Report - www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung

Report Overview

Visited public
2023-12-05 13:10:24
Tags
URL
www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Finishing URL
www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
IP / ASN
40.122.35.136
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
How do I get my wife to go black and hung

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-12-05 06:24:59	441 B	91 kB	142.250.74.168
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-12-05 08:08:22	506 B	192 kB	142.250.74.35
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21 01:06:24	2023-12-05 11:45:58	350 B	942 B	54.230.218.11
proftrafficcounter.com	unknown	2023-11-16	2023-11-21 09:55:14	2023-12-04 18:39:56	457 B	429 B	18.184.210.76
fixedencampment.com	unknown	unknown	No data	No data	4.1 kB	12 kB	173.233.137.44
cdn.cloudimagesb.com	23099	2020-10-06	2021-02-12 17:15:41	2023-12-05 11:19:54	988 B	258 kB	45.133.44.9
www.confessionpost.com	unknown	unknown	2012-07-23 23:52:15	2023-03-16 08:55:00	7.5 kB	634 kB	40.122.35.136
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-05 08:15:49	449 B	31 kB	142.250.74.42
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-11-19 18:48:38	465 B	1.4 kB	142.250.74.132
n6kux3ys3lhv.com	unknown	2020-06-02	2020-06-03 18:38:41	2023-05-20 09:50:24	452 B	10 kB	192.243.61.225
unpkg.com	11693	2016-01-06	2016-01-08 00:26:01	2023-12-05 06:09:21	952 B	36 kB	104.16.123.175

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-05	medium	fixedencampment.com	Sinkholed
2023-12-05	medium	fixedencampment.com	Sinkholed
2023-12-05	medium	fixedencampment.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	From	Size	First Seen	Last Seen
	unpkg.com/twemoji@latest/dist/twemoji.min.js	ScriptElement	17 kB	2023-03-07	2025-03-20
Pretty URL unpkg.com/twemoji@latest/dist/twemoji.min.js IP 104.16.123.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56 Last Seen2025-03-20 09:41 Times Seen87 Hash a8bb4cd4cc6356b2159524599d9e7258 8d1b12e92cdb61a4e72c9555cc4beb69a317fa3a 706224d8dc5440460f8ed91c1a6aad25d732af6e0ee6fb31151b157ab485babb Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-05-11
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js IP 142.250.74.42 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 07:21 Times Seen4555 Hash 05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb Loading...

	www.googletagmanager.com/gtag/js?id=G-9RHR4MZX0F	ScriptElement	273 kB	2023-12-05	2023-12-05
Pretty URL www.googletagmanager.com/gtag/js?id=G-9RHR4MZX0F IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 14:10 Last Seen2023-12-05 14:10 Times Seen1 Hash 973908be77a6205b1389f488be05a8d0 55cea1afb6bd67a4938927ecbeea9471fbc5eb8a 055fb4653dcec7d88402d60d089f3d40f300aba402055538af3b76d225572c6f Loading...

	www.confessionpost.com/routejs.axd/97674cd4a12ba02c47c0de4db5900fbf92a26e85/router.min.js	ScriptElement	5.5 kB	2023-12-05	2023-12-05
Pretty URL www.confessionpost.com/routejs.axd/97674cd4a12ba02c47c0de4db5900fbf92a26e85/router.min.js IP 40.122.35.136 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 14:10 Last Seen2023-12-05 15:39 Times Seen2 Hash ebbb744c3593d68271a37519628e9665 a3d59f02f7c0182d77c8f7d20e59af9c107b4489 762f8204b170c1097d18086e75e902a2aac554d6e403660a8f5be33ae19291b1 Loading...

	www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung	ScriptElement	133 B	2023-12-05	2024-08-20
Pretty URL www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung IP 40.122.35.136 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 14:10 Last Seen2024-08-20 16:41 Times Seen2 Hash 26badb5280f48886a1c0017c6cca7347 13716e6ec43564bc8e38809b4a948ea52c6704a2 a1bd56925f41d5f2fca93b0c68fe55c094bb7b78a6c2cc3a3c22ef438fe36856 Loading...

	www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung	ScriptElement	184 B	2023-12-05	2024-08-20
Pretty URL www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung IP 40.122.35.136 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 14:10 Last Seen2024-08-20 16:41 Times Seen2 Hash 6637681edb60a55645fcc8d32b9ea4f8 d35cb3e918fabac7f1f838d93a38fac55d4001f5 eeac1d601e2b5a5ea92446deb22f3802bcefe85d43014fc98d3d1928fc650d7d Loading...

	www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung	ScriptElement	124 B	2023-12-05	2024-08-20
Pretty URL www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung IP 40.122.35.136 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 14:10 Last Seen2024-08-20 16:41 Times Seen2 Hash 44eb9caf5c688b4eca14996741fbfd4e 069544617581d9d37b481c44eb7788bf5b8d3dab 46a0537f6c12678b6c1feebd2b3250ac35c46ab128324791ad2e4d9ac5a07018 Loading...

	www.confessionpost.com/Scripts/bundle?v=s9erSQREATQRTJOHiWVtBrYiNJ3ZMroytnlb3Wb9i9Q1	ScriptElement	485 kB	2023-12-05	2023-12-05
Pretty URL www.confessionpost.com/Scripts/bundle?v=s9erSQREATQRTJOHiWVtBrYiNJ3ZMroytnlb3Wb9i9Q1 IP 40.122.35.136 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 14:10 Last Seen2023-12-05 15:39 Times Seen2 Hash d1b89f0f594cbc61ffc89400469573da 19a43639b7df3af1ab4408d607325a950c2e70f1 885c03b03c533b8a7644e0eff02ce46e2c771bd35765da2e1aabe6dc0084b67e Loading...

