r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3838
Expires: Mon, 30 Jan 2023 08:29:32 GMT
Date: Mon, 30 Jan 2023 07:25:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16890
Expires: Mon, 30 Jan 2023 12:07:04 GMT
Date: Mon, 30 Jan 2023 07:25:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 06:43:11 GMT
content-type: application/json
age: 2543
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2910
Expires: Mon, 30 Jan 2023 08:14:04 GMT
Date: Mon, 30 Jan 2023 07:25:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T8pB/gqX8YaWv440GhfL9vmmblJRfd+AZNhOkIIfecU5TdosZpJ4I9EasvAVCRgL2Sg6MeUtO0E=
x-amz-request-id: CNHQ7PZAVSSMTS98
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 07:21:42 GMT
age: 232
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 07:25:34 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
sexyhotmalemodels.blogspot.de/
302 Moved Temporarily 182 B URL HTTP/1.1 sexyhotmalemodels.blogspot.de/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 953acc4bb990fe97587112ee23352daa
38a148cae6e0fc032bc206c6b89c248dfbae5c3c
ff5df973b08b3ce46c1d29071cf142a89b836f489ab8716ccc5e8e3c41cd1002
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: sexyhotmalemodels.blogspot.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://sexyhotmalemodels.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 30 Jan 2023 07:25:35 GMT
Expires: Mon, 30 Jan 2023 07:25:35 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 182
Server: GSE
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 06:41:41 GMT
age: 2634
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14121
Expires: Mon, 30 Jan 2023 11:20:56 GMT
Date: Mon, 30 Jan 2023 07:25:35 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fbwkLlR0zvMElJb6KlZ7FA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JaGzWPsTXJjbzJ/Fwvopyv0v5qQ=
sexyhotmalemodels.blogspot.com/
200 OK 29 kB URL HTTP/1.1 sexyhotmalemodels.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2706)
Hash fd62181cd0417a32c03ceb875ab5327d
bd5af6bc45321b3e68738ec10d7cc4ccf5ded5da
7e5efc3ca9fc0dc5bee8ea927b79acb28729f029d82d1e272733f962894430fe
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: sexyhotmalemodels.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 30 Jan 2023 07:25:35 GMT
Date: Mon, 30 Jan 2023 07:25:35 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 20 Oct 2022 12:06:30 GMT
ETag: W/"83fd09cede212626e069645ff82ab0b771062c5a996374f2df8c2673733ce633"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 28618
Server: GSE
www.google.com/cse/api/branding.css
301 Moved Permanently 240 B URL HTTP/1.1 www.google.com/cse/api/branding.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 45d8b9287efe893be2350ff89f991c63
aff877b245649e7f02f940b70d1fb51728782ce2
8419b15bd2324a0463f4ee81576bf262cfd32e584337586ca02fc18f68f01408
GET /cse/api/branding.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://cse.google.com/cse/api/branding.css
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 240
X-XSS-Protection: 0
Date: Mon, 30 Jan 2023 07:14:45 GMT
Expires: Mon, 30 Jan 2023 07:44:45 GMT
Cache-Control: public, max-age=1800
Content-Type: text/html; charset=UTF-8
Age: 651
www.e-referrer.com/link.js
301 Moved Permanently 0 B URL HTTP/1.1 www.e-referrer.com/link.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link.js HTTP/1.1
Host: www.e-referrer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 08:25:36 GMT
Location: https://www.e-referrer.com/link.js
Server-Timing: cf-q-config;dur=6.0000020312145e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n4tQ%2Be821f8jzbZzXo8LjAgkq2QMUcil%2FXkA8W7jHjj0K7kFqTIcnu5Wvd4%2F0BkYxlazlLMFNQ4uLZaxfoRCeieWP3mI1wPBXewNlFTAUH6KSQBiw8LvHgRSo1kCQQXGNoZ21g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918797c1fdab4fd-OSL
alt-svc: h2=":443"; ma=60
pagead2.googlesyndication.com/pagead/show_ads.js
200 OK 37 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/show_ads.js
IP
File type ASCII text, with very long lines (4131)
Hash 61e354acc82a0c64a59b99edd7d05847
f897b52bafdc6e82ac71b3bd25e1b719f70a1f0a
1d9c8b04a36cd18a13a71602171c309001c46b5abf93e3266c4d61b1768d7798
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 8686558618000113418
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 36716
X-XSS-Protection: 0
widgets.wowzio.net/widgets/jscript?wtype=simphoto&w=390&h=500&bc=000000&lc=FFFFFF&ap=yes&ps=6&sb=no&sv=3&cid=31&ef=fade&ids=42180&ti=Sexy%20Black%20Dudes
200 OK 609 B URL HTTP/1.1 widgets.wowzio.net/widgets/jscript?wtype=simphoto&w=390&h=500&bc=000000&lc=FFFFFF&ap=yes&ps=6&sb=no&sv=3&cid=31&ef=fade&ids=42180&ti=Sexy%20Black%20Dudes
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (609), with no line terminators
Hash d6c43120e472ab377e8b5f3c50dbf38c
62ef9acc37495a54862d603a7b2ae30342552190
4612334a313148cf432cfd0c98f3bfac61c06f7dfee3e3cb9dc83daf57003c98
GET /widgets/jscript?wtype=simphoto&w=390&h=500&bc=000000&lc=FFFFFF&ap=yes&ps=6&sb=no&sv=3&cid=31&ef=fade&ids=42180&ti=Sexy%20Black%20Dudes HTTP/1.1
Host: widgets.wowzio.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 609
content-type: text/html; charset=utf-8
date: Mon, 30 Jan 2023 07:25:35 GMT
server: nginx
set-cookie: sid=49f344ca-a06f-11ed-a1d7-80a46baec82d; path=/; domain=.wowzio.net; expires=Sat, 17 Feb 2091 10:39:43 GMT; max-age=2147483647; HttpOnly
www.google.com/friendconnect/script/friendconnect.js
404 Not Found 1.6 kB URL HTTP/1.1 www.google.com/friendconnect/script/friendconnect.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 8dc494040a252b9a3a9ea04255941cd6
663805a606e28589d28362cc1d8fa19a5bc56860
24d511499e91216fa0deefaf1c2875a378f83b01b170f2dfc50d27f2a4978a0a
GET /friendconnect/script/friendconnect.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1598
Date: Mon, 30 Jan 2023 07:25:36 GMT
www.google.com/reader/ui/publisher-en.js
301 Moved Permanently 233 B URL HTTP/1.1 www.google.com/reader/ui/publisher-en.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 736b567a1b70a67b06608f062431b32d
0631616a1e476a01ef1ed1819b4b3ca7ff304a6a
773f7f80897e7c3e17b6626afd340e1b2df337a280359a99a42b766c40873874
GET /reader/ui/publisher-en.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://www.google.com/reader/about/
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Mon, 30 Jan 2023 07:55:36 GMT
Cache-Control: public, max-age=1800
Server: sffe
Content-Length: 233
X-XSS-Protection: 0
www.google.com/reader/public/javascript/user/04557943967814531778/label/Gay%20feeds?n=10&callback=GRC_p(%7Bc%3A%22slate%22%2Ct%3A%22Posts%20from%20other%20great%20blogs%22%2Cs%3A%22true%22%2Cb%3A%22false%22%7D)%3Bnew%20GRC
301 Moved Permanently 233 B URL HTTP/1.1 www.google.com/reader/public/javascript/user/04557943967814531778/label/Gay%20feeds?n=10&callback=GRC_p(%7Bc%3A%22slate%22%2Ct%3A%22Posts%20from%20other%20great%20blogs%22%2Cs%3A%22true%22%2Cb%3A%22false%22%7D)%3Bnew%20GRC
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 736b567a1b70a67b06608f062431b32d
0631616a1e476a01ef1ed1819b4b3ca7ff304a6a
773f7f80897e7c3e17b6626afd340e1b2df337a280359a99a42b766c40873874
GET /reader/public/javascript/user/04557943967814531778/label/Gay%20feeds?n=10&callback=GRC_p(%7Bc%3A%22slate%22%2Ct%3A%22Posts%20from%20other%20great%20blogs%22%2Cs%3A%22true%22%2Cb%3A%22false%22%7D)%3Bnew%20GRC HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://www.google.com/reader/about/
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Mon, 30 Jan 2023 07:55:36 GMT
Cache-Control: public, max-age=1800
Server: sffe
Content-Length: 233
X-XSS-Protection: 0
sexyhotmalemodels.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 sexyhotmalemodels.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: sexyhotmalemodels.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Mon, 06 Feb 2023 07:25:36 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 29 Jan 2023 21:50:29 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 93e097027f2d53e4c41ac3a4ef1b210c
83cb79e5ced32851d1c3513e4a9ab65bc9a31e93
6bcc8888fed5f48846a37f451d0517dba26cec5cf90d72082a80ab77abf05598
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 353ac22db73d0d1f6401c9a6dae0af28
266f51bf2f05d8431e9b6ada929b1513167d5411
b8dd1137414d56fdb844922a9cfddf36e06093b863632d40332b3d9cae51f7c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Mon, 30 Jan 2023 07:25:36 GMT
