4.5 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/js/jquery.marquee.js
IP 68.65.121.234:0
File type ASCII text, with CRLF line terminators
Hash f4a236be19549f5fd81ea12c831e89be
7b011aa0184e71c08499ea2631085192552ee67d
12fe062a7dbc6f8e365f10dd8c3b24bf635e06633cd92602cff63c0507960b4b
GET /wp-content/themes/maglist/assets/js/jquery.marquee.js HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 4464
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/js/sticky/ResizeSensor.js
68.65.121.234200 OK 1.8 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/js/sticky/ResizeSensor.js
IP 68.65.121.234:0
File type ASCII text, with CRLF line terminators
Hash bf0bb8329acbffc7643298a7c77e7df1
9fcdb2f3967606af206f163a08e68816f06daec1
a1d426feeed5a7fe3a5ffbcaeb6619b4d9b42c07ce7debddc8eb452b2dd5f3fd
GET /wp-content/themes/maglist/assets/js/sticky/ResizeSensor.js HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1826
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/js/sticky/theia-sticky-sidebar.js?ver=1.7.0
68.65.121.234200 OK 3.4 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/js/sticky/theia-sticky-sidebar.js?ver=1.7.0
IP 68.65.121.234:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 1011153c39d650b7be64bd70daebec88
c0bacc2c50d7136e000d1aa9ff54936c945712f6
085fed4a71bc682d6b6efa1af5043ef1049c223d0b44005d866bb5b41abb5da9
GET /wp-content/themes/maglist/assets/js/sticky/theia-sticky-sidebar.js?ver=1.7.0 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 19:58:04 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3444
date: Mon, 19 Sep 2022 19:58:04 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/js/main.js
68.65.121.234200 OK 6.9 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/js/main.js
IP 68.65.121.234:0
File type ASCII text, with very long lines (877)
Hash eca87e88dd1fc1207c5694c8f097bc3c
1ecc39ba3f68955f6bd4a9f64fa719ce288a7b40
0c88ab9e55e4601fe8a8a18405a3b0626ccf877f5f5b8a663fca74f160423d89
GET /wp-content/themes/maglist/assets/js/main.js HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6944
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.1.2
68.65.121.234200 OK 1.1 kB URL HTTP/2 www.pagzsix.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.1.2
IP 68.65.121.234:0
Hash 5cbba997429a94640afbbbc1bd8b6305
7d34e84412f6fe2e43492775bff7604bcb498bf1
60277379b5c38bbef2326d93550f71566f032c61659415b21a4be8e75fe09829
GET /wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.1.2 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Sun, 18 Sep 2022 07:26:08 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1141
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
68.65.121.234200 OK 5.8 kB URL HTTP/2 www.pagzsix.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 68.65.121.234:0
File type ASCII text, with very long lines (15660)
Hash 8d1ea9267894d63ba4c9ba45b845bf75
d42e28a1369c0c3e3d4eff65f21b8c72960cee0a
3be43ab5ea0a6131c8bc5b7a4207eff0516ac5c37fabddd5d879784bcbb299ba
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:42 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 15:26:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 5806
date: Mon, 19 Sep 2022 20:08:42 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
embassygroceryobvious.com/96/09/d8/9609d86b5e0973ba8254672597333523.js
192.243.59.20200 OK 13 kB URL HTTP/1.1 embassygroceryobvious.com/96/09/d8/9609d86b5e0973ba8254672597333523.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37154), with no line terminators
Hash 24cca64233ce51ff31661bdd6fcc3fd9
b0af7982c8e96c0877d27458244d101d2cc97cc4
4e645c3d660af50db2dc8b344b14a13ca875c621d33fa886b5bbee4317f96ad6
Analyzer Verdict Alert quad9 Sinkholed
GET /96/09/d8/9609d86b5e0973ba8254672597333523.js HTTP/1.1
Host: embassygroceryobvious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 19 Sep 2022 20:08:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a50f424a9aa23f3c02b11778c67f51a5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 00b79985d12bcdd71d65065a0866dc11
fff92e1cb194d81f626c0e51118f530088cbd908
cead40e06d32df572beb799818ee4ebd27748cdceb0d13b5f463de35ea8e7904
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6186
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Last-Modified: Mon, 19 Sep 2022 18:25:37 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
142.250.74.163200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:35:48 GMT
expires: Thu, 14 Sep 2023 19:35:48 GMT
cache-control: public, max-age=31536000
age: 433975
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a9323cf0781cad0d5ac23f0c81c105b1
772d0218be53da9f875bb96a287c904976c296da
5c808b03cd8dd26275f12a850d8a36b467246c1461ea65a4c717acb04f2ca722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 434075
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
embassygroceryobvious.com/7901fb1d66bd7245647ea867106fa29e/invoke.js
192.243.59.20200 OK 9.8 kB URL HTTP/1.1 embassygroceryobvious.com/7901fb1d66bd7245647ea867106fa29e/invoke.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26947), with no line terminators
Hash 71be18911adf642453e9d98b201f2432
2fd703c9e9dd772206b7a13be6a3cc103737151f
22b6e75642b36f874bb3258393859c94c466a257163e4403300d65bec9cc588d
Analyzer Verdict Alert quad9 Sinkholed
GET /7901fb1d66bd7245647ea867106fa29e/invoke.js HTTP/1.1
Host: embassygroceryobvious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 19 Sep 2022 20:08:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fbc00e3a111245afe6b696bcd3087f26
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 6df30310ab4bd12fd1d6de14fc431cc4
e91defc2ab45d425901a3b800be0870c6a71daf9
6c0fdf8a295320d533a82a1c5019cece54752992aee4fcdfb9957d6f4a736d5c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 19 Sep 2022 20:08:43 GMT
Last-Modified: Mon, 19 Sep 2022 19:42:28 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gs9CX_5eoFoQpboG4FPdaZMnc4VsYWucfw-WhX-c3Wshrzi3HQrGpw==
Age: 1575
simplewebanalysis.com/stats
35.158.153.212200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 35.158.153.212:0
File type ASCII text, with no line terminators
Hash c3081d84dacf28f9b034398cb8407ffc
38bee33a5242b63c56e56e0c1aacabd675287ee1
111ab6f46ccb9989d7915ced03a3c1b62411af64e3a8e78bd3400b7d48b4d117
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:43 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.pagzsix.com
access-control-allow-credentials: true
set-cookie: uid_id2=3d75015f-ab56-4b8c-8e7b-a64c35ba2471:1:1; expires=Thu, 16 Sep 2032 20:08:43 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
35.158.153.212200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 35.158.153.212:0
File type ASCII text, with no line terminators
Hash 70edec0af39889eaaa2dd149491de30d
4739aa05a6cc00241e834d11adeaf48b5e5322f4
aba38ee75c3171aa4089a648f581c395875009d275f7ae75ec5db454757db5da
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:43 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.pagzsix.com
access-control-allow-credentials: true
set-cookie: uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; expires=Thu, 16 Sep 2032 20:08:43 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
pixel.wp.com/g.gif?v=ext&j=1%3A11.3.1&blog=210294291&post=26258&tz=0&srv=www.pagzsix.com&host=www.pagzsix.com&ref=&fcp=2174&rand=0.38604122986444545
192.0.76.3200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&j=1%3A11.3.1&blog=210294291&post=26258&tz=0&srv=www.pagzsix.com&host=www.pagzsix.com&ref=&fcp=2174&rand=0.38604122986444545
IP 192.0.76.3:0