	www.google.com/recaptcha/api.js?onload=recaptchaLoaded&render=explicit	ScriptElement	910 B	2023-11-17	2023-12-05
Pretty URL www.google.com/recaptcha/api.js?onload=recaptchaLoaded&render=explicit IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-17 07:47 Last Seen2023-12-05 15:39 Times Seen4 Hash 6a5eca79e12470cbec162175883c90a6 4504b6f15393cc52a3cdd38c5d29ee52e0f147bd c617c67455a314ba3df9332abc5808ecf31211c18076e6ee4a87e492e28556e9 Loading...

	n6kux3ys3lhv.com/df2a350b722c3b4b2721c7fc251beab9/invoke.js	ScriptElement	25 kB	2023-12-05	2023-12-05
Pretty URL n6kux3ys3lhv.com/df2a350b722c3b4b2721c7fc251beab9/invoke.js IP 192.243.61.225 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 14:10 Last Seen2023-12-05 14:10 Times Seen1 Hash 5d39a9ed684d212dade228fd6a17fcef 9032ab3f84a50bcb9800c74c707773e068d6d4ed 4ce0dc80510e8476425d696adb296390772a6501cbc07ce524b6759319eaa4a1 Loading...

	www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js	ScriptElement	476 kB	2023-11-14	2024-08-20
Pretty URL www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js IP 142.250.74.35 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-14 09:02 Last Seen2024-08-20 19:39 Times Seen12206 Hash 23b9dd721490a4062ba8d01454ef6ba9 efdbb7331585411f7d397dacbf51fd3e95f3031d 4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7 Loading...

HTTP Transactions (24)

URL IP Response Size

www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung

40.122.35.136

200 OK

14 kB

URL User Request GET HTTP/2
www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1977), with CRLF line terminators
Size
14 kB (13717 bytes)
Hash
d770011e2025d96ba808387a7a233666
8b6b1c70f34cf778feafcd6a0bf5fcf2d179427b
2a0f816fcb93c71535ddf4def394a1efdea17f86e7787b6a27fd776af6165301

HTTP Headers

GET /47353/how-do-i-get-my-wife-to-go-black-and-hung HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
x-frame-options: SAMEORIGIN
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; path=/; HttpOnly; SameSite=Lax
ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; path=/; HttpOnly; SameSite=Lax
__RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0; path=/; HttpOnly
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 13717
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js

142.250.74.42

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (32014)
Size
30 kB (30211 bytes)
Hash
05e51b1db558320f1939f9789ccf5c8f
c72c1735b4d903d90dd51225ebefb8c74ebbc51f
702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb

HTTP Headers

GET /ajax/libs/jquery/3.1.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30211
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:24:20 GMT
expires: Fri, 29 Nov 2024 23:24:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 395145
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-9RHR4MZX0F

142.250.74.168

200 OK

91 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-9RHR4MZX0F
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
ASCII text, with very long lines (7711)
Size
91 kB (90788 bytes)
Hash
973908be77a6205b1389f488be05a8d0
55cea1afb6bd67a4938927ecbeea9471fbc5eb8a
055fb4653dcec7d88402d60d089f3d40f300aba402055538af3b76d225572c6f

HTTP Headers

GET /gtag/js?id=G-9RHR4MZX0F HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 13:10:05 GMT
expires: Tue, 05 Dec 2023 13:10:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90788
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.confessionpost.com/Content/css?v=hIG71WrlXLMgL_h3VYLVMahjBRxYnb94T4BB_Je4ZeE1

40.122.35.136

200 OK

54 kB

URL GET HTTP/2
www.confessionpost.com/Content/css?v=hIG71WrlXLMgL_h3VYLVMahjBRxYnb94T4BB_Je4ZeE1
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
Unicode text, UTF-8 text, with very long lines (65134), with no line terminators
Size
54 kB (53514 bytes)
Hash
23647c31a62f0f44ed1793f9a3be247f
afbfcf8f4e98531e7a6d25da2c7974764b270e5c
7cb2fb42f65c04eb3bf4e8a169ee9b57fa2bc6fe5d017a2684a03b05c3657881

HTTP Headers

GET /Content/css?v=hIG71WrlXLMgL_h3VYLVMahjBRxYnb94T4BB_Je4ZeE1 HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Wed, 04 Dec 2024 13:10:05 GMT
last-modified: Tue, 05 Dec 2023 13:10:05 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 53514
X-Firefox-Spdy: h2

www.confessionpost.com/Content/images/logo-footer-2x.png

40.122.35.136

200 OK

1.9 kB

URL GET HTTP/2
www.confessionpost.com/Content/images/logo-footer-2x.png
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
PNG image data, 378 x 49, 8-bit grayscale, non-interlaced\012- data
Size
1.9 kB (1854 bytes)
Hash
a7874b91f3753ceca181baf70033dbae
f437b0eb515d87d33c4cfadabcfcdbebd01b81d0
4406cfbf316f137aa7480667595dd9ebfa82e1d09f788a1c4bc3a3c402b9fc45

HTTP Headers

GET /Content/images/logo-footer-2x.png HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/png
last-modified: Thu, 11 May 2017 18:55:32 GMT
accept-ranges: bytes
etag: "06a3a2a88cad21:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 1854
X-Firefox-Spdy: h2

www.confessionpost.com/routejs.axd/97674cd4a12ba02c47c0de4db5900fbf92a26e85/router.min.js

