| orangeboring.com/?a=8924&c=3070&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=8a02e340-dbca-4975-a5aa-38da908915bf |  52.210.254.219 | 302 Found | 284 B |
URL User Request GET HTTP/1.1orangeboring.com/?a=8924&c=3070&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=8a02e340-dbca-4975-a5aa-38da908915bf IP52.210.254.219:443
CertificateIssuerGlobalSign nv-sa Subject*.orangeboring.com FingerprintC4:DD:8A:D3:E4:FC:F3:66:C3:61:34:DA:91:D1:B5:3D:3D:4A:34:B6 ValidityFri, 16 Feb 2024 14:25:13 GMT - Wed, 19 Mar 2025 14:25:12 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashf0166a1315b4f661432c925c552c107c 2c0fe4966adefab9e6fc764a0391014eaf1a5e40 12fcf6c5870a8df8663309b243eeabcbde93a14a1c9eab0b5ba00389df206901
GET /?a=8924&c=3070&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=8a02e340-dbca-4975-a5aa-38da908915bf HTTP/1.1
Host: orangeboring.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 284
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Apr 2024 10:28:11 GMT
Location: https://silence.whisperinggalaxy.com/5c91666d-4820-4efa-844c-1f0c5fa7a01d?s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&aid=8924
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=rYzMTc6LeMGUgV4wXvr38vBEcwtDeDofpAlqXsK+6EEhpIVrIiRVJA==; domain=.orangeboring.com; path=/; HttpOnly
trk=0lY0u8amJz8A8LWoDPs+tvBEcwtDeDofpAlqXsK+6EEhpIVrIiRVJA==; domain=.orangeboring.com; expires=Sun, 19-Apr-2026 10:28:11 GMT; path=/; HttpOnly
c4615=rYzMTc6LeMEOxVbiTkcs7fa9Rg/QtOYWEOdCpMacsRaaL+06iI5mPg==; domain=.orangeboring.com; expires=Sun, 19-May-2024 10:28:11 GMT; path=/; HttpOnly
Connection: close
|
|
| silence.whisperinggalaxy.com/5c91666d-4820-4efa-844c-1f0c5fa7a01d?s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&aid=8924 |  3.126.25.249 | 302 Found | 0 B |
URL User Request GET HTTP/2silence.whisperinggalaxy.com/5c91666d-4820-4efa-844c-1f0c5fa7a01d?s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&aid=8924 IP3.126.25.249:443
CertificateIssuerLet's Encrypt Subjectsilence.whisperinggalaxy.com Fingerprint8C:B2:98:89:4B:A0:CE:F8:EB:6F:23:87:38:8D:62:8F:1C:9D:93:70 ValidityThu, 28 Mar 2024 06:46:54 GMT - Wed, 26 Jun 2024 06:46:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5c91666d-4820-4efa-844c-1f0c5fa7a01d?s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&aid=8924 HTTP/1.1
Host: silence.whisperinggalaxy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 19 Apr 2024 10:28:11 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://pointsafes.com/?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=
pragma: no-cache
set-cookie: 5c91666d-4820-4efa-844c-1f0c5fa7a01d-v4=Gb0ZlZEX97Gvgx4EtVZ9XX36iVkUYExrG6B7_LaozZU; Max-Age=86400; Expires=Sat, 20-Apr-2024 10:28:11 GMT; Domain=silence.whisperinggalaxy.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=D2pOb216KPRg7%2FLJKoANFLNTg9tjovmR1URT3xqJl6GdPja9yWS9S33eHWPNxRe7o2zZR3TWHH1A2%2FxPoYjPwdEmJ%2BjD2SmgCM4OD3Vxaed8pLkHJLX7tHsG2YN6tjZ7vS0KqUnSHiaJemgiKaVFyQ%3D%3D; Max-Age=31536000; Expires=Sat, 19-Apr-2025 10:28:11 GMT; Domain=silence.whisperinggalaxy.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
|
|
| pointsafes.com/?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5= | 54.76.124.8 | 302 Found | 297 B |
URL User Request GET HTTP/1.1pointsafes.com/?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5= IP54.76.124.8:443
CertificateIssuerGlobalSign nv-sa Subject*.pointsafes.com Fingerprint26:1E:3C:C6:FB:77:02:9E:88:DC:DA:D2:87:B6:17:E9:16:17:E3:E6 ValiditySat, 06 Jan 2024 05:32:22 GMT - Thu, 06 Feb 2025 05:32:21 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash982fee4fb0f91348f3c6b73567d0a103 6566804fa00cc89723a5ff95f78735e1f42666de b2fce31a33f085a7b89046b968d68c7746b7be9477f6e9967de14dd612f84e06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5= HTTP/1.1
Host: pointsafes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 297
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Apr 2024 10:28:11 GMT
Location: https://greenplacetech.com/?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=45663894-1003-4d77-a64f-8cab1cd608a3
Connection: close
|
|
| greenplacetech.com/?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=45663894-1003-4d77-a64f-8cab1cd608a3 | 52.210.254.219 | 302 Found | 203 B |
