r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3017
Expires: Fri, 27 Jan 2023 03:04:47 GMT
Date: Fri, 27 Jan 2023 02:14:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4914
Expires: Fri, 27 Jan 2023 03:36:24 GMT
Date: Fri, 27 Jan 2023 02:14:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7177
Expires: Fri, 27 Jan 2023 04:14:07 GMT
Date: Fri, 27 Jan 2023 02:14:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 01:35:19 GMT
content-type: application/json
age: 2351
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YRKIkkxHLGsymiyrJNJIfRxenbr3rJvz3QTYKjShr7qZbxk+A4AkyOqWdHTlUIHNwge+/BIb4jU=
x-amz-request-id: AH7YB748AXEVAFRZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 01:49:13 GMT
age: 1517
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 02:14:30 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 01:49:02 GMT
age: 1529
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3897
Expires: Fri, 27 Jan 2023 03:19:28 GMT
Date: Fri, 27 Jan 2023 02:14:31 GMT
Connection: keep-alive
www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
200 OK 3.7 kB URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 4a87f0dda553a41a6cae225df84eb3f6
20911d753d536a8b872865d8237349b121020197
cb343da136145d4658ea2288326a9f350fceb75a69b446fbafc6a7c0ce31b324
GET /esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LEKzBU9KN%2BSql088ECeM7LyWegJ3aCqPKjvrEmlUCNZC%2B5%2BT3hpD1bargSY0nXqLxt%2BkgsQIcvs3qjppCu%2BpPzNuO9IfZKnp%2BlC2JeSjsBYobglAeUEYzjtpNFHidbMWwQ03BIk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fdf9a91d1cb4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: H7zkvm2Kp+susnuKVKj35g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2eBajw6yS58lcGeeMozRNbC32uw=
static.production.almightypush.com/mng/channels/init.min.js?ver=1644586917
200 OK 23 kB URL HTTP/2 static.production.almightypush.com/mng/channels/init.min.js?ver=1644586917
IP
Hash 3b6653c5e8ba364d3a55401890bfcd78
ee999f16f02d41b93d1db2bf3a489fab1034e67a
a598ef0100e73e2d81969e0a59374e915ccfe7c312603b4b1375bbd0e75498d5
GET /mng/channels/init.min.js?ver=1644586917 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.buttygirls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 22787
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 26 Jan 2023 04:10:11 GMT
etag: "3b6653c5e8ba364d3a55401890bfcd78"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _ZJkiSEiClp2sGk26640SVyFZ7ciRbafCpXsQg3xrxgTlEsgiEE-pQ==
age: 79531
X-Firefox-Spdy: h2
static.production.almightypush.com/mng/subs_window.css?ver=1644586917
200 OK 6.9 kB URL HTTP/2 static.production.almightypush.com/mng/subs_window.css?ver=1644586917
IP
Hash bd7dbae15f904a4e1213439ebfefddbe
9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e
30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
GET /mng/subs_window.css?ver=1644586917 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.buttygirls.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 6945
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 26 Jan 2023 07:51:16 GMT
etag: "bd7dbae15f904a4e1213439ebfefddbe"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JJ4-KJsPdx4ndSTTq7U8fPw7vBwJOvsF6M3K3VcMw8Ac5i_nvbNwaA==
age: 66264
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 02:14:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 02:14:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f81ebe2b99768bbbe7a4f06d4e2b3763
ef54a2adbf89f157bc49961cc0c59d7d7535528a
18606cd5431d560e62dfe9233ef7a2c5545edd975660485556c286b8d0c89e30
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135872
Date: Fri, 27 Jan 2023 02:14:31 GMT
Etag: "63d28ea1-1d7"
Expires: Sat, 28 Jan 2023 15:59:03 GMT
Last-Modified: Thu, 26 Jan 2023 14:30:57 GMT
Server: ECS (nyb/1D31)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kBjR55lTNUvnq3vRuKfGwjmTi2ZRLSTBvFIcXIEMxBCcBVdHhGMH2w==
Age: 5287
static.production.almightypush.com/mng/subs_window.js?ver=1644586917
200 OK 20 kB URL HTTP/2 static.production.almightypush.com/mng/subs_window.js?ver=1644586917
IP
Hash ae593f4be1dd1f0710123918b49c4933
66fbe30bb873e0a47d3d72e737d68aa4b6916c26
fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
GET /mng/subs_window.js?ver=1644586917 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.buttygirls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 19491
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 26 Jan 2023 06:34:20 GMT