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&j=1%3A11.3.1&blog=210294291&post=26258&tz=0&srv=www.pagzsix.com&host=www.pagzsix.com&ref=&fcp=2174&rand=0.38604122986444545 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:43 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7443
Expires: Mon, 19 Sep 2022 22:12:46 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7443
Expires: Mon, 19 Sep 2022 22:12:46 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7443
Expires: Mon, 19 Sep 2022 22:12:46 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7443
Expires: Mon, 19 Sep 2022 22:12:46 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7443
Expires: Mon, 19 Sep 2022 22:12:46 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 01:08:23 GMT
age: 68420
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 00b79985d12bcdd71d65065a0866dc11
fff92e1cb194d81f626c0e51118f530088cbd908
cead40e06d32df572beb799818ee4ebd27748cdceb0d13b5f463de35ea8e7904
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6186
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Last-Modified: Mon, 19 Sep 2022 18:25:37 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e5b5676-18df-4d43-8bbd-b85ffe4f1a94.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e5b5676-18df-4d43-8bbd-b85ffe4f1a94.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1105b56cf779b6df1cbd081bbd0cda50
58c5d6f8ba1d3236d788ac55ff7cb2ec7863fb5c
10c1f0433baf51e06565ff905688075aaba8fec0a8b3f9cef34168e297f94c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e5b5676-18df-4d43-8bbd-b85ffe4f1a94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5866
x-amzn-requestid: 3a7db39d-cd4f-486f-954b-39fc7464706c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YrNeAE67IAMFSoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63278f8c-66a419ac7fbd977f5f41061b;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 21:37:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: TdVz72qdwMdsuW1WsOq1qEZk2vmbXJlbppLTTsZ9PlrmN7GEph0dyQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 21:51:43 GMT
age: 80220
etag: "58c5d6f8ba1d3236d788ac55ff7cb2ec7863fb5c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24f3f8eb-09f7-4c60-864d-3ff96da7c86a.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24f3f8eb-09f7-4c60-864d-3ff96da7c86a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 893f3495f1f575e946a57c8e8411b2a5
480182fd29c7edd369339847b85e4e2580cef0f6
097d868881231eae089ac8b97d5dc290583477f63dc35b7458ed4898e0db3e0c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24f3f8eb-09f7-4c60-864d-3ff96da7c86a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6428
x-amzn-requestid: 7dd3072b-403a-4bb4-b8c4-58a6d7c254f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YRmgCGJVIAMFk5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d5133-0756be8c75da02a857e36a2f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 03:08:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UPvPiYucU7q4x4t0X4tGF7XPXUy0D4F0gcXtWVx-MS-MOunPEWcVUA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 21:53:43 GMT
age: 80100
etag: "480182fd29c7edd369339847b85e4e2580cef0f6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd460ce9f-ea5c-436e-8b02-8ec8233b9681.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd460ce9f-ea5c-436e-8b02-8ec8233b9681.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4098577adb98eae5ba4a8b5e143df71
b0ad467f2837d103f8a96fb732bd34176c4c7110
83aa54020ffc684690dfb58d78608411de38ab02fee50808a8243c6b388e77c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd460ce9f-ea5c-436e-8b02-8ec8233b9681.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5064
x-amzn-requestid: 985dbd5b-3e8a-4e22-a974-1effa6c99112
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YrOS8FyBoAMFrCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632790df-201df5494f1513b91eefe9d5;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 21:42:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RWcHVQkq3COqcWuVRgOdpVDi7VFrdjpu4q-NU0D3iod1B58xF4K_Yw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 21:51:55 GMT
age: 80208
etag: "b0ad467f2837d103f8a96fb732bd34176c4c7110"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f003d8b6e12692fb16dddd6827deead8
786c333cf08456aea446a55c547520572e1c2df9
d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: b04884f3-149d-4750-876b-8e8762f0f2a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfzrHKMoAMFlfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6321467d-5852e5ef280580b8569b548f;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:11:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vaJ_7zKaGiXZh4VtTlLZCOFpi7bz9tpKRbsvRDJ4En-E93sREYnz5w==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 05:49:41 GMT
age: 51542
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc97d270b-72af-4a6b-ae64-123f7b52851e.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc97d270b-72af-4a6b-ae64-123f7b52851e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d9fd171b51b27aa84e06e7d5a40116e
a81660dcace8f232018ce9a6d027b271d1f8a863
2c80ffd2c0c451c61623a677d1b17e8e58a40a0a7bdb5ef1cac2610bb0a7e0a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc97d270b-72af-4a6b-ae64-123f7b52851e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: 8af37b3f-bacb-4f13-a539-0a8a1e2c7fe8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YrN_VHdooAMF8cQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63279061-083f90a5264568d85ce86e5a;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 21:40:49 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tPeWvkV7t7BSrnTA0G2Sf_KmuH5M4azBRhaeNuuaeiOW7zB4RhM_mw==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 21:51:50 GMT
age: 80213
etag: "a81660dcace8f232018ce9a6d027b271d1f8a863"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
68.65.121.234200 OK 77 kB URL HTTP/2 www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 68.65.121.234:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/maglist/assets/css/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pagzsix.com/wp-content/themes/maglist/assets/css/vendor/font-awesome/css/font-awesome.css?ver=4.7.0
Cookie: _ga_D1LD43Q71C=GS1.1.1663618103.1.0.1663618103.0.0.0; _ga=GA1.1.1754476857.1663618103
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:43 GMT
content-type: font/woff2
last-modified: Mon, 05 Sep 2022 16:13:34 GMT
accept-ranges: bytes
content-length: 77160
date: Mon, 19 Sep 2022 20:08:43 GMT
server: LiteSpeed
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/wp-mediaelement.min.css
192.0.77.37200 OK 4.1 kB URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP 192.0.77.37:0
File type ASCII text, with very long lines (4186), with no line terminators
Hash e32f9e61a4cd97f04438545e49a99420
33ce37b1e0ed069a4222576ab362916ecb0bc027
31107f53bf72723aed4c35284c37456af47ffe9f661c5634d56b1a837b28edec
GET /c/6.0.2/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/uploads/2022/09/cropped-Pagzsix-2-2.png
68.65.121.234200 OK 6.9 kB URL HTTP/2 www.pagzsix.com/wp-content/uploads/2022/09/cropped-Pagzsix-2-2.png
IP 68.65.121.234:0
File type PNG image data, 174 x 82, 8-bit/color RGB, non-interlaced\012- data
Hash e93ff8560d0bf333c94d5ce444ea34c6
26372bdbb3dc8e3165cd0ac69d54391f89104e15
64aa47f080867e4bf98786a9976fe34ded6e08d076180e656c5e62c7ce0ace39
GET /wp-content/uploads/2022/09/cropped-Pagzsix-2-2.png HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Cookie: _ga_D1LD43Q71C=GS1.1.1663618103.1.0.1663618103.0.0.0; _ga=GA1.1.1754476857.1663618103