40.122.35.136

200 OK

2.2 kB

URL GET HTTP/2
www.confessionpost.com/routejs.axd/97674cd4a12ba02c47c0de4db5900fbf92a26e85/router.min.js
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
ASCII text, with very long lines (5392), with CRLF, LF line terminators
Size
2.2 kB (2153 bytes)
Hash
ebbb744c3593d68271a37519628e9665
a3d59f02f7c0182d77c8f7d20e59af9c107b4489
762f8204b170c1097d18086e75e902a2aac554d6e403660a8f5be33ae19291b1

HTTP Headers

GET /routejs.axd/97674cd4a12ba02c47c0de4db5900fbf92a26e85/router.min.js HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: private, max-age=31536000
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Wed, 04 Dec 2024 13:10:05 GMT
etag: a3d59f02f7c0182d77c8f7d20e59af9c107b4489
vary: *
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 2153
X-Firefox-Spdy: h2

www.confessionpost.com/Content/images/logo.png

40.122.35.136

200 OK

1.3 kB

URL GET HTTP/2
www.confessionpost.com/Content/images/logo.png
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
PNG image data, 233 x 29, 8-bit colormap, non-interlaced\012- data
Size
1.3 kB (1255 bytes)
Hash
e4c0701184e8cd6b52dbfde0819e3bef
51089dc9914878ca46b02bcd0bd22cc6f8793326
092a65fb2c0eea8de39f870f25eddd9a08250a013327ae2a6c343b5c2c32731b

HTTP Headers

GET /Content/images/logo.png HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/Content/css?v=hIG71WrlXLMgL_h3VYLVMahjBRxYnb94T4BB_Je4ZeE1
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/png
last-modified: Thu, 11 May 2017 18:55:31 GMT
accept-ranges: bytes
etag: "80d3a12988cad21:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 1255
X-Firefox-Spdy: h2

www.confessionpost.com/Content/images/search-icon.png

40.122.35.136

200 OK

170 B

URL GET HTTP/2
www.confessionpost.com/Content/images/search-icon.png
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
PNG image data, 17 x 18, 8-bit gray+alpha, non-interlaced\012- data
Size
170 B (170 bytes)
Hash
2621b878dc00d92658702bafc29e820d
8b49a0b01c6c44bfd49a2a5f00d41041c32f5e57
daec3d206dfdf5092b67ec346cf6216e074d0662479e1733cff44bcb10986642

HTTP Headers

GET /Content/images/search-icon.png HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/Content/css?v=hIG71WrlXLMgL_h3VYLVMahjBRxYnb94T4BB_Je4ZeE1
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/png
last-modified: Thu, 11 May 2017 18:55:26 GMT
accept-ranges: bytes
etag: "0e3a62688cad21:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 170
X-Firefox-Spdy: h2

www.confessionpost.com/Content/fonts/fontawesome-webfont.woff?v=4.2.0

40.122.35.136

200 OK

66 kB

URL GET HTTP/2
www.confessionpost.com/Content/fonts/fontawesome-webfont.woff?v=4.2.0
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Size
66 kB (65452 bytes)
Hash
d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1

HTTP Headers

GET /Content/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/Content/css?v=hIG71WrlXLMgL_h3VYLVMahjBRxYnb94T4BB_Je4ZeE1
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: font/x-woff
last-modified: Tue, 20 Jan 2015 02:00:18 GMT
accept-ranges: bytes
etag: "025d6d65434d01:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
content-length: 65452
X-Firefox-Spdy: h2

n6kux3ys3lhv.com/df2a350b722c3b4b2721c7fc251beab9/invoke.js

192.243.61.225

200 OK

9.3 kB

URL GET HTTP/1.1
n6kux3ys3lhv.com/df2a350b722c3b4b2721c7fc251beab9/invoke.js
IP
192.243.61.225:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectn6kux3ys3lhv.com
FingerprintDF:38:49:FC:C9:1B:0F:42:F4:2E:6A:EA:46:D9:C2:28:7A:49:12:D2
ValidityThu, 16 Nov 2023 06:50:27 GMT - Wed, 14 Feb 2024 06:50:26 GMT

File type
Unicode text, UTF-8 text, with very long lines (25079), with no line terminators
Size
9.3 kB (9278 bytes)
Hash
5d39a9ed684d212dade228fd6a17fcef
9032ab3f84a50bcb9800c74c707773e068d6d4ed
4ce0dc80510e8476425d696adb296390772a6501cbc07ce524b6759319eaa4a1

HTTP Headers

GET /df2a350b722c3b4b2721c7fc251beab9/invoke.js HTTP/1.1
Host: n6kux3ys3lhv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 13:10:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e56008dbae6a65ebcba26553199cce01
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js

142.250.74.35

200 OK

191 kB

URL GET HTTP/2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (563)
Size
191 kB (190682 bytes)
Hash
23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7

HTTP Headers

GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.confessionpost.com
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 08:43:40 GMT
expires: Wed, 04 Dec 2024 08:43:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 15986
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.confessionpost.com/Content/Images/favicons//apple-touch-icon.png?v=kPgrjA

40.122.35.136

200 OK

6.7 kB

URL GET HTTP/2
www.confessionpost.com/Content/Images/favicons//apple-touch-icon.png?v=kPgrjA
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
6.7 kB (6654 bytes)
Hash
b4eade7995a592264acda28a0f4694d7
cb1dbef20733796d211c8f66d691de2f8e504709
61c9f332f64853872dca26bdacc2d6f86a7187ce37fddb5e04c4347a4faf12d2