URL User Request GET HTTP/1.1greenplacetech.com/?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=45663894-1003-4d77-a64f-8cab1cd608a3 IP52.210.254.219:443
CertificateIssuerGlobalSign nv-sa Subject*.greenplacetech.com FingerprintEC:78:93:54:B7:CE:3D:4D:5A:EB:EB:35:26:5A:88:73:CA:63:4A:32 ValiditySat, 06 Jan 2024 05:26:03 GMT - Thu, 06 Feb 2025 05:26:02 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0c39dc4604aef3e5df7ef51879f9e638 0985fd2e548910338734cd2c44a53402bcbdadd1 5960b82eae64b55293969e5180c49950d10bc10b6816f280535e9fb394219719
GET /?a=8924&c=38729&s1=68&s2=b32b621ac7a2180ded14ff52271c923e-48215-0419&s3=&s4=&s5=&ckmguid=45663894-1003-4d77-a64f-8cab1cd608a3 HTTP/1.1
Host: greenplacetech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 203
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Apr 2024 10:28:11 GMT
Location: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=s5aTzpwQg83/W9cOBOI+vvBEcwtDeDofthDDyA9DRUiqcajYNagYkg==; domain=.greenplacetech.com; path=/; HttpOnly
trk=Mhi4mT8HhOplhnWjU4JnlfBEcwtDeDofthDDyA9DRUiqcajYNagYkg==; domain=.greenplacetech.com; expires=Sun, 19-Apr-2026 10:28:11 GMT; path=/; HttpOnly
c3612=s5aTzpwQg80JNztK23Lv8WykqANvkR2HtDZfUyw+pXiaL+06iI5mPg==; domain=.greenplacetech.com; expires=Fri, 19-Apr-2024 10:28:11 GMT; path=/; HttpOnly
Connection: close
|
|
| www.varmogvillig.com/img/logo.png |  35.227.204.77 | 200 OK | 12 kB |
URL GET HTTP/3www.varmogvillig.com/img/logo.png IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typePNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced Hash0f6511dbebc06a50801fc0a2a137596a 0ee596fb5b2b7dee8b74b7251b60bc69117ed31a 15ddb4bd9df257bc9accbcc735430f6846f0187115fc53046493287c63661910
GET /img/logo.png HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: Apache/2.4.58 (Ubuntu)
vary: X-Forwarded-Proto
last-modified: Thu, 18 Apr 2024 19:50:14 GMT
etag: "2fa3-6166447a4bf69"
accept-ranges: bytes
content-length: 12195
x-ua-compatible: IE=edge,chrome=1
content-type: image/png
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.varmogvillig.com/landers/js/ad-provider.js | 35.227.204.77 | 200 OK | 512 B |
URL GET HTTP/3www.varmogvillig.com/landers/js/ad-provider.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeASCII text, with very long lines (979) Hashacd920e8f5657057e8003b79905c5266 cd96548060dbbc3f715cb81c3810d893eedec260 38b34bce7e5ad8268f51a16a6633c17923130b2fac9eeb6ceaca6beb50990681
GET /landers/js/ad-provider.js HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:22:57 GMT
etag: "6620e671-3fb-gzip"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 14922035
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 512
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/images/loader/loading.gif | 35.227.204.77 | 200 OK | 2.9 kB |
URL GET HTTP/3www.varmogvillig.com/landers/images/loader/loading.gif IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeGIF image data, version 89a, 128 x 15 Hash62b08454087f1ef8b27bd2bcda330537 cac1914632f4c859f6176a84078f1017bad069f8 06f91f1bc360e7c486515b416a564445652e40585f94f2d089239b981d6421f6
GET /landers/images/loader/loading.gif HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: image/gif
content-length: 2892
last-modified: Thu, 18 Apr 2024 09:22:46 GMT
etag: "6620e666-b4c"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 14578516
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/images/general/google-logo.svg | 35.227.204.77 | 200 OK | 688 B |
URL GET HTTP/3www.varmogvillig.com/landers/images/general/google-logo.svg IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeSVG Scalable Vector Graphics image Hash686f8efa6e3e28e96d1c08399e8d353d 4524589b0dceefb6ae6389f36634441df69152d5 0cf576a5dab9315daac7ffe29d29ed585e0ff9850e59408d0f25f38dc1da037b
GET /landers/images/general/google-logo.svg HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: image/svg+xml
content-length: 688
last-modified: Thu, 18 Apr 2024 09:22:44 GMT
etag: "6620e664-2b0"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 14471501
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/css/vegas.min.css | 35.227.204.77 | 200 OK | 9.2 kB |