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:43 GMT
content-type: image/png
last-modified: Sat, 17 Sep 2022 01:42:59 GMT
accept-ranges: bytes
content-length: 6899
date: Mon, 19 Sep 2022 20:08:43 GMT
server: LiteSpeed
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-D1LD43Q71C>m=2oe9e0&_p=1797460038&cid=1754476857.1663618103&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663618103&sct=1&seg=0&dl=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&dt=%23Krosno%20FILM%20NA%20KANALE%20%E2%80%93%20Leaked%20twitter%20krosno%20%E2%80%93%20Leaked%20krosno%20film%20%E2%80%93%20Leaked%20krosno%20video%20%E2%80%93%20ch%C5%82opaki%20z%20krosna%20%E2%80%93%20filmik%20z%20krosna%20twitter%20%C2%BB%20Pagzsix&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-D1LD43Q71C>m=2oe9e0&_p=1797460038&cid=1754476857.1663618103&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663618103&sct=1&seg=0&dl=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&dt=%23Krosno%20FILM%20NA%20KANALE%20%E2%80%93%20Leaked%20twitter%20krosno%20%E2%80%93%20Leaked%20krosno%20film%20%E2%80%93%20Leaked%20krosno%20video%20%E2%80%93%20ch%C5%82opaki%20z%20krosna%20%E2%80%93%20filmik%20z%20krosna%20twitter%20%C2%BB%20Pagzsix&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-D1LD43Q71C>m=2oe9e0&_p=1797460038&cid=1754476857.1663618103&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663618103&sct=1&seg=0&dl=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&dt=%23Krosno%20FILM%20NA%20KANALE%20%E2%80%93%20Leaked%20twitter%20krosno%20%E2%80%93%20Leaked%20krosno%20film%20%E2%80%93%20Leaked%20krosno%20video%20%E2%80%93%20ch%C5%82opaki%20z%20krosna%20%E2%80%93%20filmik%20z%20krosna%20twitter%20%C2%BB%20Pagzsix&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.pagzsix.com
date: Mon, 19 Sep 2022 20:08:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8e3921f0f8cfcebacd017c81607958ea
9390ce07af1a7e0b1205bacfde46cbff0defc99b
56cb7b20edf5f7ca889defac3d0baec1caf3f1d83cbf9e80f00cc022bbda7907
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56CB7B20EDF5F7CA889DEFAC3D0BAEC1CAF3F1D83CBF9E80F00CC022BBDA7907"
Last-Modified: Mon, 19 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8935
Expires: Mon, 19 Sep 2022 22:37:38 GMT
Date: Mon, 19 Sep 2022 20:08:43 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5b7a05fad83d3476facabd4e7eb8dc42
64d6ee10d23330cd51ea38487544c595b47f2633
4ff8fbed80185bfa0a9196affa36c5f60e743c86d3cf5328a5884b8058dca635
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6481
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Last-Modified: Mon, 19 Sep 2022 18:20:42 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ca3ab7a8411ba9c6350d504e65a95cc6
8b39f564b1b1cb1d262cb57b41a4bb5de331087f
cb51d72baec3c84ac94d419aab6d291b7596a9098525471fdb3fbbb6d34aa3db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ca3ab7a8411ba9c6350d504e65a95cc6
8b39f564b1b1cb1d262cb57b41a4bb5de331087f
cb51d72baec3c84ac94d419aab6d291b7596a9098525471fdb3fbbb6d34aa3db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js
157.240.200.14200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP 157.240.200.14:0
File type ASCII text, with very long lines (1961)
Hash 3d041ee4ab3addec37153873a7ecdea3
a1035598591152a2afe811804bd48322ad157b07
3f7a5e6aeea46bdad80af73702ec69ac0087542adfb926502e1422a26c4a1697
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: ad8c6002a92e073db4d1c1b37735016b
etag: "8dd3e342b62ed9672a4c5e1566f41217"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 19 Sep 2022 20:16:08 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: PQQe5Ks63ew3FThzp+zeow==
x-fb-debug: tpoieedk6yA59u/uJ8x69jf2gBJDbeBcAVZl4h8Y3lEkJx6TYOBueVy0eAc8UJcivVjrii5W54Z6GbEZcZ+QYw==
priority: u=3,i
content-length: 1685
x-fb-trip-id: 1679558926
date: Mon, 19 Sep 2022 20:08:43 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5b7a05fad83d3476facabd4e7eb8dc42
64d6ee10d23330cd51ea38487544c595b47f2633
4ff8fbed80185bfa0a9196affa36c5f60e743c86d3cf5328a5884b8058dca635
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6482
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:44 GMT
Last-Modified: Mon, 19 Sep 2022 18:20:42 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 20706352ab106a1435fd9a690235d339
04e366ed365f18182f6040edbc7bb00c2426c614
57f38eb173c0737537fe07881366599075c511a7c0862211b9e564b4f1579525
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57F38EB173C0737537FE07881366599075C511A7C0862211B9E564B4F1579525"
Last-Modified: Mon, 19 Sep 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19091
Expires: Tue, 20 Sep 2022 01:26:55 GMT
Date: Mon, 19 Sep 2022 20:08:44 GMT
Connection: keep-alive
driverpartially.com/watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1
173.233.139.164307 Temporary Redirect 0 B URL HTTP/1.1 driverpartially.com/watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1 HTTP/1.1
Host: driverpartially.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.pagzsix.com
Access-Control-Allow-Origin: https://www.pagzsix.com
Access-Control-Allow-Credentials: true
Location: https://driverpartially.com/watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1&shu=f7ae54f568c2443bb6fbd30de5e2f7f8be362b08ba2a4a202247fcb2383a313d011a178ae7e7feb385328272e699c8f660832d70bac4a89c2d4c8480319b892a9b0b91033c7b4888493f77c485c08c0ab8a8463145d8e4db163d782c5f6dc13f&pst=1663618184&rmtc=t
Set-Cookie: u_pl=17574603; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.jk-fstYEhH79SncGzdxIPklyw0tB5m5GYbXZGCKa764; expires=Mon, 19 Sep 2022 20:09:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ed9e0a182d44470b12982fa6cff098bc
Strict-Transport-Security: max-age=0; includeSubdomains
www.pagzsix.com/wp-content/uploads/2022/09/cropped-cropped-Pagzsix-1-192x192.png
68.65.121.234200 OK 14 kB URL HTTP/2 www.pagzsix.com/wp-content/uploads/2022/09/cropped-cropped-Pagzsix-1-192x192.png
IP 68.65.121.234:0
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Hash 245bef30d5d0f37a9e25a76a4cffa784
213674482e453ac50b8080df4211dcae75f1431c
190abcaecc22ea08847d93f88436b2c5770c73db6e29bdebaba8869b97961303
GET /wp-content/uploads/2022/09/cropped-cropped-Pagzsix-1-192x192.png HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Cookie: _ga_D1LD43Q71C=GS1.1.1663618103.1.0.1663618103.0.0.0; _ga=GA1.1.1754476857.1663618103; dom3ic8zudi28v8lr6fgphwffqoz0j6c=65b49067-6ea2-4e70-b1df-b4729bd0b4b1%3A2%3A1; sb_main_9609d86b5e0973ba8254672597333523=1; sb_count_9609d86b5e0973ba8254672597333523=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:44 GMT
content-type: image/png
last-modified: Sat, 17 Sep 2022 01:44:27 GMT
accept-ranges: bytes
content-length: 14359
date: Mon, 19 Sep 2022 20:08:44 GMT
server: LiteSpeed
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.pagzsix.com/wp-content/uploads/2022/09/cropped-cropped-Pagzsix-1-32x32.png
68.65.121.234200 OK 1.5 kB URL HTTP/2 www.pagzsix.com/wp-content/uploads/2022/09/cropped-cropped-Pagzsix-1-32x32.png
IP 68.65.121.234:0
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash ea3d7740398600f2e8da096ca540c5ee
821e5f9a14184aee67bc6bfc5fe845fd9c9693b1
b6b123e16c66842ef08fc77abe7aa84705ad703f76cc3dd0c78b3ef2d1d701af
GET /wp-content/uploads/2022/09/cropped-cropped-Pagzsix-1-32x32.png HTTP/1.1
Host: www.pagzsix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/krosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter/?feed_id=23287&_unique_id=6328a5f955413