etag: "ae593f4be1dd1f0710123918b49c4933"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nbgI9ttwvGsXUIfGDl-ey5chaVOSvd0zZ_5mOHE-dnWO-3yzD2opIA==
age: 70859
X-Firefox-Spdy: h2
www.buttygirls.com/esus/multi/ms/7-216324/css/normalize.css
200 OK 2.1 kB URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/css/normalize.css
IP
Hash 3a8aa2b923c16206db04bc6c69f1a58f
f2d28e1d8ce197bbfbebf4314949ef8cb3e5d58e
1a75f821f5beaf52dd5466522392998eaf1b150047fb58b144c001f14dd0a174
GET /esus/multi/ms/7-216324/css/normalize.css HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 15:27:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xagIWhUNakhY%2FCW5eSg5JTeiXxdonZGJxSeYKmyyfv0oB%2B0tlLf1sthIHukTU6FyhiEtZDmBCPZpRnu%2FbLaI4x8puUgnyasv1XAhnEIxTvm73OqQ4oHCKZ05sgWTmlD99M6pues%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b06810b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8342bd4fcc0db7060b187118f686de
7f2a458bd4b51bef290206cfcef7989190885334
5e504c57fc750b802d5706b163f50b9bd853de71bd77414f06612c1100c82223
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E504C57FC750B802D5706B163F50B9BD853DE71BD77414F06612C1100C82223"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4054
Expires: Fri, 27 Jan 2023 03:22:06 GMT
Date: Fri, 27 Jan 2023 02:14:32 GMT
Connection: keep-alive
www.buttygirls.com/esus/multi/ms/7-216324/css/style.css
200 OK 1.8 kB URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/css/style.css
IP
Hash 7eded0c259bed040a6838742da7f82fd
d7448cfc776a4fdc8fb6cd953bd77c72b1f3fe0c
f6b82e40f5b4eefbb63fa076d9f25c22dac47dab1b7302abfa63f9cc29dab356
GET /esus/multi/ms/7-216324/css/style.css HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 15:27:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sCZDGq9nsJay%2ByE%2FgLKeyjH0JHz18ImBq2wDv%2B3ZqxMwvhR%2BOnKv%2Bdu4cPH5Ig4VQ3XzoO1koerCq8ouMtMBB9fY7%2BgSC6YjpvZrgMlCJswe5i%2B5ednzQx1E%2BVFxur134fnxXRI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b07931b517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/js/jquery.min.js
200 OK 33 kB URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/js/jquery.min.js
IP
File type ASCII text, with very long lines (32047)
Hash 681f5acb09e41b111a796c7a4eddfe73
8793aadb0e45567d84f2c4bd03e9ff49e615e3cc
d9a28a18def7d05077f968ad00a30534a017a097134f6da9c924862d93aa62ca
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/js/jquery.min.js HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WaCIoigL9Bf4hrj93JIcpI46oY4bLnrXv6f%2Fyc%2FrLZNv%2BJxNJ7ugPprg0GT4JT1nvUmDQvMfCFro1s7C2Sl7t7WdXhpCMHkbOAVNT9bN4sNw7hEk80ajGQBxZY%2ByTWvKLll9Ogw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b07b55b521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/js/ip_api.js
200 OK 354 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/js/ip_api.js
IP
Hash 792f5be3a6ab4b300b164593323d05b1
b86d12ba7693b0d14bd5c59677eb4bc68265f17e
f2aa9bae5d96991cbdf05bff51bc3606354a430c19dea760e4e1bbf3d28d8789
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/js/ip_api.js HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q1wqFFf2cg7%2FHx%2BlRKJKb7JjyeM2x2cgGlN0i2xMkOGDPnuvRROctRT%2F1e69IKxzsqTdxpKmoD5p%2F2Bhx6fcPegn03KAgoO5IfD%2F8Zwo8rjAIjKEvtICs82ItBek1Z7MWnjtxmg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b07b3cb50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/js/inline_video.js
200 OK 1.3 kB URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/js/inline_video.js
IP
File type ASCII text, with very long lines (3011)
Hash ab03e3a189486b315c2e0bc4de293527
59aa7f71eedcf7642f22a9c50ae955292cb3ea39
b1d4e79daa51c97053fa4b2da8a5001ec23c2f7c9322ee7426bc2a16b2f34f5c
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/js/inline_video.js HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u2fLBv9HoQx4Ms7oVAiCuz5tFN69F%2Bd1zn8sZMaazaBz%2Bd220eI%2FIzRRb72kgcoFEnGAE95Aa2WATn9ql7AtX%2BjRi8Rd0yfE0R1Cg06K1Sgh93pL0w%2FDIMRYIYxyRlPMDt4%2BYBM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b078da0b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/js/backoffer.js
200 OK 230 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/js/backoffer.js
IP
File type ASCII text, with very long lines (430), with no line terminators
Hash d1d761e3721375472889577260906f9c
c5e6e54e8b6b84af216d867dca79eb00c2819e42
de8798dd7447b4651ec2d44931c15ceb0d3e5099997b2ddc2452d3f95092a1a2