URL GET HTTP/3www.varmogvillig.com/landers/css/vegas.min.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typegzip compressed data, from Unix Hash22725084223c46a4993b07cdf68fdfc8 8aaabd1eed2ae8daaa1d5d2a212137e08baecd63 c1a28bc27fd6516df12e200274c5d86e2737667a3e9b7eee3e07946bb1697852
GET /landers/css/vegas.min.css HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:22:44 GMT
etag: W/"6620e664-2e20"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 14812814
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/favicon/favicon.ico | 35.227.204.77 | 404 Not Found | 282 B |
URL GET HTTP/3www.varmogvillig.com/favicon/favicon.ico IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeHTML document, ASCII text Hashc2a1c79e2dbdf43714fda962e6eb0d4a a57426996a8126ad076b7310fe92c48d86fa5042 c2019cb9e7847eb68e6dcd37e22b25bb277f813f4d0ee98ffdbfe93cd44c7f88
GET /favicon/favicon.ico HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:28:12 GMT
server: Apache/2.4.58 (Ubuntu)
content-length: 282
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.varmogvillig.com/landers/js/vendor.js | 35.227.204.77 | 200 OK | 44 kB |
URL GET HTTP/3www.varmogvillig.com/landers/js/vendor.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typegzip compressed data, from Unix Hash33a1b3e27c64a6bdbd94d6c56a6810da 3931a84b9101a75192e82c8c09dd15d4785e8163 5005151b74d1309dc8a48e29973c9a74827fb49d87d6b5e68006418ed0ff783b
GET /landers/js/vendor.js HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:22:58 GMT
etag: W/"6620e672-1e2ae"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 14751741
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/media-registry.js | 35.227.204.77 | 200 OK | 8.6 kB |
URL GET HTTP/3www.varmogvillig.com/landers/media-registry.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash996d00ce3568daa889df786e8892e2f3 cee9721d9288c308d1fa237b9c3abe6f35312b69 0860495b30b1debdec029cf077e290876264883af129c82a872aad5abb94cef5
GET /landers/media-registry.js HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 09:51:52 GMT
server: nginx/1.14.2
x-guploader-uploadid: ABPtcPrxkHWczD4wre-u1a81GdX1jw27c4eQiFPc3ZV-BVw512Va9K3s9Jx3AE-YtvIMinyKsok
x-goog-generation: 1713351917036259
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 122245
x-goog-hash: crc32c=wF2vjw==, md5=mW0AzjVo2qiJ33huiJLi8w==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
age: 2180
last-modified: Thu, 18 Apr 2024 09:45:20 GMT
etag: "996d00ce3568daa889df786e8892e2f3-gzip"
content-type: application/javascript
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 8593
via: 1.1 google, 1.1 google
|
|
| www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s | 142.250.74.164 | 200 OK | 1.1 kB |
URL GET HTTP/2www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s IP142.250.74.164:443
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
Hasha65f2e9e01014755ae9142866db5b601 e7b912031ed12b185f8c5dc93c0f617615a60626 20fa9938afbde124b4b86d512b70dc99e3c5beac327ad49d03c4e9414d0b36fe
GET /recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 19 Apr 2024 10:28:12 GMT
date: Fri, 19 Apr 2024 10:28:12 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (597) Size206 kB (206057 bytes) Hash8326c23d6b3eed35bc3e62f3294587fd edda17e74e53e85073e5eac9cb6be2163dbfa23c 57f03d3ba66117edc152646341120dd3a1d7d71b9a98a3723af5a8ae61bcb3ab
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 206057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:55:24 GMT
expires: Tue, 15 Apr 2025 23:55:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 297168
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (597) Size206 kB (206057 bytes) Hash8326c23d6b3eed35bc3e62f3294587fd edda17e74e53e85073e5eac9cb6be2163dbfa23c 57f03d3ba66117edc152646341120dd3a1d7d71b9a98a3723af5a8ae61bcb3ab
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 206057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:55:24 GMT
expires: Tue, 15 Apr 2025 23:55:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 297168
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.varmogvillig.com/landers/translations/nb-no2.json | 35.227.204.77 | 200 OK | 218 kB |
URL GET HTTP/3www.varmogvillig.com/landers/translations/nb-no2.json IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
Size218 kB (218064 bytes) Hash03b5a86609e5b54a54f2d4aa9c4de6be 2b28f57afd7505c6b4daa22867970c84396dd642 459139ce69de1a12b7372c8ca54b3f68a0d6b3a24c499849f3daa892fdc25183