Cookie: _ga_D1LD43Q71C=GS1.1.1663618103.1.0.1663618103.0.0.0; _ga=GA1.1.1754476857.1663618103; dom3ic8zudi28v8lr6fgphwffqoz0j6c=65b49067-6ea2-4e70-b1df-b4729bd0b4b1%3A2%3A1; sb_main_9609d86b5e0973ba8254672597333523=1; sb_count_9609d86b5e0973ba8254672597333523=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 26 Sep 2022 20:08:44 GMT
content-type: image/png
last-modified: Sat, 17 Sep 2022 01:44:27 GMT
accept-ranges: bytes
content-length: 1520
date: Mon, 19 Sep 2022 20:08:44 GMT
server: LiteSpeed
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_Ins45y9ixdaZJqVuqNCmqnQNXPSG0wqmNhY_DtXjQjMRidjakGzIskHW_-AR6KKCMMrahWBqboF_1jiVpcfGNCjsvxNwPoZl9rGDXCvAxjV1m9AOkjoOBIrcGYlUIGjpu5HsvmlI-Q2UKhYBQr9gzI0gHNktVBK3CwXJD2DzGJdBZabLpvCNzmSQsA/w1600/20220919_215712.jpg
142.250.74.1200 OK 71 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_Ins45y9ixdaZJqVuqNCmqnQNXPSG0wqmNhY_DtXjQjMRidjakGzIskHW_-AR6KKCMMrahWBqboF_1jiVpcfGNCjsvxNwPoZl9rGDXCvAxjV1m9AOkjoOBIrcGYlUIGjpu5HsvmlI-Q2UKhYBQr9gzI0gHNktVBK3CwXJD2DzGJdBZabLpvCNzmSQsA/w1600/20220919_215712.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 1280x710, components 3\012- data
Hash 81720a8687bc49398e1e262f1d816b2f
f021163c91380aa4aad96895fa68fae475e84107
186c641269611d82f8d927140d975508680ec09d287e1f95168adf0852971a0c
GET /img/b/R29vZ2xl/AVvXsEh_Ins45y9ixdaZJqVuqNCmqnQNXPSG0wqmNhY_DtXjQjMRidjakGzIskHW_-AR6KKCMMrahWBqboF_1jiVpcfGNCjsvxNwPoZl9rGDXCvAxjV1m9AOkjoOBIrcGYlUIGjpu5HsvmlI-Q2UKhYBQr9gzI0gHNktVBK3CwXJD2DzGJdBZabLpvCNzmSQsA/w1600/20220919_215712.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v26c0"
expires: Tue, 20 Sep 2022 20:08:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20220919_215712.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Mon, 19 Sep 2022 20:08:44 GMT
server: fife
content-length: 71034
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
driverpartially.com/watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1&shu=f7ae54f568c2443bb6fbd30de5e2f7f8be362b08ba2a4a202247fcb2383a313d011a178ae7e7feb385328272e699c8f660832d70bac4a89c2d4c8480319b892a9b0b91033c7b4888493f77c485c08c0ab8a8463145d8e4db163d782c5f6dc13f&pst=1663618184&rmtc=t
173.233.139.164200 OK 2.1 kB URL HTTP/1.1 driverpartially.com/watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1&shu=f7ae54f568c2443bb6fbd30de5e2f7f8be362b08ba2a4a202247fcb2383a313d011a178ae7e7feb385328272e699c8f660832d70bac4a89c2d4c8480319b892a9b0b91033c7b4888493f77c485c08c0ab8a8463145d8e4db163d782c5f6dc13f&pst=1663618184&rmtc=t
IP 173.233.139.164:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2615)
Hash 7156de930dfdea2e85a9915ea95482c2
5bf5ce53676c29d16701004555cf80394c9fd5dc
483a2e8875bf95ccf4030e1feedfbe0319ce9b445b1cb010ccb83c7a35af3da3
GET /watch.1509094103295.js?key=7901fb1d66bd7245647ea867106fa29e&kw=%5B%22krosno%22%2C%22film%22%2C%22na%22%2C%22kanale%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22twitter%22%2C%22krosno%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22film%22%2C%22%E2%80%93%22%2C%22leaked%22%2C%22krosno%22%2C%22video%22%2C%22%E2%80%93%22%2C%22ch%C5%82opaki%22%2C%22z%22%2C%22krosna%22%2C%22%E2%80%93%22%2C%22filmik%22%2C%22z%22%2C%22krosna%22%2C%22twitter%22%2C%22%C2%BB%22%2C%22pagzsix%22%5D&refer=https%3A%2F%2Fwww.pagzsix.com%2Fkrosno-film-na-kanale-leaked-twitter-krosno-leaked-krosno-film-leaked-krosno-video-chlopaki-z-krosna-filmik-z-krosna-twitter%2F%3Ffeed_id%3D23287%26_unique_id%3D6328a5f955413&tz=0&dev=r&res=12.31&uuid=3d75015f-ab56-4b8c-8e7b-a64c35ba2471%3A1%3A1&shu=f7ae54f568c2443bb6fbd30de5e2f7f8be362b08ba2a4a202247fcb2383a313d011a178ae7e7feb385328272e699c8f660832d70bac4a89c2d4c8480319b892a9b0b91033c7b4888493f77c485c08c0ab8a8463145d8e4db163d782c5f6dc13f&pst=1663618184&rmtc=t HTTP/1.1
Host: driverpartially.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Referer: https://www.pagzsix.com/
Connection: keep-alive
Cookie: u_pl=17574603; ain=eyJhbGciOiJIUzI1NiJ9.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.jk-fstYEhH79SncGzdxIPklyw0tB5m5GYbXZGCKa764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.pagzsix.com
Access-Control-Allow-Origin: https://www.pagzsix.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=3d75015f-ab56-4b8c-8e7b-a64c35ba2471:1:1; expires=Mon, 26 Sep 2022 20:08:44 GMT; secure; SameSite=None
iprca30c4e41c20e8f2d5c91be00950721dc=3569806; expires=Tue, 20 Sep 2022 00:08:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
uncs=1; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
pdhtkv5=true; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
uncs5=1; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad9f99853e76c4bdee83be310898c6ba
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4aebec42ca2e6505dc8921d4e374fb5e
e43838649932d95af63c651d94b8ca67845156ef
01edca4a2f977f1dc6c0a068f97fd17e04dc96d88d9664107af3b2ffb6f18ffb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9bmk6cYwgr8Rsc-qjoR668UPJ4in7kBE_byoH7_uptq6LtIBNyaDWo2jehOKb5voPHsQg0MPqhwmqSrJTdrTYqw3gXAWDJNaaLwCQl8n8aob_ydZTh6k3IidstcQSoYO18vCM43c_3OE7r42Z5vqxcl3Z2BjZjkWPTn4l7lAOhF6IsxpmBkW4DUX3xA/s320/IMG_20220914_085200.jpg?resize=350%2C200&ssl=1
192.0.77.2200 OK 3.6 kB URL HTTP/2 i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9bmk6cYwgr8Rsc-qjoR668UPJ4in7kBE_byoH7_uptq6LtIBNyaDWo2jehOKb5voPHsQg0MPqhwmqSrJTdrTYqw3gXAWDJNaaLwCQl8n8aob_ydZTh6k3IidstcQSoYO18vCM43c_3OE7r42Z5vqxcl3Z2BjZjkWPTn4l7lAOhF6IsxpmBkW4DUX3xA/s320/IMG_20220914_085200.jpg?resize=350%2C200&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 350x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1fbef3b521e4e8812f69d03902a3f464
8b2c26097ee7cc4caaed1e2940ddef49feb35c59
7b45258cf082a9d149ff42d782eac0cc262bd46e8e9e739ac4ee6df45d768f56
GET /blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9bmk6cYwgr8Rsc-qjoR668UPJ4in7kBE_byoH7_uptq6LtIBNyaDWo2jehOKb5voPHsQg0MPqhwmqSrJTdrTYqw3gXAWDJNaaLwCQl8n8aob_ydZTh6k3IidstcQSoYO18vCM43c_3OE7r42Z5vqxcl3Z2BjZjkWPTn4l7lAOhF6IsxpmBkW4DUX3xA/s320/IMG_20220914_085200.jpg?resize=350%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: image/webp
content-length: 3632
last-modified: Wed, 14 Sep 2022 08:11:29 GMT
expires: Fri, 13 Sep 2024 20:11:29 GMT
cache-control: public, max-age=63115200
link: <https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9bmk6cYwgr8Rsc-qjoR668UPJ4in7kBE_byoH7_uptq6LtIBNyaDWo2jehOKb5voPHsQg0MPqhwmqSrJTdrTYqw3gXAWDJNaaLwCQl8n8aob_ydZTh6k3IidstcQSoYO18vCM43c_3OE7r42Z5vqxcl3Z2BjZjkWPTn4l7lAOhF6IsxpmBkW4DUX3xA/s320/IMG_20220914_085200.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2a6b6da3838e8fd2"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0fKl80axXq412ALbCEv9uwfrp7GEr8qTntFt-pWFeAPvWz4ofC39jA1uCoI6AzDziaI_6EinGHAGQGMRJykYJl-AXniAMPCNMGgxZ76PRpiaa4EoXfuYu4kDkEH6XxEHdHgSsjMX8dHlZqjLFB4maZexROmA8lzKwuxs3OC3hgIWJ37EfqcYNzDjCfg/s320/IMG_20220914_085200.jpg?resize=350%2C200&ssl=1
192.0.77.2200 OK 3.6 kB URL HTTP/2 i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0fKl80axXq412ALbCEv9uwfrp7GEr8qTntFt-pWFeAPvWz4ofC39jA1uCoI6AzDziaI_6EinGHAGQGMRJykYJl-AXniAMPCNMGgxZ76PRpiaa4EoXfuYu4kDkEH6XxEHdHgSsjMX8dHlZqjLFB4maZexROmA8lzKwuxs3OC3hgIWJ37EfqcYNzDjCfg/s320/IMG_20220914_085200.jpg?resize=350%2C200&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 350x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1fbef3b521e4e8812f69d03902a3f464
8b2c26097ee7cc4caaed1e2940ddef49feb35c59
7b45258cf082a9d149ff42d782eac0cc262bd46e8e9e739ac4ee6df45d768f56
GET /blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0fKl80axXq412ALbCEv9uwfrp7GEr8qTntFt-pWFeAPvWz4ofC39jA1uCoI6AzDziaI_6EinGHAGQGMRJykYJl-AXniAMPCNMGgxZ76PRpiaa4EoXfuYu4kDkEH6XxEHdHgSsjMX8dHlZqjLFB4maZexROmA8lzKwuxs3OC3hgIWJ37EfqcYNzDjCfg/s320/IMG_20220914_085200.jpg?resize=350%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: image/webp