expires: Mon, 30 Jan 2023 07:25:36 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 353ac22db73d0d1f6401c9a6dae0af28
266f51bf2f05d8431e9b6ada929b1513167d5411
b8dd1137414d56fdb844922a9cfddf36e06093b863632d40332b3d9cae51f7c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/1253685842-widgets.js
200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1253685842-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash b329ea3a8875a3cb1fff0b03b148b3f5
97cb465dc452e56a75e6e2caf453aba800719305
71572f07e491477cf2d6925d94658fbd5f054172291071f8675f6a4aec6dcc09
GET /static/v1/widgets/1253685842-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 01:57:07 GMT
expires: Tue, 30 Jan 2024 01:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 27 Jan 2023 00:03:44 GMT
content-type: text/javascript
age: 19709
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:27:21 GMT
expires: Fri, 26 Jan 2024 03:27:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 25 Jan 2023 14:53:31 GMT
content-type: text/css
age: 359895
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b67335a8e235eacf68e4b7f98cc5dc40
887a9b34cf2ba9371bbe8c93e362c174668cf812
1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
referer.org/list.js
200 OK 5.6 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (302)
Hash f8c8a6213fff3b85fe6fcbb2ff0f6950
0a40057c2dce8c8f0d48b38b2f84677602434eb0
fe52ddb15ee064195d87bcb98c8976b2fb961297167640a1d4a9bb754ed6552f
GET /list.js HTTP/1.1
Host: referer.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 353ac22db73d0d1f6401c9a6dae0af28
266f51bf2f05d8431e9b6ada929b1513167d5411
b8dd1137414d56fdb844922a9cfddf36e06093b863632d40332b3d9cae51f7c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/reader/about/
404 Not Found 1.6 kB URL HTTP/2 www.google.com/reader/about/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 9e8d87e047a68722df2b9d50409c5551
d91385aa8243c108d00ec0011a915c24ace0c6ce
d50798b3e9ae6b2fea48d82618cd0973a7fee89a792f633bf27a662ef92bc6ba
GET /reader/about/ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 30 Jan 2023 07:25:36 GMT
server: sffe
content-length: 1574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/reader/about/
404 Not Found 1.6 kB URL HTTP/2 www.google.com/reader/about/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 9e8d87e047a68722df2b9d50409c5551
d91385aa8243c108d00ec0011a915c24ace0c6ce
d50798b3e9ae6b2fea48d82618cd0973a7fee89a792f633bf27a662ef92bc6ba
GET /reader/about/ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 30 Jan 2023 07:25:36 GMT
server: sffe
content-length: 1574
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.statcounter.com/counter/counter_xhtml.js
200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter_xhtml.js
IP
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 27 Jan 2023 16:43:55 GMT
ETag: W/"aa70-5f341923dad0a"
Cache-Control: max-age=43200
Expires: Mon, 30 Jan 2023 18:03:53 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 4903
Server: cloudflare
CF-RAY: 7918797e0cb4b52d-OSL
www.intensedebate.com/widgets/acctComment/57143/5
301 Moved Permanently 162 B URL HTTP/1.1 www.intensedebate.com/widgets/acctComment/57143/5
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /widgets/acctComment/57143/5 HTTP/1.1
Host: www.intensedebate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.intensedebate.com/widgets/acctComment/57143/5
www.intensedebate.com/js/bloggerTemplateLinkWrapper.php?acct=e86810c997dfa04bda2574a509a1a9f8
301 Moved Permanently 162 B URL HTTP/1.1 www.intensedebate.com/js/bloggerTemplateLinkWrapper.php?acct=e86810c997dfa04bda2574a509a1a9f8
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /js/bloggerTemplateLinkWrapper.php?acct=e86810c997dfa04bda2574a509a1a9f8 HTTP/1.1
Host: www.intensedebate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.intensedebate.com/js/bloggerTemplateLinkWrapper.php?acct=e86810c997dfa04bda2574a509a1a9f8
cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
200 OK 157 B URL HTTP/1.1 cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
GET /syndication/subscriber/InsertWidget.js HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:11 GMT
etag: "63bdda4b-9d"
accept-ranges: bytes
connection: close
www.google-analytics.com/urchin.js
200 OK 6.8 kB URL HTTP/1.1 www.google-analytics.com/urchin.js
IP
Hash b2a53ddd32fa730ace44acf796ced69d
248293a9e5a5a062c17517d115a4f59396db6833
d816d84a12f8cebe9ffaaca1b804894f9e46882a6719605359db2aad44afab85
GET /urchin.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 6847
Date: Mon, 30 Jan 2023 00:57:02 GMT
Expires: Mon, 13 Feb 2023 00:57:02 GMT
Cache-Control: public, max-age=1209600
Age: 23314
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sun, 29 Jan 2023 09:56:41 GMT
Expires: Sun, 12 Feb 2023 09:56:41 GMT
Cache-Control: public, max-age=1209600
Age: 77335
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.spicypage.com/inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0
301 Moved Permanently 0 B URL HTTP/1.1 www.spicypage.com/inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0 HTTP/1.1
Host: www.spicypage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 08:25:36 GMT
Location: https://www.spicypage.com/inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IWoPtMvcr1djL5t2mKa%2FtHTH8WAEEKcsF17w6mMqSnP75W3Uyn0DSlAYnHO5ij2x%2Bx0O2nIEU34w9evuunnV7k1dHdYlzmLf1G7aipmJ9wrb5k9muKSoHk4hYivYyGN4ohq54g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918797f1b4c0b65-OSL
alt-svc: h2=":443"; ma=60
cse.google.com/cse/api/branding.css
200 OK 322 B URL HTTP/2 cse.google.com/cse/api/branding.css
IP
Hash eb44259f9eed170ffd1b7293b57ca0f8
3099cbdc7f7ac67ec5863ae5f1a669163b56c6c4
7ddb01d9a89048ea77b75c1fc966e14c3c6c3bfe5d45b5b372f3d93ccc9670f4
GET /cse/api/branding.css HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: pfe
content-length: 322
x-xss-protection: 0
x-frame-options: SAMEORIGIN
date: Mon, 30 Jan 2023 07:15:55 GMT
expires: Mon, 30 Jan 2023 07:45:55 GMT
cache-control: public, max-age=1800
age: 581
last-modified: Sat, 17 Nov 2007 23:34:50 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/images/poweredby_transparent/poweredby_FFFFFF.gif
200 OK 488 B URL HTTP/1.1 www.google.com/images/poweredby_transparent/poweredby_FFFFFF.gif
IP
File type GIF image data, version 89a, 56 x 20\012- data
Hash 7759990ff12382cab2e362e8de465c92
bf76285ae03b5544f889580113334d302f055c2b
f0e34e6156e006e95579f7fd649583a85175b331452c3cb0aac883c472cee0fe
GET /images/poweredby_transparent/poweredby_FFFFFF.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 488
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Mon, 30 Jan 2023 07:25:36 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.bestmaleblogs.com/banners/bmb_button2.gif
301 Moved Permanently 0 B URL HTTP/1.1 www.bestmaleblogs.com/banners/bmb_button2.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banners/bmb_button2.gif HTTP/1.1
Host: www.bestmaleblogs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 08:25:36 GMT
Location: https://www.gaydemon.com/directory/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aFd3fwvf0ft0tk2qX0JD2FHLSlUPErqVagjp2DYPlBIEEBlcEGemOD38ACMTquWq2flIc0Bw%2Bru6UuDHAGXRXCj4ZVFqYXTy2qegLIQRUQX7570jdz%2FdSWXwkm0oHDnVsaVO1t38mJw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918797f3f43b523-OSL
alt-svc: h2=":443"; ma=60
www.bestmaleblogs.com/banners/bmb_banner.gif
301 Moved Permanently 0 B URL HTTP/1.1 www.bestmaleblogs.com/banners/bmb_banner.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banners/bmb_banner.gif HTTP/1.1
Host: www.bestmaleblogs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 08:25:36 GMT
Location: https://www.gaydemon.com/directory/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=updSilV10dFilJBKCs1zlVQFBCw4iwrsDEKiFDgiXXG96W%2BAJ%2BnkbjiP3TcObvJmWFyAiegmgxdM2tx%2FuH3k%2BRkuBXbupIbSSaFB8n2AFeQg3YM%2FCEnSAm8hR4H0ASRy2G16n9%2BkQaI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918797f38ceb4f7-OSL
alt-svc: h2=":443"; ma=60
www.bestmaleblogs.com/banners/bmb_button1.gif
301 Moved Permanently 0 B URL HTTP/1.1 www.bestmaleblogs.com/banners/bmb_button1.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banners/bmb_button1.gif HTTP/1.1
Host: www.bestmaleblogs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 08:25:36 GMT