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/js/backoffer.js HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 11 Feb 2022 15:27:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KoRyRnqoWH6ROJE424SsBDGzfmGY0Nftg7B6mwDWIq09qk7kdGAZIwc2if6%2F%2BZKThrub%2FncraUln4LCkRk%2Frkr7QfkTnttRVGl7kunLyZS1gGZDZIOOOgEH6A%2FScUCjBKMfcuJw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b08f45b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ip-api.com/json
200 OK 277 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 47abdf32b87fc82ed4160af504891507
290f0d4d0cef4cd5983db4bfe53c02a3f4193a6e
9df7a6b6ab363f5e4b96012311150f647cc5b24830f32f9cb621ddfbfab0d823
NIDS Severity Alert suricata medium ET POLICY External IP Lookup ip-api.com
GET /json HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.buttygirls.com
Connection: keep-alive
Referer: http://www.buttygirls.com/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 277
Access-Control-Allow-Origin: *
X-Ttl: 60
X-Rl: 44
www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic.woff
404 Not Found 315 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic.woff HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4Ehp7LC8ktAaePpcFjNciRQTjwvY305fxDWxmPbgVAYXVzTWHWY4V1m%2FmxddmXq3GuAk8q0SqUy74v0eKZCJpj2qBWJH5Gm%2FIFl7iW2bU3If7zRasFWA8BGBy3Z8xsu%2FmCCKk5A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b4ba730b65-OSL
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/images/frame.jpg
404 Not Found 238 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/images/frame.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /esus/multi/ms/7-216324/images/frame.jpg HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=di8nfF5ZJaOqiLzEP4hmePYw7rp8z6zdqHusVBGd2NVuJEc%2BDjxf%2F5mSOgOFrXnTBNeOJcVfRwxg4csgkZuPilDorB7QDhfkViM83dIOgxHydzlH%2F8FwsLci7AAxMcIy5CtdofY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b47b36b517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic-Bold.woff
404 Not Found 315 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic-Bold.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic-Bold.woff HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cHFIufSzQw5MiJiEgyLnFWLfw%2F7cqR5dUb%2FauTCOTcwhEb8U9GgzsSZXi%2BbQ4vLFYicuVEsbLY3S8nfyO1Jf33RbIk06Byzqxj%2FecR8g2IzQYouX3eyrFxDnQQ3c49XowSDocBM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b4bcd0b50b-OSL
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/images/loading.gif
404 Not Found 238 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/images/loading.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /esus/multi/ms/7-216324/images/loading.gif HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sp1HV8GuQ43U7FaJrTXzPgBbd5x1EsDz0gTAg0lFQajusZ4VN4uNyHuU%2B4HobWQujgnKC4wu6cipTwVOvgS0D93p9CpOwFgzvD1BOaqrAGrubYsMwDUGBWPmy7I7mZbwrIj3Sl0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b47cc9b521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/images/girl-v1.webm
404 Not Found 315 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/images/girl-v1.webm
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/images/girl-v1.webm HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L0gNbFnt%2Bp80o0cHQCwi4eV7Q50CE5gmM819qmawld7F0HecFLpim1KJPIIfWyhhnzgk1QPMztLc3jLB8r8YrMBlpFeJo2e2%2B27tKzDvw7n8qZnwH8LAlhFX2FT2Z8V8qCYogQg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fdf9b4c8f4b506-OSL
alt-svc: h2=":443"; ma=60
fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext
IP
Hash d2d5bb39a685fb35b01c9b5bd13aea5d
2e49b7113695d31e1c107d560180bbc176ccddc6
307b1ad69ff6d5cdda4caa2fa6861b4166299d2338bd4885604331101e8573d7
GET /css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.buttygirls.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 02:14:31 GMT
date: Fri, 27 Jan 2023 02:14:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic-Bold.ttf
404 Not Found 238 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic-Bold.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic-Bold.ttf HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hyevsKNmPBPxNnVum2C3B%2FDj2GeOILh%2FcwnDzfb8XODi5dun7aWT%2FSxvhiIpmWCQxCAtQypI4SZ6BT9y6lRxkowRaKdma49ijP6r4%2BHiuW3%2FxEEVda7Pe1aBkCHuB%2FQ6yMSQ%2B24%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b57d73b521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic.ttf