GET /landers/translations/nb-no2.json HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 09:59:34 GMT
server: nginx/1.14.2
content-length: 218064
x-guploader-uploadid: ABPtcPoGxey-jcxiBmqIiITqQHPV-7VlTOQR4ZCuQc1yVUUN_qOOXEgQXP5kiwu3VR1Wbj7rMTE
x-goog-generation: 1712825875375555
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 218064
x-goog-hash: crc32c=ezkWSA==, md5=A7WoZgnltUpU8tSqnE3mvg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
age: 1718
last-modified: Thu, 11 Apr 2024 08:57:55 GMT
etag: "03b5a86609e5b54a54f2d4aa9c4de6be"
content-type: application/json
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 google, 1.1 google
|
|
| samlesamtykke.com/cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=varmogvillig.com&languageCode=nb&languageTerritory=NO&sessionId=b1555443fd354b00987195476243aecd |  35.195.163.35 | 200 OK | 14 kB |
URL GET HTTP/2samlesamtykke.com/cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=varmogvillig.com&languageCode=nb&languageTerritory=NO&sessionId=b1555443fd354b00987195476243aecd IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
File typeJavaScript source, ASCII text Hashcf6ceef46b05e60c6d77c903656dc342 202edf0c3255c5d193693826987e559e5f4348e3 a919a518666f634579561b597895e7513886db484daebc432660d922a51f347f
GET /cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=varmogvillig.com&languageCode=nb&languageTerritory=NO&sessionId=b1555443fd354b00987195476243aecd HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:12 GMT
content-type: application/javascript
content-length: 14219
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 10:41:20 GMT
expires: Thu, 17 Apr 2025 10:41:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/css
vary: Accept-Encoding
age: 172013
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (597) Size206 kB (206057 bytes) Hash8326c23d6b3eed35bc3e62f3294587fd edda17e74e53e85073e5eac9cb6be2163dbfa23c 57f03d3ba66117edc152646341120dd3a1d7d71b9a98a3723af5a8ae61bcb3ab
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 206057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:55:24 GMT
expires: Tue, 15 Apr 2025 23:55:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 297169
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.varmogvillig.com/landers/webfonts/fa-solid-900.woff2 | 35.227.204.77 | 200 OK | 92 kB |
URL GET HTTP/3www.varmogvillig.com/landers/webfonts/fa-solid-900.woff2 IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 91792, version 1.0 Hash6897be186b147b75c308c29eb0782f14 4190cab3384f7769ffb33f277cc20be68eb32c18 a238cffffbfea4c2868fca1b142a3a9690574537a38c857dbe309ec27b033eb3
GET /landers/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/landers/css/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:13 GMT
server: nginx/1.14.2
content-type: application/octet-stream
content-length: 91792
last-modified: Thu, 18 Apr 2024 09:22:46 GMT
etag: "6620e666-16690"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 2959127
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf | 142.250.74.164 | 200 OK | 116 kB |
URL GET HTTP/3www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf IP142.250.74.164:443
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Size116 kB (115715 bytes) Hashe4de0338f92ab777df25316b55f8b829 86f782692226851050b60b76a5ba07a9c634febb a1fe58283f3929a529c2f6aad59f29378df35988a2e727a276430aea7e83a847
GET /recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 19 Apr 2024 10:28:12 GMT
content-security-policy: script-src 'nonce-NDUaZ4JYeIAtgIR6Z6AsdA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 114310
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB | 142.250.74.72 | 200 OK | 72 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB IP142.250.74.72:443
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (3484) Hash1ecd5a6ba216cb86ceae6204641c840b e8a8c53066048214b3cad2bdd50f4f6c9fb9efba 6ff0110b34d217bbdd4ca82f32b456c1e46e9a76137c1ddb54abe2de4b492e9f
GET /gtm.js?id=GTM-KBRH6NB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 10:28:13 GMT
expires: Fri, 19 Apr 2024 10:28:13 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72063
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:25:07 GMT