Location: https://www.gaydemon.com/directory/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uzf5jHv1XMAm27vm3MpUWjnIWjR%2FMwXOwH2%2B60dIakUrpuq08wmmAh9cnSAOJJXovYwR%2BDZD6yf%2FIfuo8oiQeLtIgDjZDcG%2BIcNOz%2BBN6mnH%2FjQN79Ov%2BPh2pMxnoPX6yrf6ugBrhCk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918797f3fa7b4f9-OSL
alt-svc: h2=":443"; ma=60
bp3.blogger.com/_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg
301 Moved Permanently 285 B URL HTTP/1.1 bp3.blogger.com/_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 1d6f8e582d2f5ac990004a9ab2224494
4ea26eff5fbac5cecffc75adc2c03e000600e011
57957973ad50ae07f21e49659eb4ef5e9363b100e9b9be667126f2144ac5f898
GET /_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg HTTP/1.1
Host: bp3.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://1.bp.blogspot.com/_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Wed, 01 Mar 2023 07:25:36 GMT
Cache-Control: public, max-age=2592000
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 285
X-XSS-Protection: 0
www.google.com/friendconnect/script/friendconnect.js
404 Not Found 1.6 kB URL HTTP/1.1 www.google.com/friendconnect/script/friendconnect.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 8dc494040a252b9a3a9ea04255941cd6
663805a606e28589d28362cc1d8fa19a5bc56860
24d511499e91216fa0deefaf1c2875a378f83b01b170f2dfc50d27f2a4978a0a
GET /friendconnect/script/friendconnect.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1598
Date: Mon, 30 Jan 2023 07:25:36 GMT
bp3.blogger.com/_OMLYyLC8HTo/R_KJ0ZKuQ7I/AAAAAAAAGIg/t9tNaAZK5CQ/S220/image0011.jpg
301 Moved Permanently 290 B URL HTTP/1.1 bp3.blogger.com/_OMLYyLC8HTo/R_KJ0ZKuQ7I/AAAAAAAAGIg/t9tNaAZK5CQ/S220/image0011.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 52f62cee3ed14a2fed3703ff9b51aa07
6c3c606e6d31ba3f9050a211f1b0fc97599df935
fced9f2dcbe011c0580303e806ecb4f441c32973b8ce2b84a7be8c6380a4912a
GET /_OMLYyLC8HTo/R_KJ0ZKuQ7I/AAAAAAAAGIg/t9tNaAZK5CQ/S220/image0011.jpg HTTP/1.1
Host: bp3.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://1.bp.blogspot.com/_OMLYyLC8HTo/R_KJ0ZKuQ7I/AAAAAAAAGIg/t9tNaAZK5CQ/S220/image0011.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Wed, 01 Mar 2023 07:25:36 GMT
Cache-Control: public, max-age=2592000
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 290
X-XSS-Protection: 0
bp3.blogger.com/_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg
301 Moved Permanently 297 B URL HTTP/1.1 bp3.blogger.com/_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash ed4cd2e756b5e6155a6f54697d094838
60713517780bdf83849a03084091d3aa088b6c1c
81c235523ab1a586b58164b40ba0901eab14f9075a4fa3bfbc0f649a5cf98b5b
GET /_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg HTTP/1.1
Host: bp3.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://1.bp.blogspot.com/_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Wed, 01 Mar 2023 07:25:36 GMT
Cache-Control: public, max-age=2592000
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 297
X-XSS-Protection: 0
www.blogarama.com/images/button.gif
301 Moved Permanently 171 B URL HTTP/1.1 www.blogarama.com/images/button.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e536c5996b8f3de6a397254bd5c1a8f1
259198bb9df26b8e309b1a9773fef9029d2bd9df
dd7a864eaeaf3352e31fdcfaecb72224580537deb82dfe83d5c083cfcc9537de
GET /images/button.gif HTTP/1.1
Host: www.blogarama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://blogarama.com/images/button.gif
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1O%2Bqh3EgcF4g19R5Zd3qZa265TIqoDabXQ%2F992rf5SWJLrE3g%2BhVKg9uFe08D%2BLcy1YBF7xEjvm4bn0Plbu8yBVLQ455Av%2BMDF67Pb%2F1xzkihvrlgQ%2FrZq2tqe%2BCL2qeNUdBEw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918797f3d28b51e-OSL
alt-svc: h2=":443"; ma=60
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=437a8705-f4a1-4bce-8d87-f68ef8be22df
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=437a8705-f4a1-4bce-8d87-f68ef8be22df
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=437a8705-f4a1-4bce-8d87-f68ef8be22df HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:11 GMT
etag: "63bdda4b-9d"
accept-ranges: bytes
connection: close
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=89fbf4cf-e09f-44a9-8e3c-4a50a1d2cd41
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=89fbf4cf-e09f-44a9-8e3c-4a50a1d2cd41
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=89fbf4cf-e09f-44a9-8e3c-4a50a1d2cd41 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Mon, 09 Jan 2023 20:56:33 GMT
etag: "63bc7f81-9d"
accept-ranges: bytes
connection: close
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=fdefee52-575b-4973-8b9e-309d1cbe4993
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=fdefee52-575b-4973-8b9e-309d1cbe4993
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=fdefee52-575b-4973-8b9e-309d1cbe4993 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:12 GMT
etag: "63bdda4c-9d"
accept-ranges: bytes
connection: close
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=dd745e56-5e0e-457b-95bd-cd53e721b042
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=dd745e56-5e0e-457b-95bd-cd53e721b042
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=dd745e56-5e0e-457b-95bd-cd53e721b042 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:12 GMT
etag: "63bdda4c-9d"
accept-ranges: bytes
connection: close
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=8a6646c0-a89f-43a7-81fb-4d5b354d8ba3
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=8a6646c0-a89f-43a7-81fb-4d5b354d8ba3
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=8a6646c0-a89f-43a7-81fb-4d5b354d8ba3 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Wed, 07 Mar 2018 18:30:37 GMT
etag: "5aa02fcd-9d"
accept-ranges: bytes
connection: close
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=08b57e3a-4725-4272-a7e6-970b091cf6da
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=08b57e3a-4725-4272-a7e6-970b091cf6da
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=08b57e3a-4725-4272-a7e6-970b091cf6da HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:11 GMT
etag: "63bdda4b-9d"
accept-ranges: bytes
connection: close
bp0.blogger.com/_OMLYyLC8HTo/R6dOEMI_mvI/AAAAAAAAEdc/VWWFLVs4cU0/s400/jsc-n2n-denim-sky.jpg
301 Moved Permanently 298 B URL HTTP/1.1 bp0.blogger.com/_OMLYyLC8HTo/R6dOEMI_mvI/AAAAAAAAEdc/VWWFLVs4cU0/s400/jsc-n2n-denim-sky.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 50c5569fbb17f520f5b71f6835aacdb8
4a9aa1321c95c4e97b92fa985a1f7e4bca5e33a2
f7134ad91c48808443be4c44ffe56a6b65a72e998d0af1d1845c1e58f9d884d5
GET /_OMLYyLC8HTo/R6dOEMI_mvI/AAAAAAAAEdc/VWWFLVs4cU0/s400/jsc-n2n-denim-sky.jpg HTTP/1.1
Host: bp0.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://1.bp.blogspot.com/_OMLYyLC8HTo/R6dOEMI_mvI/AAAAAAAAEdc/VWWFLVs4cU0/s400/jsc-n2n-denim-sky.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
Date: Mon, 30 Jan 2023 07:25:36 GMT
Expires: Wed, 01 Mar 2023 07:25:36 GMT
Cache-Control: public, max-age=2592000
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 298
X-XSS-Protection: 0
www.bestgayblogs.com/wp-content/uploads/2008/08/proudly.gif
404 Not Found 125 B URL HTTP/1.1 www.bestgayblogs.com/wp-content/uploads/2008/08/proudly.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 2995357b538ef792ce59b1b7cca539c4
d33d8ce38719b45d0731f075f71593351023318c
aef27e8433e35954afe1798da5bde96145b020160cc2f16b1424425253fb545b
GET /wp-content/uploads/2008/08/proudly.gif HTTP/1.1
Host: www.bestgayblogs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 125
Connection: keep-alive
Server: ip-100-74-3-24.eu-west-2.compute.internal
X-Request-Id: 8d17e801-e322-40c0-ba14-328aed443e8a
referer.org/referer.gif
200 OK 5.6 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (302)
Hash f8c8a6213fff3b85fe6fcbb2ff0f6950
0a40057c2dce8c8f0d48b38b2f84677602434eb0
fe52ddb15ee064195d87bcb98c8976b2fb961297167640a1d4a9bb754ed6552f
GET /referer.gif HTTP/1.1
Host: referer.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 07:25:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
lh3.ggpht.com/_OMLYyLC8HTo/SQ97ggb1j0I/AAAAAAAASsI/RQDT0dCT3TI/ashwood4.jpg