HTTP Headers

GET /Content/Images/favicons//apple-touch-icon.png?v=kPgrjA HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0; _ga_9RHR4MZX0F=GS1.1.1701781812.1.0.1701781812.0.0.0; _ga=GA1.1.1875682304.1701781812
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/png
last-modified: Sun, 30 Oct 2016 21:25:39 GMT
accept-ranges: bytes
etag: "80cb1729f432d21:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:06 GMT
content-length: 6654
X-Firefox-Spdy: h2

ocsp.r2m03.amazontrust.com/

54.230.218.11

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
54.230.218.11:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
24a776b1f2e9d3fff472472cff5e9b16
38a6b9ce7b18c9204f5ace875325ca74c863d1a9
108f3caa2c7db8c122fcea5f02f4f0f1e058d4da8e913dc2b4e8ace4e5a50e81

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 13:10:06 GMT
Last-Modified: Tue, 05 Dec 2023 12:45:15 GMT
Server: ECAcc (ska/F790)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0rQ7GYJOMJkii_ZwuetUIpK7gpgJ8Z3wgiG3j2MOhDSfNTlCT5w44g==
Age: 1491

proftrafficcounter.com/stats

18.184.210.76

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
18.184.210.76:443
ASN
#16509 AMAZON-02

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
b330d57e800463828a04712682564f12
0678b6e088b786789da36cd120a5ff2554605aeb
866b0e9d683e747d1598ab1194d67f0437cebd2d3a9992184df13a5dac909245

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.confessionpost.com
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:10:06 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.confessionpost.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=bfc06389-4ba3-497a-b8d4-d6818c799251:3:1; expires=Fri, 02 Dec 2033 13:10:06 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

www.confessionpost.com/Content/Images/favicons//favicon-16x16.png?v=kPgrjA

40.122.35.136

200 OK

1.2 kB

URL GET HTTP/2
www.confessionpost.com/Content/Images/favicons//favicon-16x16.png?v=kPgrjA
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
1.2 kB (1168 bytes)
Hash
29d67d388cba3c91b46de614908d289d
7d859147e868b89701f2787ff1ca283dc7b7fe98
0632535636325d48972627ff657c77c8ae958e964ee130c07ebefdf20a5ca625

HTTP Headers

GET /Content/Images/favicons//favicon-16x16.png?v=kPgrjA HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0; _ga_9RHR4MZX0F=GS1.1.1701781812.1.0.1701781812.0.0.0; _ga=GA1.1.1875682304.1701781812
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/png
last-modified: Sun, 30 Oct 2016 00:52:13 GMT
accept-ranges: bytes
etag: "805c14da4732d21:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:06 GMT
content-length: 1168
X-Firefox-Spdy: h2

fixedencampment.com/ntv.json?key=df2a350b722c3b4b2721c7fc251beab9&vstc=2

173.233.137.44

200 OK

9.0 kB

URL GET HTTP/1.1
fixedencampment.com/ntv.json?key=df2a350b722c3b4b2721c7fc251beab9&vstc=2
IP
173.233.137.44:443
ASN
#7979 SERVERS-COM

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT

File type
JSON data\012- , Unicode text, UTF-8 text, with very long lines (9017), with no line terminators
Size
9.0 kB (9029 bytes)
Hash
589d48c7115fccdcbbb334478bf18414
35febde58f8a0f4966c9d2c0af7f5b928a242ed9
7b0d46bad657fbb6eb1721e839eb792868c24df87cc6c0dfe9ff287934802185

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ntv.json?key=df2a350b722c3b4b2721c7fc251beab9&vstc=2 HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.confessionpost.com
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 13:10:07 GMT
Content-Type: application/json
Content-Length: 9029
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.confessionpost.com
Access-Control-Allow-Origin: https://www.confessionpost.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18242943; expires=Wed, 06 Dec 2023 13:10:07 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 13:10:07 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 13:10:07 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 06 Dec 2023 13:10:07 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 06 Dec 2023 13:10:07 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1e009d9b2e521b312704f56f92fd6127
Strict-Transport-Security: max-age=0; includeSubdomains

fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSeNaFJGogQEg26iCZI6Ly7d5fzkSIQQpCFsZ0fyDQU82vPg2d3lpnd27MbLCJQyoMKqNbf2bGAKMJUNEhonSayhJRrkIv4H4AuIiVCdz7p4En73vv2e8X3vTdf7uQnJEBOj1c%2FMFtKazrfqvu1i2sqEaZwteXbtcCv%2B5drayq51Lxc64%2BT7b0Z%2BK26%2F3rtPck3zHzoB74f%2BEHturIyMv35CQuV3u8E9Y5fb4b1oNVE3%2F4fu9yDox5E74SchxKj59cfHUDxCkn80zXpNjKTvvFunGuaGYue2P8w2UhMkSCetZH1ECX702kYNyLkmzmYZH%2FqAKa3O3YApkbE%2ByMAS%2FanMsF6e6dKmYZMwMQ5FL0KUldQtAI3d6DEYwJwgeUVJPG9ZWMLunnK0jE7ImeePYUqRuTMk5eQxA%2BuatWv3TI6z5RJHPpRCdWvoLoV0vwQ2ZYHVRyCZ59Did%2FJ%2FLMlJPHuitMGSpQT90pVUFEFLQegzkM%2B%2FpSHPPKQpx5icVyjrU7k%2B%2B2IRY3GQpNz3mhw3lq4JFqi0VyIfOR8LG%2BALB2A6wG43UZqt7GhvnrcOg%2Bb%2Fwa3XsIJDy4bEe%2FGNnqiRCEJCkdQUIJCERQZQdEr94R2oSvvCe1yFkxrOK2Ncmiy7g7dM1lXJgTUDnbSE%2FLieD3eyx9%2Fhg15XBNRSBstn7XDkDdYk4XtMODtiIetgEnKOnCqhHJzE8dbakQufOQjVSNy9uITMHoIpw%2FB1QugeQBaDNuhD7o%2BbC742Ep%2B5iaJpHPKJKlxWZ2bGMKUSLMzyDa9HX1CXpkc662HTyH50ZWDP7949Zcbf4HbEqkt8Yl6SNDVd4c3TUF2b5rCkYOVNFOx2qLjQ97KaCaf%2B%2BF9uVkYKxavucH3b%2FMxMW7v35YuW6KJUEnXkR%2BvKiGkvW4sl%2BTXRbcm2Wru1q%2FmNsnTpdV3ri%2FGqT3VWoGqESHVp%2BBqRM79k04e6WvuAZStYPMScX5EpgFlKvB0Gy6d6XeGwOrZDEs9FHk5tCGb%2FdSKQMsZpqyE%2Bw9ms37H3UXXzoFmd5DEJXq2RE%2BXoHoAl58dZqk9uvLo23F8B6bnhkzbuV2mrf56stxx%2BhtOHddkK%2FIj6YeSRR0WtakvOlGzw2gnkG3WogEyN5Lmwvy%2FAAAA%2F%2F8BAAD%2F%2F1sfKxSBBAAA