expires: Fri, 18 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 61386
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:54:07 GMT
expires: Thu, 25 Apr 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 113646
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/RWTT3oxVpjnMak3qs5vv7tg5xSkq7YqXMGNs3aBXMhQ.js | 142.250.74.164 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/RWTT3oxVpjnMak3qs5vv7tg5xSkq7YqXMGNs3aBXMhQ.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (17614) Hasha0b566c1ba416a3899181051b4e22648 6e24d55d8094a8e96bbcdb2c8b2baec42ad59128 4564d3de8c55a639cc6a4deab39befeed839c5292aed8a9730636cdda0573214
GET /js/bg/RWTT3oxVpjnMak3qs5vv7tg5xSkq7YqXMGNs3aBXMhQ.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7470
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 05:03:42 GMT
expires: Thu, 17 Apr 2025 05:03:42 GMT
cache-control: public, max-age=31536000
age: 192271
last-modified: Thu, 04 Apr 2024 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (597) Size206 kB (206057 bytes) Hash8326c23d6b3eed35bc3e62f3294587fd edda17e74e53e85073e5eac9cb6be2163dbfa23c 57f03d3ba66117edc152646341120dd3a1d7d71b9a98a3723af5a8ae61bcb3ab
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 206057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:55:24 GMT
expires: Tue, 15 Apr 2025 23:55:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 297169
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 94 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hash63bfd67d669897e8344d269afcd8dbd5 7c4d80bf8f7b521f4cd57ce6d17d324b4f9c13de d457c2fa1dcbd16619ba2ef3b990d8dd9ea9ff0c156abeb009ed77dacffcb4b1
GET /gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 10:28:13 GMT
expires: Fri, 19 Apr 2024 10:28:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94098
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| samlesamtykke.com/cc.css | 35.195.163.35 | 200 OK | 3.9 kB |
IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
File typeassembler source, ASCII text Hashddb6776d9e0b9844c9f57355d7492805 da918eb4fefa9d625e5858496c2c4a20ad893619 9ec88cf72960048a40791a943e5dee85f910c00e9a3732339888b075de11bc34
GET /cc.css HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: text/css
content-length: 3892
last-modified: Thu, 15 Oct 2020 08:07:25 GMT
etag: "6073-5b1b123761e40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/collector | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/collector IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.varmogvillig.com/
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/collector | 35.195.163.35 | 200 OK | 4.7 kB |
URL POST HTTP/2api.samlesamtykke.com/consent/collector IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hash13bbcc190c7fe76c7489b08aad14656a dd5575dcc8445b489de95101d875e78fd08352d7 5847944aba0d237b9d758ec732dccbcba519a27441fc11418c0f610f7b4298a4
POST /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 169
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: application/vnd.api+json
content-length: 4661
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.varmogvillig.com/
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 371 B |
URL POST HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashaad76f926b6c219e918916e6f25e4129 4823643373db875486f8ac895ea532106e6798d4 0b9d369937e417796e17001b773fd61884a8993ea967ad4841a472e83f83292d
POST /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 224
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: application/vnd.api+json
content-length: 371
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.varmogvillig.com/
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 354 B |
URL POST HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashf3306f051731bcce1d98a030b8a2d9cf ada4a5bb07ee1872a579a651298774329b036f43 cbbae4d9daeed7c435cb09233298534b86c9c159ff6960ace74e223e460a75c5
POST /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 225
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:13 GMT
content-type: application/vnd.api+json
content-length: 354
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/confirmExplicit | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/confirmExplicit IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/confirmExplicit HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.varmogvillig.com/