404 Not Found 832 B URL HTTP/1.1 lh3.ggpht.com/_OMLYyLC8HTo/SQ97ggb1j0I/AAAAAAAASsI/RQDT0dCT3TI/ashwood4.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_OMLYyLC8HTo/SQ97ggb1j0I/AAAAAAAASsI/RQDT0dCT3TI/ashwood4.jpg HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh3.ggpht.com/pukkap/SPZUW1w51OI/AAAAAAAAORA/LFpGmaAspv8/musclemodels2.jpg
404 Not Found 832 B URL HTTP/1.1 lh3.ggpht.com/pukkap/SPZUW1w51OI/AAAAAAAAORA/LFpGmaAspv8/musclemodels2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUW1w51OI/AAAAAAAAORA/LFpGmaAspv8/musclemodels2.jpg HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/pukkap/SPZUXC0R0lI/AAAAAAAAORY/iEhxNCaT1tY/sportsnakedcause2.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPZUXC0R0lI/AAAAAAAAORY/iEhxNCaT1tY/sportsnakedcause2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUXC0R0lI/AAAAAAAAORY/iEhxNCaT1tY/sportsnakedcause2.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/pukkap/SHD0m8-I-iI/AAAAAAAAJyk/xhhA7VvgLSE/agd-link-image-2.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SHD0m8-I-iI/AAAAAAAAJyk/xhhA7VvgLSE/agd-link-image-2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SHD0m8-I-iI/AAAAAAAAJyk/xhhA7VvgLSE/agd-link-image-2.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/pukkap/SPY-ZMzBV4I/AAAAAAAAOPQ/siBRi0Iku5Q/buttonslide.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPY-ZMzBV4I/AAAAAAAAOPQ/siBRi0Iku5Q/buttonslide.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-ZMzBV4I/AAAAAAAAOPQ/siBRi0Iku5Q/buttonslide.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=f2077a39-7455-429a-9722-ba39f0a23107
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=f2077a39-7455-429a-9722-ba39f0a23107
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=f2077a39-7455-429a-9722-ba39f0a23107 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Wed, 07 Mar 2018 18:30:37 GMT
etag: "5aa02fcd-9d"
accept-ranges: bytes
connection: close
www.blogthishere.com/button.png
200 OK 299 B URL HTTP/1.1 www.blogthishere.com/button.png
IP
File type PNG image data, 80 x 15, 8-bit/color RGB, non-interlaced\012- data
Hash f1f5bdb2de1dbb28ef8b647d7b187096
5a6b1641bd1f592df5de11f0b21a7ad88f4bbdd8
ff10817baaeb62598fd5af85c327a1ba9234f8b035b4379ca06501bb886cdf62
GET /button.png HTTP/1.1
Host: www.blogthishere.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Sun, 05 Mar 2017 09:52:16 GMT
ETag: "1c712-12b-549f8bbdd44ee"
Accept-Ranges: bytes
Content-Length: 299
Cache-Control: max-age=31536000
Expires: Tue, 30 Jan 2024 07:25:36 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
widgetserver.com/syndication/subscriber/InsertWidget.js?appId=765aad07-a866-4356-9b82-d661d03a98c2
200 OK 157 B URL HTTP/1.1 widgetserver.com/syndication/subscriber/InsertWidget.js?appId=765aad07-a866-4356-9b82-d661d03a98c2
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js?appId=765aad07-a866-4356-9b82-d661d03a98c2 HTTP/1.1
Host: widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: application/javascript
content-length: 157
last-modified: Mon, 09 Jan 2023 20:56:33 GMT
etag: "63bc7f81-9d"
accept-ranges: bytes
connection: close
lh4.ggpht.com/pukkap/SPY-ZG4hGHI/AAAAAAAAOPI/hZCjlhNQmOM/buttongoss.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPY-ZG4hGHI/AAAAAAAAOPI/hZCjlhNQmOM/buttongoss.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-ZG4hGHI/AAAAAAAAOPI/hZCjlhNQmOM/buttongoss.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/pukkap/SLQ-6uFlqSI/AAAAAAAAMNM/YRy64CppMmI/bent14_100x50.gif
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SLQ-6uFlqSI/AAAAAAAAMNM/YRy64CppMmI/bent14_100x50.gif
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SLQ-6uFlqSI/AAAAAAAAMNM/YRy64CppMmI/bent14_100x50.gif HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
www.queerlisting.com/images/banners/linkback01.jpg
404 Not Found 9 B URL HTTP/1.1 www.queerlisting.com/images/banners/linkback01.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /images/banners/linkback01.jpg HTTP/1.1
Host: www.queerlisting.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Mon, 30 Jan 2023 07:25:36 GMT
server: nginx
set-cookie: sid=4a781cd6-a06f-11ed-992f-80a4cbbad92c; path=/; domain=.queerlisting.com; expires=Sat, 17 Feb 2091 10:39:43 GMT; max-age=2147483647; HttpOnly
lh4.ggpht.com/pukkap/SPY-ZhMzmWI/AAAAAAAAOPg/6Xcoq6mp1R8/buttonsmdvids.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPY-ZhMzmWI/AAAAAAAAOPg/6Xcoq6mp1R8/buttonsmdvids.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-ZhMzmWI/AAAAAAAAOPg/6Xcoq6mp1R8/buttonsmdvids.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh6.ggpht.com/pukkap/SK3b7Q-DJyI/AAAAAAAAMI4/7kitXvN4JQs/gaymoney2.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/pukkap/SK3b7Q-DJyI/AAAAAAAAMI4/7kitXvN4JQs/gaymoney2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SK3b7Q-DJyI/AAAAAAAAMI4/7kitXvN4JQs/gaymoney2.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh6.ggpht.com/_OMLYyLC8HTo/STPiAfblq4I/AAAAAAAAULA/PA_u8nuZ8kk/TOOLBAROWN.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/_OMLYyLC8HTo/STPiAfblq4I/AAAAAAAAULA/PA_u8nuZ8kk/TOOLBAROWN.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_OMLYyLC8HTo/STPiAfblq4I/AAAAAAAAULA/PA_u8nuZ8kk/TOOLBAROWN.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:36 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh6.ggpht.com/pukkap/SPZAlf52CjI/AAAAAAAAOQQ/qkBr1xgiCbA/buttongayguide.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/pukkap/SPZAlf52CjI/AAAAAAAAOQQ/qkBr1xgiCbA/buttongayguide.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZAlf52CjI/AAAAAAAAOQQ/qkBr1xgiCbA/buttongayguide.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh6.ggpht.com/pukkap/SPY-ZmOB74I/AAAAAAAAOPo/1gPEupNSGA4/buttonmodels.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/pukkap/SPY-ZmOB74I/AAAAAAAAOPo/1gPEupNSGA4/buttonmodels.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-ZmOB74I/AAAAAAAAOPo/1gPEupNSGA4/buttonmodels.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh6.ggpht.com/pukkap/SPY-ZTaO6KI/AAAAAAAAOPY/CPX9ybnnNmY/buttonsmdudes.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/pukkap/SPY-ZTaO6KI/AAAAAAAAOPY/CPX9ybnnNmY/buttonsmdudes.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-ZTaO6KI/AAAAAAAAOPY/CPX9ybnnNmY/buttonsmdudes.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
i52.photobucket.com/albums/g7/vinayak06/BetaBlog4Dummies150x50.gif
301 Moved Permanently 167 B URL HTTP/1.1 i52.photobucket.com/albums/g7/vinayak06/BetaBlog4Dummies150x50.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/g7/vinayak06/BetaBlog4Dummies150x50.gif HTTP/1.1
Host: i52.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i52.photobucket.com/albums/g7/vinayak06/BetaBlog4Dummies150x50.gif
X-Cache: Redirect from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TDnzOKyfpFWPkDgWo6keX0jIVSZ3biJlEFOcgO9ezVGVrotADPlkEA==
Vary: Origin
lh6.ggpht.com/pukkap/SPZUW-mk8yI/AAAAAAAAORI/FdEJg9BBXuo/quentin2.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/pukkap/SPZUW-mk8yI/AAAAAAAAORI/FdEJg9BBXuo/quentin2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUW-mk8yI/AAAAAAAAORI/FdEJg9BBXuo/quentin2.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
www.latinboyz.com/images/banner160x232d.jpg
301 Moved Permanently 341 B URL HTTP/1.1 www.latinboyz.com/images/banner160x232d.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 31a5cf9ca3aff8b1a2ab2521792efdc1
e456579da49fa39d392d61ae417f45b492814371
81b44032d6fd2fb4f3e0be6f841a15cb40b77ede4de73b191ff17be01e6edb2a
GET /images/banner160x232d.jpg HTTP/1.1
Host: www.latinboyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: Apache/2.4.6 (CentOS)
Location: https://www.latinboyz.com/images/banner160x232d.jpg
Content-Length: 341
Connection: close
Content-Type: text/html; charset=iso-8859-1
lh5.ggpht.com/_OMLYyLC8HTo/SSBEUR2rSLI/AAAAAAAATU0/EtZma3bD9sI/next_hot_model.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/_OMLYyLC8HTo/SSBEUR2rSLI/AAAAAAAATU0/EtZma3bD9sI/next_hot_model.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_OMLYyLC8HTo/SSBEUR2rSLI/AAAAAAAATU0/EtZma3bD9sI/next_hot_model.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh5.ggpht.com/pukkap/SPY-3H6677I/AAAAAAAAOPw/w7YMDDTINDg/buttonsports.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPY-3H6677I/AAAAAAAAOPw/w7YMDDTINDg/buttonsports.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-3H6677I/AAAAAAAAOPw/w7YMDDTINDg/buttonsports.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