content-length: 3632
last-modified: Wed, 14 Sep 2022 13:02:31 GMT
expires: Sat, 14 Sep 2024 01:02:31 GMT
cache-control: public, max-age=63115200
link: <https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0fKl80axXq412ALbCEv9uwfrp7GEr8qTntFt-pWFeAPvWz4ofC39jA1uCoI6AzDziaI_6EinGHAGQGMRJykYJl-AXniAMPCNMGgxZ76PRpiaa4EoXfuYu4kDkEH6XxEHdHgSsjMX8dHlZqjLFB4maZexROmA8lzKwuxs3OC3hgIWJ37EfqcYNzDjCfg/s320/IMG_20220914_085200.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "27c1a0dbcff44b43"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
172.64.163.10200 OK 36 kB URL HTTP/2 creepingbrings.com/sfp.js
IP 172.64.163.10:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 7ce6624409821d7b56457c690a599404
5e2a653bcf27be2ce0e4ca9b00a00e7fc992d732
a468f88543121a47ba9cf835522e55c0962e3eb8342d8b84b3d48ecba36ab38a
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:43 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: c5eb66726f2073289c6c322cac5ce5eb
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 19 Sep 2022 20:08:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=siP39lNuXoVofn%2BJL6sCun2osMyf85%2FYECeDoHtpEzXMvJ5F64tFvMDyeM9dNiE59q%2BxZudgjui2MuOGJsnOcWjvRohReGdJYzgKBDtqABvXusN8Lx3vfqitoMOSDWqbmMKY%2Ft4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f4765974e64c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_Ins45y9ixdaZJqVuqNCmqnQNXPSG0wqmNhY_DtXjQjMRidjakGzIskHW_-AR6KKCMMrahWBqboF_1jiVpcfGNCjsvxNwPoZl9rGDXCvAxjV1m9AOkjoOBIrcGYlUIGjpu5HsvmlI-Q2UKhYBQr9gzI0gHNktVBK3CwXJD2DzGJdBZabLpvCNzmSQsA/s320/20220919_215712.jpg
142.250.74.1200 OK 17 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_Ins45y9ixdaZJqVuqNCmqnQNXPSG0wqmNhY_DtXjQjMRidjakGzIskHW_-AR6KKCMMrahWBqboF_1jiVpcfGNCjsvxNwPoZl9rGDXCvAxjV1m9AOkjoOBIrcGYlUIGjpu5HsvmlI-Q2UKhYBQr9gzI0gHNktVBK3CwXJD2DzGJdBZabLpvCNzmSQsA/s320/20220919_215712.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x178, components 3\012- data
Hash bc038ec43a45f0d0045d366338b8f9a1
377176a612f8805d9649f45352c5865e1c07a105
4f3999c508ab54614fd42c76d7fddfa141a01825993420cd1a57bfa87b89e16d
GET /img/b/R29vZ2xl/AVvXsEh_Ins45y9ixdaZJqVuqNCmqnQNXPSG0wqmNhY_DtXjQjMRidjakGzIskHW_-AR6KKCMMrahWBqboF_1jiVpcfGNCjsvxNwPoZl9rGDXCvAxjV1m9AOkjoOBIrcGYlUIGjpu5HsvmlI-Q2UKhYBQr9gzI0gHNktVBK3CwXJD2DzGJdBZabLpvCNzmSQsA/s320/20220919_215712.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v26c0"
expires: Tue, 20 Sep 2022 20:08:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20220919_215712.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Mon, 19 Sep 2022 20:08:44 GMT
server: fife
content-length: 16926
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
contagiousantagonizequarry.com/sbar.json?key=9609d86b5e0973ba8254672597333523&uuid=65b49067-6ea2-4e70-b1df-b4729bd0b4b1%3A2%3A1
173.233.139.164200 OK 4.1 kB URL HTTP/1.1 contagiousantagonizequarry.com/sbar.json?key=9609d86b5e0973ba8254672597333523&uuid=65b49067-6ea2-4e70-b1df-b4729bd0b4b1%3A2%3A1
IP 173.233.139.164:0
File type JSON data\012- , ASCII text, with very long lines (5668), with no line terminators
Hash f1fab9be666a2dbe969d4d387cdc8525
588cfaf950585ae5ba8f2983009ddeb53b1669e0
f9371e58456e4809bfc760d17d91200cfc9bafb7f63f992021b9f4ece011ef37
GET /sbar.json?key=9609d86b5e0973ba8254672597333523&uuid=65b49067-6ea2-4e70-b1df-b4729bd0b4b1%3A2%3A1 HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:44 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.pagzsix.com
Access-Control-Allow-Origin: https://www.pagzsix.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17445554; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; expires=Mon, 26 Sep 2022 20:08:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
uncs=1; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
pdhtkv29=true; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
uncs29=1; expires=Tue, 20 Sep 2022 20:08:44 GMT; secure; SameSite=None
slec9609d86b5e0973ba8254672597333523=[3364845]; expires=Mon, 19 Sep 2022 20:08:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b65333a52fdb213c5e1b833dfb57925c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
connect.facebook.net/en_US/sdk.js?hash=ecd3e1102cf27d5387ce6f5c0a81edb7
157.240.200.14200 OK 89 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=ecd3e1102cf27d5387ce6f5c0a81edb7
IP 157.240.200.14:0
File type ASCII text, with very long lines (18602)
Hash 51de4b424fdc56ae46758e6335cf42a1
277e8f8ed9f769a15c5bf29dfb59847623f6db75
70efdd235627e0e9557900ad7dc8818abc17814d85e7e2f789881afcb9a6e51a
GET /en_US/sdk.js?hash=ecd3e1102cf27d5387ce6f5c0a81edb7 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 823bb979cdfb884e0aa7a66a1232a23c
etag: "ae0362f995faf9c2dc7b56d862f3634d"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 19 Sep 2023 19:21:28 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Ud5LQk/cVq5GdY5jNc9CoQ==
x-fb-debug: g2T/iD9b3WGxGNYGmSEp3yGAOZg8j4cqDD+1fhK0joetpyDdpFqAwCvXvfARxAMYnxYE4mA5Hj1fp3KEa9rlMg==
content-length: 88692
x-fb-trip-id: 1679558926
date: Mon, 19 Sep 2022 20:08:44 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash dde134bf7ea8d3af1cccb4abd35cd40e
77f9e1d3133a177e42306c3b9c31f8a7cacc0461
064b90005ffab327d8071d7755c8f130473a3fbdb1a44c81ce6de9680944fbbd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3846
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 20:08:44 GMT
Last-Modified: Mon, 19 Sep 2022 19:04:38 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 280
cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
45.133.44.10200 OK 144 kB URL HTTP/2 cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 144 kB (144379 bytes)
Hash 33c304429dc1a4408a96e6a74ffa2feb
c45fa8e65528d1bb2b46bf8a28af9eeaa1903d04
dbed482e5948ead5587d30a22306a5b611305f704de940bd22c76daf90e0a314
GET /cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: image/png
content-length: 144379
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:21 GMT
etag: "62e11c69-233fb"
expires: Wed, 21 Sep 2022 20:08:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
contagiousantagonizequarry.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidtS2BoCJKA1LQFRRBwuf9cbd7S4oIY4wsnB9KQKGDmZ2583BzO6uZ3duzK4sIlPLSU6zf2bESIgQIiYoInSOlMI2PygX%2BDygQEhUFuovFwTTfe%2FNe8fS%2B78u94oy4KOjp2jW9I5WiK826W7v8seddqW3KtBjUBq3wk7BxpWb6b8dh3X2z9r5IunrFdz3X9Vyvti6NaOvBylSEzB7HXj126w2%2F7jUbGJj%2Fc1s4sNQB75%2BRC5B8svTUuQiZjJH2vl0Ttpvr7K33eoWiuTbo88OP0m6qyxS9OWwbB%2B308NwNbU%2FWn0CnB7O40P1%2FjUxOiPPsCVh6eB4SrL8%2Fy8kURArGX0bZH0OoMSQdI9F3IfkJARKO6zeQ9h5c16ak289VOlUnZOmvPyHLCVn67SLS3jerSg5qt7UqcqlTi0G7ghyMITtjZMUR8p0FyPIISf45JCdIexUkP30jbLJG7IbRciiov9wQkbvMPN5eZo3Ijxl3WYN5s2KkHEO2x1BiCGoXUFgHhXRQtB0UmYMeP60lnudFLk%2Bo24qTJOCRYCF3PRq1Peq5YQtFMs0%2BRJ4NkaghErOLzOyiK%2B%2BfNC%2FAFD%2FDblWw3IHNCfq8QikISktQUoJSEpQ5QdmvDriyvq0ecGUL5p1P%2F3wG1UjnnT16oPOOSMledkZemXbmvOR%2Fj644rcWhG%2FNWyJrCjaOA0ZbfbISR34yjIAiafgArK0i7AGod7MgJuRS1kckJeeGrH8HoEaw6QiIXQYtLoOUo8l3QrVGj5WInfUQZMzTl9awLritk%2BRLybWdPnZFXZ5sL7vwOkRxf%2FZRdm%2Fzx8G8kpkJmKnwmnxJ01L3RLV2S%2FVu6tOS7G1kue3KHTrd6O6e5WHz0gdguteEba3b48J1kKkzh4w%2BFzTdpymXaseTrVcm5MOvaJIL8tGHvCHazsFurhUmLbPPmu%2BsbvcwIa6VOx6ByQsizYyRyQl784WB2sK99UUKaMUxRoVcck%2FMHqY%2BQZLuw2Ty%2F1Yswau5hmYOyqEbGZ%2FNPJQmUmHPKKtj%2FcDbHe%2FYeOuZ10Pzu7E77pkJfVaBqCFssjvLMHF%2F9NZg9MOWMmDLOPlNG3X9erpWntSgIXBrGTS%2BKqIhYw2%2B1Q49T6jdCPwxpgNxOksu%2FbP4DAAD%2F%2FwEAAP%2F%2FmT5J83sEAAA%3D