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:14 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/confirmExplicit | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/confirmExplicit IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com Fingerprint3C:93:1B:7C:6B:A9:B9:30:9C:9C:45:CC:2A:38:9A:B1:3F:DE:A1:73 ValidityTue, 27 Feb 2024 21:10:34 GMT - Mon, 27 May 2024 21:10:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /consent/confirmExplicit HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 508
Origin: https://www.varmogvillig.com
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Fri, 19 Apr 2024 10:28:14 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.varmogvillig.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.varmogvillig.com/landers/images/landing005/milf/default/slide03.jpg?geo=no | 35.227.204.77 | 200 OK | 125 kB |
URL GET HTTP/3www.varmogvillig.com/landers/images/landing005/milf/default/slide03.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Size125 kB (125004 bytes) Hashe2d67c936e084960b9d055626c130dd3 e33cbe452c7b97f625a3dc3d4e713872e8f496b1 a53f1a88620987ee66801ac78009bece3a98871f098f6478abff91b805d7f481
GET /landers/images/landing005/milf/default/slide03.jpg?geo=no HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Cookie: _ga_QXFHHE16V3=GS1.1.1713522493.1.0.1713522493.0.0.0; _ga=GA1.1.863568033.1713522494
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:18 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 125004
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-1e84c"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 2865069
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/images/landing005/milf/default/slide01.jpg?geo=no | 35.227.204.77 | 200 OK | 86 kB |
URL GET HTTP/3www.varmogvillig.com/landers/images/landing005/milf/default/slide01.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Hash6350abf9ef879c2a8e86b06a458418d8 149db15ceaa7e4dbdc053e4c0a10f22a0f993c28 3550dc96c12cc3f04b0677cedd2bd922f032b2e711741c1d8b95ae5fac8a7496
GET /landers/images/landing005/milf/default/slide01.jpg?geo=no HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Cookie: _ga_QXFHHE16V3=GS1.1.1713522493.1.0.1713522493.0.0.0; _ga=GA1.1.863568033.1713522494
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:23 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 86390
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-15176"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 15048125
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/css/fontawesome-all.min.css | 35.227.204.77 | 200 OK | 52 kB |
URL GET HTTP/3www.varmogvillig.com/landers/css/fontawesome-all.min.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeASCII text, with very long lines (51425) Hasha954e78371616c5b3b924fc9e83aa9b4 14912f17e86aa3d4d12c94b91646ddaac2ae0862 5986f251d278ae72106ef1d7302798a2e14f69a4d35b80087b9e61905a15e75e
GET /landers/css/fontawesome-all.min.css HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Thu, 18 Apr 2024 09:22:44 GMT
etag: W/"6620e664-c970"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 2510449
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/css/theme/pornhub.css | 35.227.204.77 | 200 OK | 15 kB |
URL GET HTTP/3www.varmogvillig.com/landers/css/theme/pornhub.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
Hash5dbd744c4672764ea4a041ec3a379b9a 05f5b700b474db6ab5e4e646b31cfe07b3b633ac 5c2238962346b0d3c819f800cd1810b368e1b98efa86d1bb86aac1593c6564cc
GET /landers/css/theme/pornhub.css HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: varmogvillig.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 3048751
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC | 142.250.74.164 | 200 OK | 102 B |
URL GET HTTP/3www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeASCII text, with no line terminators Hashc193745deb63fe67f3aa6b578c40dd99 8a3ecc2696074e71d3b011c99b98cb25229e1a31 d41e076366e4207d57a5fd1725c2024f751c43ae4a3a8e93cc46dfb8462a3e5b
GET /recaptcha/enterprise/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cudmFybW9ndmlsbGlnLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=7s1oi1orvhhf