www.linkreferral.com/images/linkreferal/linkbutton.gif
404 Not Found 231 B URL HTTP/1.1 www.linkreferral.com/images/linkreferal/linkbutton.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 93f34028d003c9e64874abbb21743cea
5f3f41ef614e3600996158934deb0b72b48e5c6c
2d3dba476391f322c5f43acb52b82ba60d71084c773bb1524c13c6bf873015bd
GET /images/linkreferal/linkbutton.gif HTTP/1.1
Host: www.linkreferral.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 231
Connection: keep-alive
lh5.ggpht.com/pukkap/SPZUK77nD4I/AAAAAAAAOQ4/Qrn6bzTbOx8/jocks2.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPZUK77nD4I/AAAAAAAAOQ4/Qrn6bzTbOx8/jocks2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUK77nD4I/AAAAAAAAOQ4/Qrn6bzTbOx8/jocks2.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh5.ggpht.com/pukkap/SPZUKBSK4GI/AAAAAAAAOQg/slt4VK3f_Gg/blackwhite2.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPZUKBSK4GI/AAAAAAAAOQg/slt4VK3f_Gg/blackwhite2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUKBSK4GI/AAAAAAAAOQg/slt4VK3f_Gg/blackwhite2.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
simpletricksblog.googlepages.com/blogger-widgets.gif
301 Moved Permanently 262 B URL HTTP/1.1 simpletricksblog.googlepages.com/blogger-widgets.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 06dc239503f8a2f4f0eee7e9de0841d4
03d4997361bc49b4ea6a42766ca60568a8c2e50f
21758435f548db3d55408612180952ecca3b105d98e8dc8a0563eb62ef688cda
GET /blogger-widgets.gif HTTP/1.1
Host: simpletricksblog.googlepages.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: http://sites.google.com/site/simpletricksblog/blogger-widgets.gif
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 262
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.ggpht.com/pukkap/SPZUJ-YDC2I/AAAAAAAAOQY/ySGZ8dKpfnk/black2.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPZUJ-YDC2I/AAAAAAAAOQY/ySGZ8dKpfnk/black2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUJ-YDC2I/AAAAAAAAOQY/ySGZ8dKpfnk/black2.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
track.hunkdujour.com/hdjtoday250.jpg
404 Not Found 4.9 kB URL HTTP/1.1 track.hunkdujour.com/hdjtoday250.jpg
IP
ASN #203 CENTURYLINK-LEGACY-LVLT-203
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (365)
Hash a2c4d9fe4c20248fc810c808e3301058
75ae85834a58d722c61c5cfa191a656a2f92acca
3681699138790a3948976792160676b46deaa54c97fe6f13af510ab6332bddce
GET /hdjtoday250.jpg HTTP/1.1
Host: track.hunkdujour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Length: 4861
lh5.ggpht.com/pukkap/SPY-3LmypCI/AAAAAAAAOP4/bqc5U4oxKRI/buttoncelebs.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPY-3LmypCI/AAAAAAAAOP4/bqc5U4oxKRI/buttoncelebs.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-3LmypCI/AAAAAAAAOP4/bqc5U4oxKRI/buttoncelebs.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
track.hunkdujour.com/hdjtoday150.jpg
404 Not Found 4.9 kB URL HTTP/1.1 track.hunkdujour.com/hdjtoday150.jpg
IP
ASN #203 CENTURYLINK-LEGACY-LVLT-203
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (365)
Hash 0b079200b02299461053d0c4fa64f751
8241ee07d475ecc64835f782684e19b3b5081617
48c2b3ca58b42d7068cdd77ed8d699887b69a9fbf391531dffd23647ca931f38
GET /hdjtoday150.jpg HTTP/1.1
Host: track.hunkdujour.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Length: 4861
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.allamericanguys.com/images/aagbanners/aagverticalban2.jpg
301 Moved Permanently 162 B URL HTTP/1.1 www.allamericanguys.com/images/aagbanners/aagverticalban2.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /images/aagbanners/aagverticalban2.jpg HTTP/1.1
Host: www.allamericanguys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.allamericanguys.com/images/aagbanners/aagverticalban2.jpg
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AHqJN%2BpFhhUrnDSMTN5o65UBUqVQ04Xuym9zyLcCboDVDkyyABn5KQiT5VDIRbTZO%2Fdg7Yo4hTmNYUECoiYlQg2Xk6uBA1SeX0O5GjDXobGt6Ao6Y9tUgjt%2FUluWv33mSNpNVDMcODX1Pg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791879834dd70b02-OSL
alt-svc: h2=":443"; ma=60
lh4.ggpht.com/pukkap/SPZUXYLEqXI/AAAAAAAAORg/BywbI7vmI50/ulisses2.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPZUXYLEqXI/AAAAAAAAORg/BywbI7vmI50/ulisses2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUXYLEqXI/AAAAAAAAORg/BywbI7vmI50/ulisses2.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/_OMLYyLC8HTo/Sk0B1Bh2IbI/AAAAAAAAnbQ/a9T-f1GnsxU/blogads-blog-button2.png
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/_OMLYyLC8HTo/Sk0B1Bh2IbI/AAAAAAAAnbQ/a9T-f1GnsxU/blogads-blog-button2.png
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_OMLYyLC8HTo/Sk0B1Bh2IbI/AAAAAAAAnbQ/a9T-f1GnsxU/blogads-blog-button2.png HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/pukkap/SPZUKS_kw6I/AAAAAAAAOQw/JJDTsnfSpmU/james%20e2.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPZUKS_kw6I/AAAAAAAAOQw/JJDTsnfSpmU/james%20e2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUKS_kw6I/AAAAAAAAOQw/JJDTsnfSpmU/james%20e2.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh4.ggpht.com/pukkap/SPZUXLPpzLI/AAAAAAAAORQ/0ZpURkos5bU/sports%20celebs2.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SPZUXLPpzLI/AAAAAAAAORQ/0ZpURkos5bU/sports%20celebs2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUXLPpzLI/AAAAAAAAORQ/0ZpURkos5bU/sports%20celebs2.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 279 B IP
Hash daa235843c8e95868cc1751f8187cb16
3f9d7814b8831c8f10f943d59d6d67c3b9013af7
85a5ea057e9c7607079ef1b2face3e5d7150cd34b51ed019c2e6fc3c9dba6600
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2602
Cache-Control: max-age=164184
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Etag: "63d7451f-117"
Expires: Wed, 01 Feb 2023 05:02:01 GMT
Last-Modified: Mon, 30 Jan 2023 04:18:39 GMT
Server: ECS (amb/6BB3)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash daa235843c8e95868cc1751f8187cb16
3f9d7814b8831c8f10f943d59d6d67c3b9013af7
85a5ea057e9c7607079ef1b2face3e5d7150cd34b51ed019c2e6fc3c9dba6600
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3171
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Last-Modified: Mon, 30 Jan 2023 06:32:46 GMT
Server: ECS (amb/6BA0)
X-Cache: HIT
Content-Length: 279
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202301230101/show_ads_impl_with_ama_fy2021.js?client=pub-4081450217422511&plah=sexyhotmalemodels.blogspot.com&bust=31071854
200 OK 121 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202301230101/show_ads_impl_with_ama_fy2021.js?client=pub-4081450217422511&plah=sexyhotmalemodels.blogspot.com&bust=31071854
IP
File type ASCII text, with very long lines (4056)
Size 121 kB (121169 bytes)
Hash 634b679a2f8a8d883d9cf6abe5f8fc40
aa257535404f88b36f61f47a0bfef893a902866f
0ee50cf3622f3e5738cf36cd72980c0c1260f2751991db6cf2cc4d457cc7e370
GET /pagead/managed/js/adsense/m202301230101/show_ads_impl_with_ama_fy2021.js?client=pub-4081450217422511&plah=sexyhotmalemodels.blogspot.com&bust=31071854 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 30 Jan 2023 07:25:37 GMT
expires: Mon, 30 Jan 2023 07:25:37 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 6342740724340455885
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 121169
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh4.ggpht.com/pukkap/SP84NB0wB1I/AAAAAAAASTE/UYOVTcS9G9I/sports.jpg
404 Not Found 832 B URL HTTP/1.1 lh4.ggpht.com/pukkap/SP84NB0wB1I/AAAAAAAASTE/UYOVTcS9G9I/sports.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SP84NB0wB1I/AAAAAAAASTE/UYOVTcS9G9I/sports.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 5c5bc701375ee726e789d906137c3327
82ae36f943c89e5b60c12f2b09ab2e6b866b3c75
6efceb2ae05906e09732571d3e9a00ede94c80404ca0c99a51cc498497c9012b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3297
Cache-Control: max-age=154123
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Etag: "63d71b1b-1d7"
Expires: Wed, 01 Feb 2023 02:14:20 GMT
Last-Modified: Mon, 30 Jan 2023 01:19:23 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
lh6.ggpht.com/pukkap/SKxm-Ey1g5I/AAAAAAAAMGg/uRhHATWHBQ4/toolb.jpg