173.233.139.164200 OK 7 B URL HTTP/1.1 contagiousantagonizequarry.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidtS2BoCJKA1LQFRRBwuf9cbd7S4oIY4wsnB9KQKGDmZ2583BzO6uZ3duzK4sIlPLSU6zf2bESIgQIiYoInSOlMI2PygX%2BDygQEhUFuovFwTTfe%2FNe8fS%2B78u94oy4KOjp2jW9I5WiK826W7v8seddqW3KtBjUBq3wk7BxpWb6b8dh3X2z9r5IunrFdz3X9Vyvti6NaOvBylSEzB7HXj126w2%2F7jUbGJj%2Fc1s4sNQB75%2BRC5B8svTUuQiZjJH2vl0Ttpvr7K33eoWiuTbo88OP0m6qyxS9OWwbB%2B308NwNbU%2FWn0CnB7O40P1%2FjUxOiPPsCVh6eB4SrL8%2Fy8kURArGX0bZH0OoMSQdI9F3IfkJARKO6zeQ9h5c16ak289VOlUnZOmvPyHLCVn67SLS3jerSg5qt7UqcqlTi0G7ghyMITtjZMUR8p0FyPIISf45JCdIexUkP30jbLJG7IbRciiov9wQkbvMPN5eZo3Ijxl3WYN5s2KkHEO2x1BiCGoXUFgHhXRQtB0UmYMeP60lnudFLk%2Bo24qTJOCRYCF3PRq1Peq5YQtFMs0%2BRJ4NkaghErOLzOyiK%2B%2BfNC%2FAFD%2FDblWw3IHNCfq8QikISktQUoJSEpQ5QdmvDriyvq0ecGUL5p1P%2F3wG1UjnnT16oPOOSMledkZemXbmvOR%2Fj644rcWhG%2FNWyJrCjaOA0ZbfbISR34yjIAiafgArK0i7AGod7MgJuRS1kckJeeGrH8HoEaw6QiIXQYtLoOUo8l3QrVGj5WInfUQZMzTl9awLritk%2BRLybWdPnZFXZ5sL7vwOkRxf%2FZRdm%2Fzx8G8kpkJmKnwmnxJ01L3RLV2S%2FVu6tOS7G1kue3KHTrd6O6e5WHz0gdguteEba3b48J1kKkzh4w%2BFzTdpymXaseTrVcm5MOvaJIL8tGHvCHazsFurhUmLbPPmu%2BsbvcwIa6VOx6ByQsizYyRyQl784WB2sK99UUKaMUxRoVcck%2FMHqY%2BQZLuw2Ty%2F1Yswau5hmYOyqEbGZ%2FNPJQmUmHPKKtj%2FcDbHe%2FYeOuZ10Pzu7E77pkJfVaBqCFssjvLMHF%2F9NZg9MOWMmDLOPlNG3X9erpWntSgIXBrGTS%2BKqIhYw2%2B1Q49T6jdCPwxpgNxOksu%2FbP4DAAD%2F%2FwEAAP%2F%2FmT5J83sEAAA%3D
IP 173.233.139.164:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidtS2BoCJKA1LQFRRBwuf9cbd7S4oIY4wsnB9KQKGDmZ2583BzO6uZ3duzK4sIlPLSU6zf2bESIgQIiYoInSOlMI2PygX%2BDygQEhUFuovFwTTfe%2FNe8fS%2B78u94oy4KOjp2jW9I5WiK826W7v8seddqW3KtBjUBq3wk7BxpWb6b8dh3X2z9r5IunrFdz3X9Vyvti6NaOvBylSEzB7HXj126w2%2F7jUbGJj%2Fc1s4sNQB75%2BRC5B8svTUuQiZjJH2vl0Ttpvr7K33eoWiuTbo88OP0m6qyxS9OWwbB%2B308NwNbU%2FWn0CnB7O40P1%2FjUxOiPPsCVh6eB4SrL8%2Fy8kURArGX0bZH0OoMSQdI9F3IfkJARKO6zeQ9h5c16ak289VOlUnZOmvPyHLCVn67SLS3jerSg5qt7UqcqlTi0G7ghyMITtjZMUR8p0FyPIISf45JCdIexUkP30jbLJG7IbRciiov9wQkbvMPN5eZo3Ijxl3WYN5s2KkHEO2x1BiCGoXUFgHhXRQtB0UmYMeP60lnudFLk%2Bo24qTJOCRYCF3PRq1Peq5YQtFMs0%2BRJ4NkaghErOLzOyiK%2B%2BfNC%2FAFD%2FDblWw3IHNCfq8QikISktQUoJSEpQ5QdmvDriyvq0ecGUL5p1P%2F3wG1UjnnT16oPOOSMledkZemXbmvOR%2Fj644rcWhG%2FNWyJrCjaOA0ZbfbISR34yjIAiafgArK0i7AGod7MgJuRS1kckJeeGrH8HoEaw6QiIXQYtLoOUo8l3QrVGj5WInfUQZMzTl9awLritk%2BRLybWdPnZFXZ5sL7vwOkRxf%2FZRdm%2Fzx8G8kpkJmKnwmnxJ01L3RLV2S%2FVu6tOS7G1kue3KHTrd6O6e5WHz0gdguteEba3b48J1kKkzh4w%2BFzTdpymXaseTrVcm5MOvaJIL8tGHvCHazsFurhUmLbPPmu%2BsbvcwIa6VOx6ByQsizYyRyQl784WB2sK99UUKaMUxRoVcck%2FMHqY%2BQZLuw2Ty%2F1Yswau5hmYOyqEbGZ%2FNPJQmUmHPKKtj%2FcDbHe%2FYeOuZ10Pzu7E77pkJfVaBqCFssjvLMHF%2F9NZg9MOWMmDLOPlNG3X9erpWntSgIXBrGTS%2BKqIhYw2%2B1Q49T6jdCPwxpgNxOksu%2FbP4DAAD%2F%2FwEAAP%2F%2FmT5J83sEAAA%3D HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Cookie: u_pl=17445554; uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec9609d86b5e0973ba8254672597333523=[3364845]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:44 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 32cbb788632643501128ea2d798951a1
Strict-Transport-Security: max-age=0; includeSubdomains
i0.wp.com/brospardailynews.xyz/wp-content/uploads/2022/09/montana-capitol_840x480.jpg
192.0.77.2200 OK 84 kB URL HTTP/2 i0.wp.com/brospardailynews.xyz/wp-content/uploads/2022/09/montana-capitol_840x480.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 840x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 001e99e3a972f54ee3a05d2ec615e72d
18e6dc2b8f0947a40da05df4066fa300e0db2a9c
97c7b672c35e2c5a388fbc3a5ae981bedf593ea0d2342f5e0c6bae919a55f384
GET /brospardailynews.xyz/wp-content/uploads/2022/09/montana-capitol_840x480.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: image/webp
content-length: 83548
last-modified: Mon, 19 Sep 2022 18:43:55 GMT
expires: Thu, 19 Sep 2024 06:43:55 GMT
cache-control: public, max-age=63115200
link: <http://brospardailynews.xyz/wp-content/uploads/2022/09/montana-capitol_840x480.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "016b9685095661e9"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 975198867cba40920c78943d183e7501
79f8094d26eb13a276fa98058ff3edde469825c5
14f4407c37a327fc0b0249c75c3308a898722b100bdd261bf687e7b97821b2ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "14F4407C37A327FC0B0249C75C3308A898722B100BDD261BF687E7B97821B2CE"
Last-Modified: Sat, 17 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7399
Expires: Mon, 19 Sep 2022 22:12:03 GMT
Date: Mon, 19 Sep 2022 20:08:44 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 975198867cba40920c78943d183e7501
79f8094d26eb13a276fa98058ff3edde469825c5
14f4407c37a327fc0b0249c75c3308a898722b100bdd261bf687e7b97821b2ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "14F4407C37A327FC0B0249C75C3308A898722B100BDD261BF687E7B97821B2CE"
Last-Modified: Sat, 17 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7399
Expires: Mon, 19 Sep 2022 22:12:03 GMT
Date: Mon, 19 Sep 2022 20:08:44 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 975198867cba40920c78943d183e7501
79f8094d26eb13a276fa98058ff3edde469825c5
14f4407c37a327fc0b0249c75c3308a898722b100bdd261bf687e7b97821b2ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "14F4407C37A327FC0B0249C75C3308A898722B100BDD261BF687E7B97821B2CE"
Last-Modified: Sat, 17 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7399
Expires: Mon, 19 Sep 2022 22:12:03 GMT
Date: Mon, 19 Sep 2022 20:08:44 GMT
Connection: keep-alive
contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Findex.html&l=1394&fd=191
173.233.139.164200 OK 0 B URL HTTP/1.1 contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Findex.html&l=1394&fd=191
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Findex.html&l=1394&fd=191 HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Cookie: u_pl=17445554; uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec9609d86b5e0973ba8254672597333523=[3364845]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/img/icon.jpg
172.64.201.2200 OK 74 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/img/icon.jpg
IP 172.64.201.2:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=821, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1232], progressive, precision 8, 500x333, components 3\012- data
Hash edc025c8802080bcfb154c337fdb21a4
41d8d08c7984fcffbeeffee40e680e0a23d7f7e7
343eec76860bcb772bd3b2db18b495c7bd557cc20635141b3173c933b1df8592
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/img/icon.jpg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: image/jpeg
content-length: 73837
last-modified: Thu, 10 Feb 2022 09:31:00 GMT
etag: "6204db54-1206d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4097054
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f4bBs6tWZ3Mz72TR6Wdjr2eCLyK62oeNu1CZyEBdH9zwb5XKJGUVT6%2BQPoKr1Wsu%2FTYHAVnGdlbB0x75bXfa8cRxOSOIAyaXUMv5x4oMLvKuuc1Xz1pFdJWpYe7e7XkKalg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f4801aff88b0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 975198867cba40920c78943d183e7501
79f8094d26eb13a276fa98058ff3edde469825c5
14f4407c37a327fc0b0249c75c3308a898722b100bdd261bf687e7b97821b2ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "14F4407C37A327FC0B0249C75C3308A898722B100BDD261BF687E7B97821B2CE"
Last-Modified: Sat, 17 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7399
Expires: Mon, 19 Sep 2022 22:12:03 GMT
Date: Mon, 19 Sep 2022 20:08:44 GMT
Connection: keep-alive
talksport.com/wp-content/uploads/sites/5/2022/09/lb-TALKSPORT-bellingham-copy.jpg?strip=all&quality=100&w=1500&h=1000&crop=1