173.233.137.44

200 OK

7 B

URL GET HTTP/1.1
fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSeNaFJGogQEg26iCZI6Ly7d5fzkSIQQpCFsZ0fyDQU82vPg2d3lpnd27MbLCJQyoMKqNbf2bGAKMJUNEhonSayhJRrkIv4H4AuIiVCdz7p4En73vv2e8X3vTdf7uQnJEBOj1c%2FMFtKazrfqvu1i2sqEaZwteXbtcCv%2B5drayq51Lxc64%2BT7b0Z%2BK26%2F3rtPck3zHzoB74f%2BEHturIyMv35CQuV3u8E9Y5fb4b1oNVE3%2F4fu9yDox5E74SchxKj59cfHUDxCkn80zXpNjKTvvFunGuaGYue2P8w2UhMkSCetZH1ECX702kYNyLkmzmYZH%2FqAKa3O3YApkbE%2ByMAS%2FanMsF6e6dKmYZMwMQ5FL0KUldQtAI3d6DEYwJwgeUVJPG9ZWMLunnK0jE7ImeePYUqRuTMk5eQxA%2BuatWv3TI6z5RJHPpRCdWvoLoV0vwQ2ZYHVRyCZ59Did%2FJ%2FLMlJPHuitMGSpQT90pVUFEFLQegzkM%2B%2FpSHPPKQpx5icVyjrU7k%2B%2B2IRY3GQpNz3mhw3lq4JFqi0VyIfOR8LG%2BALB2A6wG43UZqt7GhvnrcOg%2Bb%2Fwa3XsIJDy4bEe%2FGNnqiRCEJCkdQUIJCERQZQdEr94R2oSvvCe1yFkxrOK2Ncmiy7g7dM1lXJgTUDnbSE%2FLieD3eyx9%2Fhg15XBNRSBstn7XDkDdYk4XtMODtiIetgEnKOnCqhHJzE8dbakQufOQjVSNy9uITMHoIpw%2FB1QugeQBaDNuhD7o%2BbC742Ep%2B5iaJpHPKJKlxWZ2bGMKUSLMzyDa9HX1CXpkc662HTyH50ZWDP7949Zcbf4HbEqkt8Yl6SNDVd4c3TUF2b5rCkYOVNFOx2qLjQ97KaCaf%2B%2BF9uVkYKxavucH3b%2FMxMW7v35YuW6KJUEnXkR%2BvKiGkvW4sl%2BTXRbcm2Wru1q%2FmNsnTpdV3ri%2FGqT3VWoGqESHVp%2BBqRM79k04e6WvuAZStYPMScX5EpgFlKvB0Gy6d6XeGwOrZDEs9FHk5tCGb%2FdSKQMsZpqyE%2Bw9ms37H3UXXzoFmd5DEJXq2RE%2BXoHoAl58dZqk9uvLo23F8B6bnhkzbuV2mrf56stxx%2BhtOHddkK%2FIj6YeSRR0WtakvOlGzw2gnkG3WogEyN5Lmwvy%2FAAAA%2F%2F8BAAD%2F%2F1sfKxSBBAAA
IP
173.233.137.44:443
ASN
#7979 SERVERS-COM