404 Not Found 832 B URL HTTP/1.1 lh6.ggpht.com/pukkap/SKxm-Ey1g5I/AAAAAAAAMGg/uRhHATWHBQ4/toolb.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SKxm-Ey1g5I/AAAAAAAAMGg/uRhHATWHBQ4/toolb.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh5.ggpht.com/pukkap/SPY-3U7ls1I/AAAAAAAAOQA/90bOpDhnPSo/buttonblack.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPY-3U7ls1I/AAAAAAAAOQA/90bOpDhnPSo/buttonblack.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPY-3U7ls1I/AAAAAAAAOQA/90bOpDhnPSo/buttonblack.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh5.ggpht.com/pukkap/SPZUKB8yjSI/AAAAAAAAOQo/hdo-VE9iELA/candid%20jocks2.jpg
404 Not Found 832 B URL HTTP/1.1 lh5.ggpht.com/pukkap/SPZUKB8yjSI/AAAAAAAAOQo/hdo-VE9iELA/candid%20jocks2.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /pukkap/SPZUKB8yjSI/AAAAAAAAOQo/hdo-VE9iELA/candid%20jocks2.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
img221.imageshack.us/img221/5033/bonerlz8.jpg
404 Not Found 168 B URL HTTP/1.1 img221.imageshack.us/img221/5033/bonerlz8.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img221/5033/bonerlz8.jpg HTTP/1.1
Host: img221.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d83fc6bb75b95eb12af629f45cba9b5
185e2f519542042f585b9feb8d8f056e47247a73
9d3cddfce0486a563b9d5a9d8d04e3f1b1546095188d095182bd3b2d1d36f53c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Server: ECS (amb/6B93)
Content-Length: 279
blogarama.com/images/button.gif
301 Moved Permanently 4.6 kB URL HTTP/2 blogarama.com/images/button.gif
IP
Hash d2316a2a28811c588d8be9a7842977f0
fadc43b061a9caa53f96015a691450d0168b7364
35081fde06b974113aecbd5d6838ef71266160480b916d1a55b9b7d63d6ce6d6
GET /images/button.gif HTTP/1.1
Host: blogarama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 30 Jan 2023 07:25:37 GMT
content-type: text/html
location: https://www.blogarama.com/images/button.gif
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DEQaJ%2B5AtcTH0BrhH675gmQAvtD2o7kzdxcIp7RgboxVGxSA%2FqUcD%2F5YphwA8Q5Bo5B%2FSp24DYX%2BdYQhe%2FcWt86dw2%2FGBmJckFwKTGuxH1J7frLf4Fd1OQId2PpLK6%2FT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79187984acc5fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img137.imageshack.us/img137/7204/googlelogode0.png
404 Not Found 168 B URL HTTP/1.1 img137.imageshack.us/img137/7204/googlelogode0.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img137/7204/googlelogode0.png HTTP/1.1
Host: img137.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img75.imageshack.us/img75/1959/frenchvw7.jpg
404 Not Found 168 B URL HTTP/1.1 img75.imageshack.us/img75/1959/frenchvw7.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img75/1959/frenchvw7.jpg HTTP/1.1
Host: img75.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 30 Jan 2023 07:25:37 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash daa235843c8e95868cc1751f8187cb16
3f9d7814b8831c8f10f943d59d6d67c3b9013af7
85a5ea057e9c7607079ef1b2face3e5d7150cd34b51ed019c2e6fc3c9dba6600
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=161582
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Etag: "63d7451f-117"
Expires: Wed, 01 Feb 2023 04:18:39 GMT
Last-Modified: Mon, 30 Jan 2023 04:18:39 GMT
Server: nginx
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07dcea82ca0677d77347c58bcd943425
b0882a71b171ddf5c333f71151db2dd4a80e4c39
b6005a8ac35ada7bfc816a964f9af962c0835b041e63466b0a18a42696786b57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypal.com/en_GB/i/scr/pixel.gif
301 Moved Permanently 20 B URL HTTP/2 www.paypal.com/en_GB/i/scr/pixel.gif
IP
Hash 163be0a88c70ca629fd516dbaadad96a
c8830ccf3a863e489ca37f4da572bad0e05d077b
ac73670af3abed54ac6fb4695131f4099be9fbe39d6076c5d0264a6bbdae9d83
GET /en_GB/i/scr/pixel.gif HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-encoding: gzip
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Mon, 30 Jan 2023 07:25:37 GMT
dc: ccg11-origin-www-1.paypal.com
location: https://www.paypalobjects.com/en_GB/i/scr/pixel.gif
paypal-debug-id: 037404b371a47
server: ECAcc (frc/4D04)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: ts=vreXpYrS%3D1769757937%26vteXpYrS%3D1675065337%26vr%3D01912fa11860a2d1f3d4ed4dfd9e514e%26vt%3D01912fa11860a2d1f3d4ed4dfd9e514d%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 29 Jan 2026 07:25:37 GMT; HttpOnly; Secure
ts_c=vr%3D01912fa11860a2d1f3d4ed4dfd9e514e%26vt%3D01912fa11860a2d1f3d4ed4dfd9e514d; Path=/; Domain=paypal.com; Expires=Thu, 29 Jan 2026 07:25:37 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000037404b371a47-68247108f912bfaa-01
vary: Accept-Encoding
content-length: 20
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07dcea82ca0677d77347c58bcd943425
b0882a71b171ddf5c333f71151db2dd4a80e4c39
b6005a8ac35ada7bfc816a964f9af962c0835b041e63466b0a18a42696786b57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3630
Expires: Mon, 30 Jan 2023 08:26:07 GMT
Date: Mon, 30 Jan 2023 07:25:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07dcea82ca0677d77347c58bcd943425
b0882a71b171ddf5c333f71151db2dd4a80e4c39
b6005a8ac35ada7bfc816a964f9af962c0835b041e63466b0a18a42696786b57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3630
Expires: Mon, 30 Jan 2023 08:26:07 GMT
Date: Mon, 30 Jan 2023 07:25:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:00:38 GMT
age: 33899
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/arrow_dropdown.gif
200 OK 141 B URL HTTP/2 resources.blogblog.com/img/widgets/arrow_dropdown.gif
IP
File type GIF image data, version 89a, 13 x 10\012- data
Hash 2964a07d60a4e76b299130fb1b4115f6
3b72dcc19f3ad685513eaba612e07e0ed495f2e1
28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 01:45:22 GMT
expires: Thu, 02 Feb 2023 01:45:22 GMT
cache-control: public, max-age=604800
last-modified: Wed, 25 Jan 2023 21:56:21 GMT
content-type: image/gif
age: 366015
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 546f1cb9f94ea553ae884a6f50c6bd3d
fd08d9841bcd8864aaf2e5d93ca61b31246b6db5
5aba48ac6c65e371c6c1aeee43f97670f196d3a3933b9f5812a67be90b7dbdfa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5764
x-amzn-requestid: 33ebf979-ba40-451e-bbdb-3ee4a9dc07ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhksyGRVoAMF5UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7eb-55fcbb4d6d88dbf758409801;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X3lzViVGoynSgoeenp6EIU2E3FMSRlKNGOy73pIOAASV11hOk2B4UA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:27 GMT
age: 33250
etag: "fd08d9841bcd8864aaf2e5d93ca61b31246b6db5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
resources.blogblog.com/img/navbar/icons_gray.png
200 OK 837 B URL HTTP/2 resources.blogblog.com/img/navbar/icons_gray.png
IP
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 1461584f884ab0bc93675f210b9d2b82
f08ac0baa04a83a5fef44184160a1ba8cd37d75b
f31a100802a7d8a871d3e85a986f98fb49ed4b7802369b6d92e25d5ca7d3f58c
GET /img/navbar/icons_gray.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 837
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 14:55:28 GMT
expires: Wed, 01 Feb 2023 14:55:28 GMT
cache-control: public, max-age=604800
last-modified: Wed, 25 Jan 2023 13:51:16 GMT
content-type: image/png
age: 405009
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 435598df0723ba8070784ee6a8d6de8b
0dab67801b42d738a5074ec3f0489f04c5e6552c
05339073fff5fe4213a38505242c577f579aba68d5c249e8bac10b03d379a2dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10616
x-amzn-requestid: 809aadb4-f948-41a5-82bc-84a520a5689a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEZIIAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-2c659eae4d513b433aa749e3;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pzTV9rIn345DR4kpnePsLi7muCptJ5Ivrs25Yanl_z6A5nsxaiXyNw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 34408
etag: "0dab67801b42d738a5074ec3f0489f04c5e6552c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 34408
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon_feed12.png
200 OK 500 B URL HTTP/2 resources.blogblog.com/img/icon_feed12.png
IP
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 44e7355a788fd1082deff0018883758e
50e3a28a44978e85d13c30522e0c71c8d0b24675
3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
GET /img/icon_feed12.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:42:18 GMT
expires: Wed, 01 Feb 2023 19:42:18 GMT
cache-control: public, max-age=604800
last-modified: Wed, 25 Jan 2023 14:53:31 GMT