404 Not Found 238 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/css/CenturyGothic.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
Analyzer Verdict Alert fortinet Malware
GET /esus/multi/ms/7-216324/css/CenturyGothic.ttf HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/css/style.css
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OTxaIyNdvMa6os%2BIIVtNAo6TMmJ%2FrhhKz%2FkOZeoYqo%2FYrb9tI%2BRwoTjdHeDNecE0QqLrrhMrS%2BmU6Rw696WrzfvoU4KjrCodZ9DLiI0Js5xGDmdigYDiZcQcha8fxaKy0B2%2BQW4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b4fa840b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
alexatracker.com/jscode/JAIA.js?sub1=buttygirls.com&sub2=&sub3=&sub4=&sub5=&prid=
200 OK 0 B URL HTTP/2 alexatracker.com/jscode/JAIA.js?sub1=buttygirls.com&sub2=&sub3=&sub4=&sub5=&prid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jscode/JAIA.js?sub1=buttygirls.com&sub2=&sub3=&sub4=&sub5=&prid= HTTP/1.1
Host: alexatracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.buttygirls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:14:32 GMT
content-type: application/json; charset=UTF-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
set-cookie: trbarid=3a08def8979bc0e40326cf367525f598a6fe8ce504ed5ad32009fb0237712d77a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22trbarid%22%3Bi%3A1%3Bi%3A3972359522249552776%3B%7D; expires=Fri, 31-Jan-2025 02:14:32 GMT; Max-Age=63504000; path=/; secure; HttpOnly; SameSite=None
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uw1gSuUzbcn%2BQip%2BLsZlp5L59ysywGIfbrPt3iyfw2WTCYRMx5wS%2Bd3B1JwFNcW5gTRnxlP8ftvRmYDeZCUJMqOy3KtyyBQMaxtKBSlT9YE8sWlEVXVDmSophEyNBxkEAq4W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fdf9b5894fb500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/Ixty6-fFKeo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/Ixty6-fFKeo
IP
Hash 26fb57737bd90e0f558411eaa55a026c
c9b93dedea9cf70455316c2eca83aa7a2dad5f9f
60afa7214ad6a089e3f56de9c370ee2e634bea291c15c5c08b5abb4eeca6b946
POST /s/gts1p5/Ixty6-fFKeo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 02:14:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.buttygirls.com/esus/multi/ms/7-216324/images/android-chrome-192x192.png
404 Not Found 238 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/images/android-chrome-192x192.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /esus/multi/ms/7-216324/images/android-chrome-192x192.png HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Wt7EyO63X%2BaeM7u4V%2BwvN%2B6%2BCvazWYYYWTpSIq7Pj2twimq%2F7RjA472OCEdh6EmMpbJ5XpWaHRVNnLQ3VX3vSosRx7yJiQZfCTcAdi8I42n3np1f6T4uXJIoi9z3oiDYtoBA1c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b6ade6b521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14736
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 02:14:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14736
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 02:14:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14736
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 02:14:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f238e33-a6e3-479a-920f-92a9c7bf1a06.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f238e33-a6e3-479a-920f-92a9c7bf1a06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a3d856f57bcfd0bb18253cd77dd6541b
9d9680fb1a9232bb2b42b824dc11633666bfa31a
f2a03384e72a4d3350ee6addc49d6a507837eb195647016ea001e846eaccb0e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f238e33-a6e3-479a-920f-92a9c7bf1a06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6055
x-amzn-requestid: dd44b3ab-6248-419a-995a-f3aaf59dae77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLRhMFPYIAMF91g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cdfc6d-4df410b022dbbb55297e6ac7;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 03:18:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c02qyu1rphr_LpUAQQRaTxlNGeEl-yKmVpshfKoWlsfKWiiciJURAw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 08:45:22 GMT
age: 62950
etag: "9d9680fb1a9232bb2b42b824dc11633666bfa31a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.buttygirls.com/esus/multi/ms/7-216324/images/favicon-16x16.png
404 Not Found 238 B URL HTTP/1.1 www.buttygirls.com/esus/multi/ms/7-216324/images/favicon-16x16.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /esus/multi/ms/7-216324/images/favicon-16x16.png HTTP/1.1