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSeNaFJGogQEg26iCZI6Ly7d5fzkSIQQpCFsZ0fyDQU82vPg2d3lpnd27MbLCJQyoMKqNbf2bGAKMJUNEhonSayhJRrkIv4H4AuIiVCdz7p4En73vv2e8X3vTdf7uQnJEBOj1c%2FMFtKazrfqvu1i2sqEaZwteXbtcCv%2B5drayq51Lxc64%2BT7b0Z%2BK26%2F3rtPck3zHzoB74f%2BEHturIyMv35CQuV3u8E9Y5fb4b1oNVE3%2F4fu9yDox5E74SchxKj59cfHUDxCkn80zXpNjKTvvFunGuaGYue2P8w2UhMkSCetZH1ECX702kYNyLkmzmYZH%2FqAKa3O3YApkbE%2ByMAS%2FanMsF6e6dKmYZMwMQ5FL0KUldQtAI3d6DEYwJwgeUVJPG9ZWMLunnK0jE7ImeePYUqRuTMk5eQxA%2BuatWv3TI6z5RJHPpRCdWvoLoV0vwQ2ZYHVRyCZ59Did%2FJ%2FLMlJPHuitMGSpQT90pVUFEFLQegzkM%2B%2FpSHPPKQpx5icVyjrU7k%2B%2B2IRY3GQpNz3mhw3lq4JFqi0VyIfOR8LG%2BALB2A6wG43UZqt7GhvnrcOg%2Bb%2Fwa3XsIJDy4bEe%2FGNnqiRCEJCkdQUIJCERQZQdEr94R2oSvvCe1yFkxrOK2Ncmiy7g7dM1lXJgTUDnbSE%2FLieD3eyx9%2Fhg15XBNRSBstn7XDkDdYk4XtMODtiIetgEnKOnCqhHJzE8dbakQufOQjVSNy9uITMHoIpw%2FB1QugeQBaDNuhD7o%2BbC742Ep%2B5iaJpHPKJKlxWZ2bGMKUSLMzyDa9HX1CXpkc662HTyH50ZWDP7949Zcbf4HbEqkt8Yl6SNDVd4c3TUF2b5rCkYOVNFOx2qLjQ97KaCaf%2B%2BF9uVkYKxavucH3b%2FMxMW7v35YuW6KJUEnXkR%2BvKiGkvW4sl%2BTXRbcm2Wru1q%2FmNsnTpdV3ri%2FGqT3VWoGqESHVp%2BBqRM79k04e6WvuAZStYPMScX5EpgFlKvB0Gy6d6XeGwOrZDEs9FHk5tCGb%2FdSKQMsZpqyE%2Bw9ms37H3UXXzoFmd5DEJXq2RE%2BXoHoAl58dZqk9uvLo23F8B6bnhkzbuV2mrf56stxx%2BhtOHddkK%2FIj6YeSRR0WtakvOlGzw2gnkG3WogEyN5Lmwvy%2FAAAA%2F%2F8BAAD%2F%2F1sfKxSBBAAA HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Cookie: u_pl=18242943; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 13:10:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4f64bee07ab6f24aeb621e14b254bd82
Strict-Transport-Security: max-age=0; includeSubdomains

fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSePUKTNBAhJBp0EU2Q0Hl37y7nI0UghCALYzs%2FkGko5teeB8%2FuLDO7t2c3WESglAcVUK2%2Fs2MBEYqpaJDQOk1kCSnXIBfxPwBdREqEzj7p4Ekz7735XvF935svt%2FNjEiCnRysfmE2lNZ1rN%2Fz6xVWVCFO4%2BtLteuA3%2FMv1VZVcal2uDyaX7b8Z%2BO2G%2F3r9PcnXzVzoB74f%2BEH9urIyMoO5ExQqvd8NGl2%2F0QobQbuFgf1%2F73IPjnoQ%2FWNyHkqMn197tA%2FFKyTxg2vSrWcmfePdONc0MxZ9sfdhsp6YIkE8KyPrIUr2ptMwbkzINzWYZG%2BqAKa%2FM1EApsbE%2ByMAS%2FamNMH6u6dMmYZMwMQ5FP0KUldQtAI3d6DEYwJwgaVlJPG9JWMLunGK0gk6JmeePYUqxuTMk5eQxD9d1WpQv2V0nimTOAyiEmpQQfUqpPkBsk0PqjgAzz6HEr%2BTuWeLSOKdZacNlChP1CtVQUUVtByCOg%2F55CgPeeQhTz3E4qhO293I9zsRi5rN%2BRbnvNnkvD1%2FSbRFszUf%2Bcj5hN4QWToE10Nwu4XUbmFdffW4fR42%2Fw1urYQTHlw2Jt6NLfRFiUISFI6goASFIigygqJf7grtQlfeE9rlLJjmcJqb5chkvW26a7KeTAioHW6nx%2BTFiT3eyx9%2FhnV5VBdRSJttn3XCkDdZi4WdMOCdiIftgEnKunCqhHK1E8WbakwufOQjVWNy9uITMHoApw%2FA1QugeQBajDqhD7o2as372Ex%2B5iaJpHPKJKlxWYObGMKUSLMzyDa8bX1MXjlZ1lsP%2F4bkh1f2%2F%2Fzi1V9u%2FAVuS6S2xCfqIUFP3x3dNAXZuWkKR%2FaX00zFapNOFnkro5l87of35UZhrFi45obfv80nwKS8f1u6bJEmQiU9R368qoSQ9rqxXJJfF9yqZCu5W7ua2yRPF1feub4Qp%2FaUawWqxoRUn4KrMTn3T3rySV9zD6BsBZuXiPNDMg0oU4GnW3DpjL8zBFbPZlhaQ5GXIxuy2aNWBFrOespKuP%2F0bFZvu7vo2RpodgdJXKJvS%2FR1CaqHcPnZUZbawyuPvp3Ed2C6NmLa1naYtvrriblPTx126qgu25EfST%2BULOqyqEN90Y1aXUa7geywNg2QubE0F%2Bb%2BBQAA%2F%2F8BAAD%2F%2FyOR4%2BmBBAAA