content-type: image/png
age: 387799
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83495dde-218f-4893-8556-3013e3f83f78.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83495dde-218f-4893-8556-3013e3f83f78.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8901f99d8e3001e442c887f89e2e650
a61875fcee6c09087462f0443286482d903725bc
d3a69a5bce1852c464755452d7f5a88f0d20fbed14b9f16ac6f539d4d1bfdb21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83495dde-218f-4893-8556-3013e3f83f78.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5960
x-amzn-requestid: 313f5526-984b-4224-b321-732fe5ae5a7d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkl0HimoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-430032d00080eff464e4d574;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TiZDGG_JsgbKWvLfQn_uioEKmxzYKKV8cT9wJ2PntoNPb4r1a2YKtg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:33 GMT
age: 34204
etag: "a61875fcee6c09087462f0443286482d903725bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-netvibes.png
200 OK 1.4 kB URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-netvibes.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash c52a5f4ecb6be5d7e93b23ef4122ee4e
4e698a5f455daf3a8ea1e219b1998079f0546716
71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 21:58:45 GMT
expires: Tue, 31 Jan 2023 21:58:45 GMT
cache-control: public, max-age=604800
last-modified: Tue, 24 Jan 2023 02:55:46 GMT
content-type: image/png
age: 466012
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3630
Expires: Mon, 30 Jan 2023 08:26:07 GMT
Date: Mon, 30 Jan 2023 07:25:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3630
Expires: Mon, 30 Jan 2023 08:26:07 GMT
Date: Mon, 30 Jan 2023 07:25:37 GMT
Connection: keep-alive
sites.google.com/site/simpletricksblog/blogger-widgets.gif
302 Moved Temporarily 198 B URL HTTP/1.1 sites.google.com/site/simpletricksblog/blogger-widgets.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ad2b0076b32f493b550c7dfb7de160a4
593dab6d94c726a896e61471866e57b20c7ca50e
05cf9d61ef9525c992b548168706f9e80baa86325c897545dd96a2663d1de23b
GET /site/simpletricksblog/blogger-widgets.gif HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
HTTP/1.1 302 Moved Temporarily
Location: https://sites.google.com/site/simpletricksblog/blogger-widgets.gif
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 30 Jan 2023 07:25:37 GMT
Expires: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 198
Server: GSE
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 20:46:17 GMT
age: 38360
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-yahoo.png
200 OK 580 B URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-yahoo.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash 79f602b6ac18bee79b4e2353a6674010
28accf82263aa1a11bb821439d4d185865662530
bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 09:52:10 GMT
expires: Fri, 03 Feb 2023 09:52:10 GMT
cache-control: public, max-age=604800
last-modified: Fri, 27 Jan 2023 02:05:26 GMT
content-type: image/png
age: 250407
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg
404 Not Found 832 B URL HTTP/2 1.bp.blogspot.com/_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_OMLYyLC8HTo/R_KbHZKuQ-I/AAAAAAAAGJA/NpFg8Q5CIkc/S660/5340.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Mon, 30 Jan 2023 07:25:37 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg
404 Not Found 832 B URL HTTP/2 1.bp.blogspot.com/_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_OMLYyLC8HTo/SBc3natt_MI/AAAAAAAAHAk/-xL_z_GUut0/s400/banner_gs_square.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Mon, 30 Jan 2023 07:25:37 GMT
server: fife
content-length: 832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 90de16464f10c0d0045c388ceaae478b
55f1f0c7d13bf9d1593346c155a89581b1e8cbbc
adea062c4a91459eca0de051deb08f90fba70f7e641a5a2f0223744b50db65d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ADEA062C4A91459ECA0DE051DEB08F90FBA70F7E641A5A2F0223744B50DB65D5"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7138
Expires: Mon, 30 Jan 2023 09:24:35 GMT
Date: Mon, 30 Jan 2023 07:25:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3cdf7a37df5fd660125c11f6c7f44064
929c5ec370ad00ff0508f86174d450407ac680bd
22ffbbc922da324c956478cfd8cb5bcc269831ac5c85e22ef6ecdd69e3512a7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 07:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 699120ed16bd3838cea05927192b0a3b
86866efb92219d3605ad8e9b99ed623bd128317f
7bbd66dcd3892874cd61e3eb55087def0c73c150d5c4c7388fe5a23a4042f52a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "7BBD66DCD3892874CD61E3EB55087DEF0C73C150D5C4C7388FE5A23A4042F52A"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21524
Expires: Mon, 30 Jan 2023 13:24:22 GMT
Date: Mon, 30 Jan 2023 07:25:38 GMT
Connection: keep-alive
cdn.widgetserver.com/
200 OK 18 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (46372)
Hash 9dc35f256cea92adeee8759a9a92ee83
d0a6aae9d47f673e59f873f4cf1f45f1c16d7acf
9791f36ca8d9beea5a0cae399fbea4136ea5bfde44616fa63d03d62797ce93ce
GET / HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:38 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close
cdn.widgetserver.com/?gp=1&js=1&uuid=1675063538.0011468069&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9zZXh5aG90bWFsZW1vZGVscy5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
302 Found 0 B URL HTTP/1.1 cdn.widgetserver.com/?gp=1&js=1&uuid=1675063538.0011468069&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9zZXh5aG90bWFsZW1vZGVscy5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?gp=1&js=1&uuid=1675063538.0011468069&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9zZXh5aG90bWFsZW1vZGVscy5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0= HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.widgetserver.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Mon, 30 Jan 2023 07:25:38 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.widgetserver.com/?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 1:4.32;70:0.00
x-mtm-rd: 0.35
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjZG4ud2lkZ2V0c2VydmVyLmNvbSIsImh0dHA6Ly93d3cxLndpZGdldHNlcnZlci5jb20vP3RtPTEmc3ViaWQ0PTE2NzUwNjM1MzguMDI3Mzc5MDAwMCZLVzE9RXVyb3BlJTIwRGVkaWNhdGVkJTIwU2VydmVycyZLVzI9Tm9yd2F5JTIwRGVkaWNhdGVkJTIwU2VydmVycyZLVzM9T3NsbyUyMENvdW50eSUyMERlZGljYXRlZCUyMFNlcnZlcnMmS1c0PU9zbG8lMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJktXNT1DdXN0b20lMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJnNlYXJjaGJveD0wJmJhY2tmaWxsPTAiLDEsIjIwMjMtMDEtMzAgMDc6MjU6MzgiLDEsIjE2NzUwNjM1MzguMDI3Mzc5MDAwMCIsMSxudWxsLG51bGxd:1pMOXq:41rWpWU3jvBxeRxLjYmis-76qKo; expires=Mon, 30-Jan-2023 08:25:38 GMT; Max-Age=3600; Path=/
connection: close
www1.widgetserver.com/?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
200 OK 2.7 kB URL HTTP/1.1 www1.widgetserver.com/?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2646)
Hash ad32220c49d1a4966806398ecc4aaa6c
31a516559dc1cd4db0947cdde31eeaa5f4dfb3e8
1a7b7e5a5283d00beb9fdcd5ddd4f52b1ee1cbd429b2c90ac5a93d1c7a5cafc4
GET /?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0 HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 07:25:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_jlLoEUA3YX0SucfRfkJD2h1Wdt172H2uBcoNwPCtTdifBMONmIyjT/Wmw1ntJgBcOK/FbgLCJZIGjLlvDdzF2Q==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
200 OK 1.1 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (468)
Hash a66b149a7ebc798955373415d683f32a
15ceaba8cfae8368600620ae97aa26ae7331d626
036c94653e84e6078c087abeb3ac8804491d27b27938839ae3df42b31e2238d9
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1096
Connection: keep-alive
Server: nginx
Date: Mon, 30 Jan 2023 05:23:22 GMT
Last-Modified: Mon, 23 Jan 2023 11:12:07 GMT
Accept-Ranges: bytes
ETag: "63ce6b87-448"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Nf17cnJzTbeg4952BQ2E3E6B5-WdGX5XIOqyJ98Sym1m9-GIQCb3Ug==
Age: 7337
www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY3NTA2MzUzOC45NTM6ZjU0MGUxOGJmODVlMDE2Y2EwNTI2ODRmYTY3ZDFjOGI3NzE0MTNiZGI4MjgzZmJmZDVhMTlhODFhZjgyZWJkNjo2M2Q3NzBmMmU4YWEx
200 OK 20 B URL HTTP/1.1 www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY3NTA2MzUzOC45NTM6ZjU0MGUxOGJmODVlMDE2Y2EwNTI2ODRmYTY3ZDFjOGI3NzE0MTNiZGI4MjgzZmJmZDVhMTlhODFhZjgyZWJkNjo2M2Q3NzBmMmU4YWEx