Host: www.buttygirls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.buttygirls.com/esus/multi/ms/7-216324/?cep=pIK_pM2wtzQc7FM1gbhFeZskU6hDzNeXDgxiCNw1f8aMFqITjic2lJ9Nx08P9DsaRvvtqNQhxjCA60eP8jXl8aNr8uM5JrMlYC9p0AE2s9Bgcnu2ASz-u4jZRljRgkad1b09YbMuys-CACN_rplesKimARs0_sjaQYC_33MEonLLXuYktL4JYQ4Wp_RgQEuTEodd_8QWP6cypP6hNAO3fp65sd46gUzUHqBXWCS9C6h-8jFyioEjJBoOmszh5ezTgyoDaQwcH93na2eHJwVoqvY5Wga4nuD9CnMRsOvfzU5XMXDBlaHPRnOV4SFqxM1bVZIxjYZe8MlwmUd3f60LmWsO2TtFwZmur3M26kOWhcgC_nUzQKBlkY7DMz29cYON&lptoken=168b74c2789774c255af
HTTP/1.1 404 Not Found
Date: Fri, 27 Jan 2023 02:14:32 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xhGOPktS%2FYX6XwgrlV2PiR9we3NBVEWF6dioTnroemASbOpc4SA2WViDcL8eEHMflK8sqgvkvQeEGoMR%2FujKlnKXYvw%2F0NkeasDGbgq8t4ixCMVQ4anbEEqxGqgOko9iA09MCuE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fdf9b6ac41b517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b8fa26c-af88-46ea-a5c6-1122db65d6d4.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b8fa26c-af88-46ea-a5c6-1122db65d6d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3605538118d3aaef721a03d482b0f9a
2e2e770d552a05a0f24f4bbb1110266440b2bf76
1011d275125968599a8dd082810deca07e82770efad760b3f1ebf7f74ebab78e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b8fa26c-af88-46ea-a5c6-1122db65d6d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9063
x-amzn-requestid: 8eb82d16-63f8-4e6e-b9fe-1795c7703c03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIgq2EbSoAMFUwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce178-67a0958d7cd1f132605d93be;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:10:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: aTjiRrFeeC6zT_NzPDvKNs-aV__tUniMFfbwxsn1eIf3NQzXxgYETA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:47:53 GMT
age: 66399
etag: "2e2e770d552a05a0f24f4bbb1110266440b2bf76"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: 23239d1f-0228-4722-b826-40dc8c9a4af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVzDbEacIAMFZtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d23215-1604c24e272fbb657b9925cc;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:56:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -_8PZoms7W6Lvw__KsoTwL_CzjfyWChzoSWDc9yCk9zCR8cTs87oNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 16:31:35 GMT
age: 34977
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e96f3ea585b5fa8ed6446ed16e2b4b2
f90c205f370a2426dffe3c21b24bfa551b385556
6967ba25887f87200fcb39a3e6f065fd27596b2ebcf0d33a2751c655d6e724f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4272
x-amzn-requestid: 90778100-cfb9-46c5-b75d-caafc1fdbae9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEMjeEB1oAMFl8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb27af-5743a4b077fde951558d49bd;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 23:45:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ev8Pkhb87rHNaINJOl0VO5ze6SbLktZjmFANNbIOnVs74H8saNsmOg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:34:55 GMT
age: 49177
etag: "f90c205f370a2426dffe3c21b24bfa551b385556"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:15:25 GMT
age: 68347
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 869cdfba2637cc932ce387317a3c485e
51d87a5223d87c959bf27b2a825dce0a28f52ada
6dc4247dd3110836195f9962463bd8265be89633e9e589bf19955991751c26fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5669
x-amzn-requestid: 17f6235c-d495-4813-9453-407331e0dcad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZSH4fIAMFxeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3b-67ff5c7f416727670e7c3b21;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KGNpzuI2ny_1LH90atWa09SPYG7Ovolbv_KvL8nC6fUk59z-6TFsMQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 03:05:04 GMT
age: 83368
etag: "51d87a5223d87c959bf27b2a825dce0a28f52ada"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
zeniocloud.com/JAIA.js?sub1=buttygirls.com
200 OK 0 B URL HTTP/2 zeniocloud.com/JAIA.js?sub1=buttygirls.com
IP
Analyzer Verdict Alert fortinet Phishing
GET /JAIA.js?sub1=buttygirls.com HTTP/1.1
Host: zeniocloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.buttygirls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 27 Jan 2023 02:14:32 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.136.26
23.36.76.226
167.114.67.56