173.233.137.44

200 OK

7 B

URL GET HTTP/1.1
fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSePUKTNBAhJBp0EU2Q0Hl37y7nI0UghCALYzs%2FkGko5teeB8%2FuLDO7t2c3WESglAcVUK2%2Fs2MBEYqpaJDQOk1kCSnXIBfxPwBdREqEzj7p4Ekz7735XvF935svt%2FNjEiCnRysfmE2lNZ1rN%2Fz6xVWVCFO4%2BtLteuA3%2FMv1VZVcal2uDyaX7b8Z%2BO2G%2F3r9PcnXzVzoB74f%2BEH9urIyMoO5ExQqvd8NGl2%2F0QobQbuFgf1%2F73IPjnoQ%2FWNyHkqMn197tA%2FFKyTxg2vSrWcmfePdONc0MxZ9sfdhsp6YIkE8KyPrIUr2ptMwbkzINzWYZG%2BqAKa%2FM1EApsbE%2ByMAS%2FamNMH6u6dMmYZMwMQ5FP0KUldQtAI3d6DEYwJwgaVlJPG9JWMLunGK0gk6JmeePYUqxuTMk5eQxD9d1WpQv2V0nimTOAyiEmpQQfUqpPkBsk0PqjgAzz6HEr%2BTuWeLSOKdZacNlChP1CtVQUUVtByCOg%2F55CgPeeQhTz3E4qhO293I9zsRi5rN%2BRbnvNnkvD1%2FSbRFszUf%2Bcj5hN4QWToE10Nwu4XUbmFdffW4fR42%2Fw1urYQTHlw2Jt6NLfRFiUISFI6goASFIigygqJf7grtQlfeE9rlLJjmcJqb5chkvW26a7KeTAioHW6nx%2BTFiT3eyx9%2FhnV5VBdRSJttn3XCkDdZi4WdMOCdiIftgEnKunCqhHK1E8WbakwufOQjVWNy9uITMHoApw%2FA1QugeQBajDqhD7o2as372Ex%2B5iaJpHPKJKlxWYObGMKUSLMzyDa8bX1MXjlZ1lsP%2F4bkh1f2%2F%2Fzi1V9u%2FAVuS6S2xCfqIUFP3x3dNAXZuWkKR%2FaX00zFapNOFnkro5l87of35UZhrFi45obfv80nwKS8f1u6bJEmQiU9R368qoSQ9rqxXJJfF9yqZCu5W7ua2yRPF1feub4Qp%2FaUawWqxoRUn4KrMTn3T3rySV9zD6BsBZuXiPNDMg0oU4GnW3DpjL8zBFbPZlhaQ5GXIxuy2aNWBFrOespKuP%2F0bFZvu7vo2RpodgdJXKJvS%2FR1CaqHcPnZUZbawyuPvp3Ed2C6NmLa1naYtvrriblPTx126qgu25EfST%2BULOqyqEN90Y1aXUa7geywNg2QubE0F%2Bb%2BBQAA%2F%2F8BAAD%2F%2FyOR4%2BmBBAAA
IP
173.233.137.44:443
ASN
#7979 SERVERS-COM

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSePUKTNBAhJBp0EU2Q0Hl37y7nI0UghCALYzs%2FkGko5teeB8%2FuLDO7t2c3WESglAcVUK2%2Fs2MBEYqpaJDQOk1kCSnXIBfxPwBdREqEzj7p4Ekz7735XvF935svt%2FNjEiCnRysfmE2lNZ1rN%2Fz6xVWVCFO4%2BtLteuA3%2FMv1VZVcal2uDyaX7b8Z%2BO2G%2F3r9PcnXzVzoB74f%2BEH9urIyMoO5ExQqvd8NGl2%2F0QobQbuFgf1%2F73IPjnoQ%2FWNyHkqMn197tA%2FFKyTxg2vSrWcmfePdONc0MxZ9sfdhsp6YIkE8KyPrIUr2ptMwbkzINzWYZG%2BqAKa%2FM1EApsbE%2ByMAS%2FamNMH6u6dMmYZMwMQ5FP0KUldQtAI3d6DEYwJwgaVlJPG9JWMLunGK0gk6JmeePYUqxuTMk5eQxD9d1WpQv2V0nimTOAyiEmpQQfUqpPkBsk0PqjgAzz6HEr%2BTuWeLSOKdZacNlChP1CtVQUUVtByCOg%2F55CgPeeQhTz3E4qhO293I9zsRi5rN%2BRbnvNnkvD1%2FSbRFszUf%2Bcj5hN4QWToE10Nwu4XUbmFdffW4fR42%2Fw1urYQTHlw2Jt6NLfRFiUISFI6goASFIigygqJf7grtQlfeE9rlLJjmcJqb5chkvW26a7KeTAioHW6nx%2BTFiT3eyx9%2FhnV5VBdRSJttn3XCkDdZi4WdMOCdiIftgEnKunCqhHK1E8WbakwufOQjVWNy9uITMHoApw%2FA1QugeQBajDqhD7o2as372Ex%2B5iaJpHPKJKlxWYObGMKUSLMzyDa8bX1MXjlZ1lsP%2F4bkh1f2%2F%2Fzi1V9u%2FAVuS6S2xCfqIUFP3x3dNAXZuWkKR%2FaX00zFapNOFnkro5l87of35UZhrFi45obfv80nwKS8f1u6bJEmQiU9R368qoSQ9rqxXJJfF9yqZCu5W7ua2yRPF1feub4Qp%2FaUawWqxoRUn4KrMTn3T3rySV9zD6BsBZuXiPNDMg0oU4GnW3DpjL8zBFbPZlhaQ5GXIxuy2aNWBFrOespKuP%2F0bFZvu7vo2RpodgdJXKJvS%2FR1CaqHcPnZUZbawyuPvp3Ed2C6NmLa1naYtvrriblPTx126qgu25EfST%2BULOqyqEN90Y1aXUa7geywNg2QubE0F%2Bb%2BBQAA%2F%2F8BAAD%2F%2FyOR4%2BmBBAAA HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Cookie: u_pl=18242943; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 13:10:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 327fe97c44e58fcb966111bab3b8680c
Strict-Transport-Security: max-age=0; includeSubdomains

cdn.cloudimagesb.com/si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png

45.133.44.9

200 OK

139 kB

URL GET HTTP/2
cdn.cloudimagesb.com/si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png
IP
45.133.44.9:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT