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY3NTA2MzUzOC45NTM6ZjU0MGUxOGJmODVlMDE2Y2EwNTI2ODRmYTY3ZDFjOGI3NzE0MTNiZGI4MjgzZmJmZDVhMTlhODFhZjgyZWJkNjo2M2Q3NzBmMmU4YWEx HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 07:25:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.widgetserver.com/favicon.ico
200 OK 0 B URL HTTP/1.1 www1.widgetserver.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 07:25:40 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
www1.widgetserver.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY3NTA2MzUzOC45NTM6ZjU0MGUxOGJmODVlMDE2Y2EwNTI2ODRmYTY3ZDFjOGI3NzE0MTNiZGI4MjgzZmJmZDVhMTlhODFhZjgyZWJkNjo2M2Q3NzBmMmU4YWEx&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2M2Q3NzBmMmU4YTg5fHx8MTY3NTA2MzUzOS4yMzQyfDBmYmFlZTc3NmFlODMzZjNkMjdhYmU2MWEzYWNiNzQ1NWFiOGJmYjV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzFNRFl6TlRNNExqQXlOek0zT1RBd01EQWlmUT09fGRlYzYzMmQ3MjJhODA5MTZkMDcwODM3MWJmMjQ2YTA4NjRhMDcyMTJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off
200 OK 20 B URL HTTP/1.1 www1.widgetserver.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY3NTA2MzUzOC45NTM6ZjU0MGUxOGJmODVlMDE2Y2EwNTI2ODRmYTY3ZDFjOGI3NzE0MTNiZGI4MjgzZmJmZDVhMTlhODFhZjgyZWJkNjo2M2Q3NzBmMmU4YWEx&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2M2Q3NzBmMmU4YTg5fHx8MTY3NTA2MzUzOS4yMzQyfDBmYmFlZTc3NmFlODMzZjNkMjdhYmU2MWEzYWNiNzQ1NWFiOGJmYjV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzFNRFl6TlRNNExqQXlOek0zT1RBd01EQWlmUT09fGRlYzYzMmQ3MjJhODA5MTZkMDcwODM3MWJmMjQ2YTA4NjRhMDcyMTJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY3NTA2MzUzOC45NTM6ZjU0MGUxOGJmODVlMDE2Y2EwNTI2ODRmYTY3ZDFjOGI3NzE0MTNiZGI4MjgzZmJmZDVhMTlhODFhZjgyZWJkNjo2M2Q3NzBmMmU4YWEx&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2M2Q3NzBmMmU4YTg5fHx8MTY3NTA2MzUzOS4yMzQyfDBmYmFlZTc3NmFlODMzZjNkMjdhYmU2MWEzYWNiNzQ1NWFiOGJmYjV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzFNRFl6TlRNNExqQXlOek0zT1RBd01EQWlmUT09fGRlYzYzMmQ3MjJhODA5MTZkMDcwODM3MWJmMjQ2YTA4NjRhMDcyMTJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1675063538.0273790000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 07:25:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
orest-vlv.com/zcvisitor/4bc15993-a06f-11ed-95e8-12486b8c46f5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4bcc07f4-a06f-11ed-95e8-12486b8c46f5
200 1.1 kB URL HTTP/1.1 orest-vlv.com/zcvisitor/4bc15993-a06f-11ed-95e8-12486b8c46f5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4bcc07f4-a06f-11ed-95e8-12486b8c46f5
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 824915a9faf93420e36d89e899a63e4b
d29780c402a146a4f45c4f2678ab380d4cc7cdcb
f3a459b35cb62b1a539b369052e3bf148bdc5aaf2d6251eeb031c2a20e4aa739
GET /zcvisitor/4bc15993-a06f-11ed-95e8-12486b8c46f5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4bcc07f4-a06f-11ed-95e8-12486b8c46f5 HTTP/1.1
Host: orest-vlv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Mon, 30 Jan 2023 07:25:40 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: VkQjzjIk
orest-vlv.com/zcredirect?visitid=4bc15993-a06f-11ed-95e8-12486b8c46f5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 308 B URL HTTP/1.1 orest-vlv.com/zcredirect?visitid=4bc15993-a06f-11ed-95e8-12486b8c46f5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5c65c63981a4ac3514a357b36307590f
ea7101722a90f7f5d1c1fb602c8c9b6ae17b4c84
d11a79d3615a5c21f2db3bd5d3bbbf7346ff380d18748ff11214a463550cd5af
GET /zcredirect?visitid=4bc15993-a06f-11ed-95e8-12486b8c46f5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: orest-vlv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://orest-vlv.com/zcvisitor/4bc15993-a06f-11ed-95e8-12486b8c46f5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4bcc07f4-a06f-11ed-95e8-12486b8c46f5
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Mon, 30 Jan 2023 07:25:40 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: DPSFIsYu
orest-vlv.com/favicon.ico
404 653 B URL HTTP/1.1 orest-vlv.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: orest-vlv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://orest-vlv.com/zcredirect?visitid=4bc15993-a06f-11ed-95e8-12486b8c46f5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Mon, 30 Jan 2023 07:25:40 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: LRLlLtia
xml-v4.gipostart-2.co/click?seat=2113743&i=q-xQJJglYoM_0
302 Found 0 B URL HTTP/1.1 xml-v4.gipostart-2.co/click?seat=2113743&i=q-xQJJglYoM_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?seat=2113743&i=q-xQJJglYoM_0 HTTP/1.1
Host: xml-v4.gipostart-2.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://orest-vlv.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://main.proffering.xyz/15GtWZ?zoneid=12293994169&pubfeed=397303/397303.12293994169&campaign=670550&cost=0.00031
Pragma: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5f972d08977f8c22b87057ea26bba4c9
55f308788c0a98d61ead28c156394b041087c0c5
afbaec778f8f6986a80207749001ee435bb286ce9250f5ae63b65ef2fb2e7110
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AFBAEC778F8F6986A80207749001EE435BB286CE9250F5AE63B65EF2FB2E7110"
Last-Modified: Fri, 27 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19370
Expires: Mon, 30 Jan 2023 12:48:31 GMT
Date: Mon, 30 Jan 2023 07:25:41 GMT
Connection: keep-alive
www.charmants.com/wp-content/promo/widget/charmants160600.jpg
403 Forbidden 0 B URL HTTP/1.0 www.charmants.com/wp-content/promo/widget/charmants160600.jpg
IP
ASN #133618 Trellian Pty. Limited
GET /wp-content/promo/widget/charmants160600.jpg HTTP/1.1
Host: www.charmants.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sexyhotmalemodels.blogspot.com/
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
www.intensedebate.com/widgets/acctComment/57143/5
200 OK 0 B URL HTTP/2 www.intensedebate.com/widgets/acctComment/57143/5
IP
GET /widgets/acctComment/57143/5 HTTP/1.1
Host: www.intensedebate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 07:25:37 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
content-encoding: br
X-Firefox-Spdy: h2
www.spicypage.com/inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0
500 Internal Server Error 0 B URL HTTP/2 www.spicypage.com/inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0
IP
GET /inc/widget_x.asp?sid=16872&text_color=AFCCAF&border_color=000000&bg_color=000000&font_size=17&font_weight=bold&font_style=normal&font_transform=none&font_align=center&font_deco=none&width=100&height=160&display=2&show_voters=0 HTTP/1.1
Host: www.spicypage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 500 Internal Server Error
date: Mon, 30 Jan 2023 07:25:37 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ngWX6DeVrSNTMxLHGHuZshncsQHDqxmi3VbEOnqRmqeKLyQYRyvF2wJimh9Y6HfUuDtZBWFyj7pviU70HPU1sHklBd78WqhvjCpEi2MNlL31bIt7F2CHMdEy1OxsJrML0CBlNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791879859fbcb505-OSL
X-Firefox-Spdy: h2
www.gaydemon.com/directory/
200 OK 0 B URL HTTP/2 www.gaydemon.com/directory/
IP
GET /directory/ HTTP/1.1
Host: www.gaydemon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 07:25:37 GMT
content-type: text/html
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rSRhQxYSnVj2sguBpyrcJNhRz2eajlmd3DnVrNmH9EaTL78Lo7NtQCMVvqv%2FudZCfVrubmHr0klJDV9i3Mk75cBB3pNeoJgJYlTT%2Bq%2BRNjxNXOp93SKHI4Qgfdo%2B4iQcui8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79187984fd3ab521-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.e-referrer.com/link.js
301 Moved Permanently 0 B URL HTTP/2 www.e-referrer.com/link.js
IP
GET /link.js HTTP/1.1
Host: www.e-referrer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sexyhotmalemodels.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 30 Jan 2023 07:25:36 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.e-referrer.com/
cache-control: max-age=14400
cf-cache-status: HIT
age: 1173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AyIaykDWwdnLD30%2B050WIn%2BdQF2SaT2ZXiTEyeY7Exe5cc9NYEvOdarZBCnzAXXe5BWCw5G5wzWYekD6fgBO8PeAxm3Ta2GvPN%2FSuhBgGe1RcCViKRD5FavQeMLoZBMHjWMEWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918797ced1e1bfe-OSL
X-Firefox-Spdy: h2
216.58.207.193
93.184.220.29
23.36.76.226
103.224.182.225
213.227.149.193
188.114.97.1
104.20.218.77
167.114.57.160
194.9.94.85