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 19 Apr 2024 10:28:13 GMT
date: Fri, 19 Apr 2024 10:28:13 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 | 35.227.204.77 | 200 OK | 22 kB |
URL User Request GET HTTP/2www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeHTML document, ASCII text, with very long lines (2091) Hashbc64f5298d7fd830534067c494e64897 45b77a0cf21dc31e72153b4ee02de32771ca6a6a 07cead08e27410107961fa00be4bf0c687c566d38b0b0efa688a0d53e2d3c947
GET /landing5?cat=milf&pi=8924&pt1=120283359&pe=68 HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:28:11 GMT
server: nginx/1.14.2
content-type: text/html;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: varmogvillig.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 3018699
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
|
|
| www.varmogvillig.com/landers/js/landing005.js | 35.227.204.77 | 200 OK | 74 kB |
URL GET HTTP/3www.varmogvillig.com/landers/js/landing005.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/js/landing005.js HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 09:22:57 GMT
etag: W/"6620e671-11f65"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 2714640
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/images/landing005/milf/default/slide02.jpg?geo=no | 35.227.204.77 | 200 OK | 88 kB |
URL GET HTTP/3www.varmogvillig.com/landers/images/landing005/milf/default/slide02.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Hashdef57561a7dc7d1238222f49bd032100 74ecf57fa29e1ac26ef5e06a2c6661afbb5c4eb3 052e56a5eaa8f0cca7727549e65acd4dfed8c4341e765bf5b88c89b8e10e3344
GET /landers/images/landing005/milf/default/slide02.jpg?geo=no HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:13 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 88055
last-modified: Thu, 18 Apr 2024 09:22:45 GMT
etag: "6620e665-157f7"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 14812817
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.varmogvillig.com/landers/css/landing005.css | 35.227.204.77 | 200 OK | 20 kB |
URL GET HTTP/3www.varmogvillig.com/landers/css/landing005.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
Hash62cef3e78dfb957546e10a1119f86b99 6b1777595e02b9b29764325c94dddc08fb4af500 21fd208592aea042e71a0661ba469b02661cc004eb04113e7eca167adf15c4f5
GET /landers/css/landing005.css HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:28:12 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: varmogvillig.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 2806599
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.google.com/recaptcha/enterprise.js | 142.250.74.164 | 200 OK | 940 B |
URL GET HTTP/2www.google.com/recaptcha/enterprise.js IP142.250.74.164:443
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeJavaScript source, ASCII text, with very long lines (940), with no line terminators Hash94532ebce7b67119f27434d83824971e 997c95d59a473a8426d5f2723c6a4fb0c3a68c05 c0211427afde8fe4af8340704626b60f5302a9654a3057c5e9108ae6880bf5e7
GET /recaptcha/enterprise.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.varmogvillig.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 19 Apr 2024 10:28:12 GMT
date: Fri, 19 Apr 2024 10:28:12 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.varmogvillig.com/favicon/apple-touch-icon-180x180.png | 35.227.204.77 | 404 Not Found | 282 B |
URL GET HTTP/3www.varmogvillig.com/favicon/apple-touch-icon-180x180.png IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68 CertificateIssuerGoogle Trust Services LLC Subjectvarmogvillig.com Fingerprint17:D3:93:C8:D4:6D:A2:CD:33:20:40:98:4E:CA:1C:9B:AD:45:CA:4C ValidityMon, 26 Feb 2024 17:04:12 GMT - Sun, 26 May 2024 17:56:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash4693aee34f99dad0cdff29f663ae2b85 a024b648ffd041031c8b33752c9fa09d60a152ee 12cc63e19fa25d04323de99faed3d7f6cf4c537f0fe89629a5d92ac7fdc89c9f
GET /favicon/apple-touch-icon-180x180.png HTTP/1.1
Host: www.varmogvillig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.varmogvillig.com/landing5?cat=milf&pi=8924&pt1=120283359&pe=68
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:28:12 GMT
server: Apache/2.4.58 (Ubuntu)
content-length: 282
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|