99.86.114.16200 OK 1.0 MB URL HTTP/2 talksport.com/wp-content/uploads/sites/5/2022/09/lb-TALKSPORT-bellingham-copy.jpg?strip=all&quality=100&w=1500&h=1000&crop=1
IP 99.86.114.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1000, components 3\012- data
Size 1.0 MB (1033993 bytes)
Hash 8d24a1c637f00c6f243e6e18e310f635
9d0865f5737527655e2cdbd532817566e44d2aba
cf815552b6a718970241488b9832948dc5d80f44e8df4b6fbe1f55755b790e1d
GET /wp-content/uploads/sites/5/2022/09/lb-TALKSPORT-bellingham-copy.jpg?strip=all&quality=100&w=1500&h=1000&crop=1 HTTP/1.1
Host: talksport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1033993
server: nginx
date: Mon, 19 Sep 2022 20:08:44 GMT
last-modified: Wed, 14 Sep 2022 20:40:57 GMT
expires: Thu, 14 Sep 2023 20:40:57 GMT
etag: "54a8f9e5be42a5c9"
strict-transport-security: max-age=31536000
cache-control: max-age=2592000
x-rq: lhr4 109 27 443
accept-ranges: bytes
set-cookie: nuk_customer_country_code=NO; Path=/
nuk_customer_region_code=NO-region; Path=/
nuk_customer_timezone=Europe/Oslo; Path=/
x-cache: Miss from cloudfront
via: 1.1 05db36a4f9e4592d953909c305155656.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-C1
x-amz-cf-id: h19-UCSpAd6ZZn3ruSjRxxGf0vkswGbnIK4goKJqeCWi0y5nFkA9cA==
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/js/script.js
172.64.201.2200 OK 697 B URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/js/script.js
IP 172.64.201.2:0
Hash 8807fcaa1f7d21407a7e27ea9504599b
b0df58334929bbd8e57ac21dcdf10e435ba0c68b
08f1add5e329dbd0e7578230d73c5cf3e75e80799cfae4f16a3bbcb0a8104466
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: application/javascript
last-modified: Thu, 10 Feb 2022 09:31:01 GMT
etag: W/"6204db55-18d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O8mBjfH%2F0xTJWxdoKDzzSlE9pOIPpD6GM1tDVy%2BJN6h5zSgO5%2B%2F4B%2BnR5G3829mqb1lf0%2F7yut7KGEwbNI7G9mAp3ufDgI4SLjlXOUTbIpvrvXwXE5MT2OPSfGMdIqUDLzM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f4800acf88b0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fcss%2Fstyle.css&l=5560&fd=233
173.233.139.164200 OK 0 B URL HTTP/1.1 contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fcss%2Fstyle.css&l=5560&fd=233
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fcss%2Fstyle.css&l=5560&fd=233 HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Cookie: u_pl=17445554; uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec9609d86b5e0973ba8254672597333523=[3364845]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fjs%2Fscript.js&l=397&fd=286
173.233.139.164200 OK 660 B URL HTTP/1.1 contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fjs%2Fscript.js&l=397&fd=286
IP 173.233.139.164:0
File type gzip compressed data, max compression\012- data
Hash 5860c780c8e9daa4f852038f02b5bdc2
c75c8b4db36bffe075ce493f06d011f855d5541a
f11b9f8e851e15c0c6abd53a9994c6dcef78ceeebd0f0b8bbde610fec8332c85
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fjs%2Fscript.js&l=397&fd=286 HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Cookie: u_pl=17445554; uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec9609d86b5e0973ba8254672597333523=[3364845]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
unseenreport.com/pxf.gif?uuid=65b49067-6ea2-4e70-b1df-b4729bd0b4b1&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=9609d86b5e0973ba8254672597333523&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=20
192.243.59.12200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=65b49067-6ea2-4e70-b1df-b4729bd0b4b1&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=9609d86b5e0973ba8254672597333523&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=20
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=65b49067-6ea2-4e70-b1df-b4729bd0b4b1&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=9609d86b5e0973ba8254672597333523&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 19 Sep 2022 20:08:45 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0ee4f3b08a48168f308612a8d906ee4c
Strict-Transport-Security: max-age=0; includeSubdomains
contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fcss%2Fanimate.css&l=79249&fd=289
173.233.139.164200 OK 0 B URL HTTP/1.1 contagiousantagonizequarry.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fcss%2Fanimate.css&l=79249&fd=289
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2F16%2Fcss%2Fanimate.css&l=79249&fd=289 HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Cookie: u_pl=17445554; uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec9609d86b5e0973ba8254672597333523=[3364845]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
contagiousantagonizequarry.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydtS2BoCJKA1LQFRRBwufdvY%2B9I0WEMUYWzocSUOhgvvY83NzOamb39uzKIgKlvPQU63d2rIQIAUKiIkLnSClM46Nygf8DCoRERYHuYnEwze%2B9ea94er%2Ffl3v5GfGR09O1a2ZHaU1XGlW%2FcvnjILhS2VRJPqgMWs1PmvUrFdt%2Fu92s%2Bm9W3pe8a1ZCP%2FD9wA8q68rK2AxWpiJU%2BrgdVNt%2BtR5Wg0YdA%2Ft%2F7nIPjnoQ%2FTNyAUpMlp56F6H4GEnv2zXpuplJ33qvl2uaGYu%2BOPwo6SamSNCbw9h6iJPDczeMO1l%2FApMczOLC9P81MjUh3rMnYMnheUiw%2Fv4sJ9OQCZh4GUV%2FDKnHUHQMbu5CiRMCcIHrN5D0Hlw3tqDbz1U6VSdk6a8%2FoYoJWfrtIpLeN6taDSq3jc4zZRKHQVxCDcZQnTHS%2FAjZzgJUcQSefQ4lCJJeCSVO32g2WL3tN6PlpqThcl1G%2FjILRLzM6lHYZsJndRbMilFqDBWPoeUQ1C0gdx5y5SGPPeSph544rfAgCCJfcOq32pzXRCRZU%2FgBjeKABn6zhZxPsw%2BRpUNwPQS3u0jtLrrq%2FknjAmz%2BM9xWCSc8uIygL0oUkqBwBAUlKBRBkREU%2FfJAaBe68oHQLmfB%2BQzPZ60cmayzRw9M1pEJ2UvPyCvTzryXwu%2FRlaeVdtNvi1aTNaTfjmqMtsJGvRmFjXZUq9UaYQ1OlVBuAdR52FETcimKkaoJeeGrH8HoEZw%2BAleLoPkl0GIUhT7o1qje8rGTPKKMWZqIatqFMCXSbAnZtrenz8irs83V7vwOyY%2BvfsquTf54%2BDe4LZHaEp%2BppwQdfW90yxRk%2F5YpHPnuRpqpntqh063ezmgmFx99ILcLY8XGmhs%2BfIdPhSl8%2FKF02SZNhEo6jny9qoSQdt1YLslPG%2B6OZDdzt7Wa2yRPN2%2B%2Bu77RS610TplkDKomhDw7BlcT8uIPB7ODfe2LAsqOYfMSvfyYnD8ocwSe7sKl8%2FzOLMLquYelHoq8HNmQzT%2B1ItByzikr4f7D2RzvuXvo2NdBs7uzO%2B3bEn1dguohXL44ylJ7fPXX2uyBaW%2FEtPX2mbb6%2FvNynTqt1HwRMRnLiMl6ox5LLlijwXwec1YTrRZH5ib88i%2Bb%2FwAAAP%2F%2FAQAA%2F%2F8Z6pwbewQAAA%3D%3D
173.233.139.164200 OK 7 B URL HTTP/1.1 contagiousantagonizequarry.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydtS2BoCJKA1LQFRRBwufdvY%2B9I0WEMUYWzocSUOhgvvY83NzOamb39uzKIgKlvPQU63d2rIQIAUKiIkLnSClM46Nygf8DCoRERYHuYnEwze%2B9ea94er%2Ffl3v5GfGR09O1a2ZHaU1XGlW%2FcvnjILhS2VRJPqgMWs1PmvUrFdt%2Fu92s%2Bm9W3pe8a1ZCP%2FD9wA8q68rK2AxWpiJU%2BrgdVNt%2BtR5Wg0YdA%2Ft%2F7nIPjnoQ%2FTNyAUpMlp56F6H4GEnv2zXpuplJ33qvl2uaGYu%2BOPwo6SamSNCbw9h6iJPDczeMO1l%2FApMczOLC9P81MjUh3rMnYMnheUiw%2Fv4sJ9OQCZh4GUV%2FDKnHUHQMbu5CiRMCcIHrN5D0Hlw3tqDbz1U6VSdk6a8%2FoYoJWfrtIpLeN6taDSq3jc4zZRKHQVxCDcZQnTHS%2FAjZzgJUcQSefQ4lCJJeCSVO32g2WL3tN6PlpqThcl1G%2FjILRLzM6lHYZsJndRbMilFqDBWPoeUQ1C0gdx5y5SGPPeSph544rfAgCCJfcOq32pzXRCRZU%2FgBjeKABn6zhZxPsw%2BRpUNwPQS3u0jtLrrq%2FknjAmz%2BM9xWCSc8uIygL0oUkqBwBAUlKBRBkREU%2FfJAaBe68oHQLmfB%2BQzPZ60cmayzRw9M1pEJ2UvPyCvTzryXwu%2FRlaeVdtNvi1aTNaTfjmqMtsJGvRmFjXZUq9UaYQ1OlVBuAdR52FETcimKkaoJeeGrH8HoEZw%2BAleLoPkl0GIUhT7o1qje8rGTPKKMWZqIatqFMCXSbAnZtrenz8irs83V7vwOyY%2BvfsquTf54%2BDe4LZHaEp%2BppwQdfW90yxRk%2F5YpHPnuRpqpntqh063ezmgmFx99ILcLY8XGmhs%2BfIdPhSl8%2FKF02SZNhEo6jny9qoSQdt1YLslPG%2B6OZDdzt7Wa2yRPN2%2B%2Bu77RS610TplkDKomhDw7BlcT8uIPB7ODfe2LAsqOYfMSvfyYnD8ocwSe7sKl8%2FzOLMLquYelHoq8HNmQzT%2B1ItByzikr4f7D2RzvuXvo2NdBs7uzO%2B3bEn1dguohXL44ylJ7fPXX2uyBaW%2FEtPX2mbb6%2FvNynTqt1HwRMRnLiMl6ox5LLlijwXwec1YTrRZH5ib88i%2Bb%2FwAAAP%2F%2FAQAA%2F%2F8Z6pwbewQAAA%3D%3D
IP 173.233.139.164:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Phishing