File type
PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
139 kB (139050 bytes)
Hash
b5095853b4c6e16acd9d238c51c479ff
b7436311ee33f668d8a71e1300a60a4e11ff32e4
b47522a109caa660ee05c5278f3ffc9eecd1d290b4132b6388d5677f9ea372a7

HTTP Headers

GET /si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:10:07 GMT
content-type: image/png
content-length: 139050
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:00 GMT
etag: "6455fd48-21f2a"
expires: Thu, 07 Dec 2023 13:10:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

cdn.cloudimagesb.com/si/e7/65/91/e76591885426335875f96fec271ab416/1683357009.png

45.133.44.9

200 OK

118 kB

URL GET HTTP/2
cdn.cloudimagesb.com/si/e7/65/91/e76591885426335875f96fec271ab416/1683357009.png
IP
45.133.44.9:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT

File type
PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
118 kB (118147 bytes)
Hash
42aa625f7b89a3d77b9fe771f1f1d3c3
9b3d290a8eba25e0c882692bc11c9c3ef4e52dbd
e85910c5985368e86dd68b62ca341599e65a4950383aa0a99e9336eecc47e122

HTTP Headers

GET /si/e7/65/91/e76591885426335875f96fec271ab416/1683357009.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:10:07 GMT
content-type: image/png
content-length: 118147
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:21 GMT
etag: "6455fd5d-1cd83"
expires: Thu, 07 Dec 2023 13:10:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

unpkg.com/twemoji@latest/dist/twemoji.min.js

104.16.123.175

302 Found

17 kB

URL GET HTTP/2
unpkg.com/twemoji@latest/dist/twemoji.min.js
IP
104.16.123.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

File type

Size
17 kB (17437 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /twemoji@latest/dist/twemoji.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.confessionpost.com
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 05 Dec 2023 13:10:05 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /twemoji@14.0.2/dist/twemoji.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGX18237ENEZS4RNT51VRNE0-fra
cf-cache-status: HIT
age: 364
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830c86fd5f2e568e-OSL
X-Firefox-Spdy: h2

www.confessionpost.com/Scripts/bundle?v=s9erSQREATQRTJOHiWVtBrYiNJ3ZMroytnlb3Wb9i9Q1

40.122.35.136

200 OK

485 kB

URL GET HTTP/2
www.confessionpost.com/Scripts/bundle?v=s9erSQREATQRTJOHiWVtBrYiNJ3ZMroytnlb3Wb9i9Q1
IP
40.122.35.136:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerLet's Encrypt
Subjectwww.confessionpost.com
Fingerprint6F:C3:07:4C:3C:3F:D1:D2:B3:B3:36:F9:33:29:11:FD:DE:54:CA:BC
ValidityThu, 23 Nov 2023 11:38:53 GMT - Wed, 21 Feb 2024 11:38:52 GMT

File type
ASCII text, with very long lines (32006), with CRLF, LF line terminators
Size
485 kB (484766 bytes)
Hash
d1b89f0f594cbc61ffc89400469573da
19a43639b7df3af1ab4408d607325a950c2e70f1
885c03b03c533b8a7644e0eff02ce46e2c771bd35765da2e1aabe6dc0084b67e

HTTP Headers

GET /Scripts/bundle?v=s9erSQREATQRTJOHiWVtBrYiNJ3ZMroytnlb3Wb9i9Q1 HTTP/1.1
Host: www.confessionpost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Cookie: ASP.NET_SessionId=okboc4251ikwvntitkphm2sc; __RequestVerificationToken=8saubChOAUMKyDnbAA_2XvMp6AVj-ReL2UUTcOHI5cpVBmHEzUHSf6JVOybUwCsauFJRAY-U-XB2REQBh8N5LRBuVfNlJud53Lief3J8Iby0iKJGgzhzQr8mxYpL7A2y0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Wed, 04 Dec 2024 13:10:05 GMT
last-modified: Tue, 05 Dec 2023 13:10:05 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Tue, 05 Dec 2023 13:10:05 GMT
X-Firefox-Spdy: h2

www.google.com/recaptcha/api.js?onload=recaptchaLoaded&render=explicit

142.250.74.132

200 OK

910 B

URL GET HTTP/2
www.google.com/recaptcha/api.js?onload=recaptchaLoaded&render=explicit
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT

File type
ASCII text, with very long lines (910), with no line terminators
Size
910 B (910 bytes)
Hash
6a5eca79e12470cbec162175883c90a6
4504b6f15393cc52a3cdd38c5d29ee52e0f147bd
c617c67455a314ba3df9332abc5808ecf31211c18076e6ee4a87e492e28556e9

HTTP Headers

GET /recaptcha/api.js?onload=recaptchaLoaded&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.confessionpost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Tue, 05 Dec 2023 13:10:05 GMT
date: Tue, 05 Dec 2023 13:10:05 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

unpkg.com/twemoji@14.0.2/dist/twemoji.min.js

104.16.123.175

200 OK

17 kB

URL GET HTTP/2
unpkg.com/twemoji@14.0.2/dist/twemoji.min.js
IP
104.16.123.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.confessionpost.com/47353/how-do-i-get-my-wife-to-go-black-and-hung
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

File type

Size
17 kB (17437 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /twemoji@14.0.2/dist/twemoji.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.confessionpost.com
Referer: https://www.confessionpost.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:10:05 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Thu, 31 Mar 2022 00:15:41 GMT
etag: W/"441d-jRsS6SzbYaTnLJVVzEvraaMX+jo"
via: 1.1 fly.io
fly-request-id: 01HFTKA6FC5Z9FGQ17TW31V6WQ-arn
cf-cache-status: HIT
age: 1155826
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830c86fd8f68568e-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by