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRydtS2BoCJKA1LQFRRBwufdvY%2B9I0WEMUYWzocSUOhgvvY83NzOamb39uzKIgKlvPQU63d2rIQIAUKiIkLnSClM46Nygf8DCoRERYHuYnEwze%2B9ea94er%2Ffl3v5GfGR09O1a2ZHaU1XGlW%2FcvnjILhS2VRJPqgMWs1PmvUrFdt%2Fu92s%2Bm9W3pe8a1ZCP%2FD9wA8q68rK2AxWpiJU%2BrgdVNt%2BtR5Wg0YdA%2Ft%2F7nIPjnoQ%2FTNyAUpMlp56F6H4GEnv2zXpuplJ33qvl2uaGYu%2BOPwo6SamSNCbw9h6iJPDczeMO1l%2FApMczOLC9P81MjUh3rMnYMnheUiw%2Fv4sJ9OQCZh4GUV%2FDKnHUHQMbu5CiRMCcIHrN5D0Hlw3tqDbz1U6VSdk6a8%2FoYoJWfrtIpLeN6taDSq3jc4zZRKHQVxCDcZQnTHS%2FAjZzgJUcQSefQ4lCJJeCSVO32g2WL3tN6PlpqThcl1G%2FjILRLzM6lHYZsJndRbMilFqDBWPoeUQ1C0gdx5y5SGPPeSph544rfAgCCJfcOq32pzXRCRZU%2FgBjeKABn6zhZxPsw%2BRpUNwPQS3u0jtLrrq%2FknjAmz%2BM9xWCSc8uIygL0oUkqBwBAUlKBRBkREU%2FfJAaBe68oHQLmfB%2BQzPZ60cmayzRw9M1pEJ2UvPyCvTzryXwu%2FRlaeVdtNvi1aTNaTfjmqMtsJGvRmFjXZUq9UaYQ1OlVBuAdR52FETcimKkaoJeeGrH8HoEZw%2BAleLoPkl0GIUhT7o1qje8rGTPKKMWZqIatqFMCXSbAnZtrenz8irs83V7vwOyY%2BvfsquTf54%2BDe4LZHaEp%2BppwQdfW90yxRk%2F5YpHPnuRpqpntqh063ezmgmFx99ILcLY8XGmhs%2BfIdPhSl8%2FKF02SZNhEo6jny9qoSQdt1YLslPG%2B6OZDdzt7Wa2yRPN2%2B%2Bu77RS610TplkDKomhDw7BlcT8uIPB7ODfe2LAsqOYfMSvfyYnD8ocwSe7sKl8%2FzOLMLquYelHoq8HNmQzT%2B1ItByzikr4f7D2RzvuXvo2NdBs7uzO%2B3bEn1dguohXL44ylJ7fPXX2uyBaW%2FEtPX2mbb6%2FvNynTqt1HwRMRnLiMl6ox5LLlijwXwec1YTrRZH5ib88i%2Bb%2FwAAAP%2F%2FAQAA%2F%2F8Z6pwbewQAAA%3D%3D HTTP/1.1
Host: contagiousantagonizequarry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Cookie: u_pl=17445554; uid_id2=65b49067-6ea2-4e70-b1df-b4729bd0b4b1:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec9609d86b5e0973ba8254672597333523=[3364845]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 19 Sep 2022 20:08:45 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf4fb5f1d739c3d33b68fdc7b6ef7a5b
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/css/style.css
172.64.201.2200 OK 1.5 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/css/style.css
IP 172.64.201.2:0
Hash 39c32ed8e89731e79982ffa12d481827
ace5f47d3e3b2b9f5580cd58b7a72cf225c339e5
6419ff9558c6e960ff78ff8b4d5ee7cfbab10b0a3524847321dd4b7fdfddf430
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: text/css
last-modified: Thu, 10 Feb 2022 09:30:56 GMT
etag: W/"6204db50-15b8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A8DU2eE9f2gdfXeOfsLs7gbs2Falt4B3M58hUzi%2BgCyfuXlHWzQT5ET1%2FgMfDTpERkbqgw2O2iKB52qBVk22gU%2BSlaJBudFQ3EP1jviZ%2BjvIwnoas%2BFHf5ag8YujuZP3BPk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f4800ad288b0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/fonts/SFUIText-Regular.woff
172.64.201.2200 OK 73 kB URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/fonts/SFUIText-Regular.woff
IP 172.64.201.2:0
File type Web Open Font Format, TrueType, length 72696, version 11.0\012- data
Hash 53d97caea7ef8a12beab745fcc5744e1
b8c70e4f67957e4f2cb809a58d84c773a3bde6d0
542772868e28df6d786b6f00f9dec929cba214d928cb013b32588485b46f8715
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/fonts/SFUIText-Regular.woff HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pagzsix.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:45 GMT
content-type: application/font-woff
content-length: 72696
last-modified: Thu, 10 Feb 2022 09:30:59 GMT
etag: "6204db53-11bf8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h3WEG%2BeZ5ALSEtxSFSMPxHVuaHbU%2F9GU9UFycof5tyFD%2FEODExtlrWSp0F%2FfbjYDuFas7oAWIYZLP5zEy7gfwPyCAsrs%2BuIoLC8b7%2BmcBva02a4ClUW1f3gfTx9o1djH510%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f482b93888b0-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/js/comment-reply.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/comment-reply.min.js
IP 192.0.77.37:0
GET /c/6.0.2/wp-includes/js/comment-reply.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C300%2C400%2C600&subset=latin%2Clatin-ext&display=fallback&ver=6.0.2
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C300%2C400%2C600&subset=latin%2Clatin-ext&display=fallback&ver=6.0.2
IP 142.250.74.10:0
GET /css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C300%2C400%2C600&subset=latin%2Clatin-ext&display=fallback&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 19 Sep 2022 20:08:42 GMT
date: Mon, 19 Sep 2022 20:08:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/index.html
104.26.7.19200 OK 0 B URL HTTP/2 cdn.yourwebbars.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/index.html
IP 104.26.7.19:0
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: text/html
last-modified: Thu, 10 Feb 2022 09:30:55 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=07NUa7PxR3lir3jJXXi1FZWXUN4IhiShrBFLzfZyd9yhljhiCB52RpVf8H4CDNsFRpLDakvV%2F%2FFB6BoW%2F8Bjs3iZftsT5oNjqgIqu7FOcdWhwLcGIGieSvO0T1jKrrs0yRtCFkw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f47e0e14b521-OSL
content-encoding: br
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.3.1/css/jetpack.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.3.1/css/jetpack.css
IP 192.0.77.37:0
GET /p/jetpack/11.3.1/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 19 Jul 2022 17:25:16 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.3.1/_inc/build/related-posts/related-posts.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.3.1/_inc/build/related-posts/related-posts.min.js
IP 192.0.77.37:0
GET /p/jetpack/11.3.1/_inc/build/related-posts/related-posts.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery.min.js
IP 192.0.77.37:0
GET /c/6.0.2/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/css/animate.css
172.64.201.2200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/css/animate.css
IP 172.64.201.2:0
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pagzsix.com
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: text/css
last-modified: Thu, 10 Feb 2022 09:30:57 GMT
etag: W/"6204db51-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c0ulsWaYBlsGS9bMxVyJNOyAcIp30zOYxs%2FiKe%2FQYDPO3%2B%2BSDLfBBX85Uk2EfRz7FMP2jE%2BvijBjRvKqgY8zfZcylMo063l6BvRTGOl5GxSnWAM9cYRgi0YEG18LgBVEpn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f47ffac188b0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery-migrate.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery-migrate.min.js
IP 192.0.77.37:0
GET /c/6.0.2/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.3.1/modules/likes/queuehandler.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.3.1/modules/likes/queuehandler.js
IP 192.0.77.37:0
GET /p/jetpack/11.3.1/modules/likes/queuehandler.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 30 Nov 2021 17:16:10 GMT
content-encoding: br
expires: Tue, 19 Sep 2023 20:08:42 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/e-202238.js
192.0.76.3200 OK 0 B IP 192.0.76.3:0
GET /e-202238.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pagzsix.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 20:08:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 11 Sep 2023 07:31:45 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/img/close.svg
172.64.201.2200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/16/img/close.svg
IP 172.64.201.2:0
GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/16/img/close.svg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 20:08:44 GMT
content-type: image/svg+xml
last-modified: Thu, 10 Feb 2022 09:30:59 GMT
etag: W/"6204db53-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4097054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=34unKRzEl2Lvt%2BVZsvXTC3%2BVPlZKLGUz3EGhq0JxaBZBJQEhmjNfLubPJMJIVJDN5tO2IKnutbaGSoAihXgXT0ntvcUVN%2BXLwdb7dagCW0Lk95TlReB%2B6aDPNKHS3rrcYXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d4f4801af288b0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2