webrocksr.blogspot.com/http:/webrocksr.blogspot.com/feeds/posts/default'
14 kB URL webrocksr.blogspot.com/http:/webrocksr.blogspot.com/feeds/posts/default'
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13948)
Hash fa02dd4d480f40f7bc3a417db3abbaf0
a78f86b9b6cf1c188a9b57f47d8f378abaa67a4e
e5f665624657b4ff7cda8227107375d08650947b14a5d41bef013103e51cf0e6
GET /http:/webrocksr.blogspot.com/feeds/posts/default' HTTP/1.1
Host: webrocksr.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 05 Dec 2023 09:07:11 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 13581
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
webrocksr.blogspot.com/http:/webrocksr.blogspot.com/feeds/posts/default'
14 kB URL webrocksr.blogspot.com/http:/webrocksr.blogspot.com/feeds/posts/default'
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13948)
Hash a07273b2abbbe3adf1aae15544ddd360
5f854ea9baf37f271283b4b4b9a64f3f8a877727
66c5c97a63385aeca9e6ad1deb7fb29768dd434f1b916350852317381b9b82f1
GET /http:/webrocksr.blogspot.com/feeds/posts/default' HTTP/1.1
Host: webrocksr.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 05 Dec 2023 09:07:11 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 13578
Server: GSE
webrocksr.blogspot.com/js/cookienotice.js
2.0 kB URL webrocksr.blogspot.com/js/cookienotice.js
IP
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: webrocksr.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/http:/webrocksr.blogspot.com/feeds/posts/default'
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Tue, 05 Dec 2023 09:07:11 GMT
Expires: Tue, 12 Dec 2023 09:07:11 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 04 Dec 2023 20:05:01 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
dl.dropbox.com/u/53952260/data-post.js
0 B URL dl.dropbox.com/u/53952260/data-post.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/53952260/data-post.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
location: https://dl.dropbox.com/u/53952260/data-post.js
date: Tue, 05 Dec 2023 09:07:11 GMT
server: envoy
x-dropbox-request-id: 482a2708c21c4f10a4df7a6b7a941415
content-length: 0
dl.dropbox.com/u/53952260/blogger.js
0 B URL dl.dropbox.com/u/53952260/blogger.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/53952260/blogger.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
location: https://dl.dropbox.com/u/53952260/blogger.js
date: Tue, 05 Dec 2023 09:07:11 GMT
server: envoy
x-dropbox-request-id: 6da71feb605e4a5ba396c387726b8993
content-length: 0
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
6.6 kB URL www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:26:53 GMT
expires: Wed, 04 Dec 2024 07:26:53 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 14:55:54 GMT
content-type: text/css
vary: Accept-Encoding
age: 6019
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/charts/loader.js
18 kB URL www.gstatic.com/charts/loader.js
IP
File type ASCII text, with very long lines (2186)
Hash 32bc41d964faa1b95d9c61fc443df579
02d3f83dac14fe996babbfe332779ed182d39d1c
369ae154eab37b7ada7776b934833183bb053ebd1d0255f70ef8944f65cabb0c
GET /charts/loader.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 18534
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 08:26:53 GMT
expires: Tue, 05 Dec 2023 09:26:53 GMT
cache-control: public, max-age=3600
last-modified: Tue, 04 Apr 2023 17:52:30 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 2419
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3754116945-widgets.js
59 kB URL www.blogger.com/static/v1/widgets/3754116945-widgets.js
IP
File type ASCII text, with very long lines (2258)
Hash 0f3580b0033bbd151cdb647634be7404
4d8508ef28b0e50fa8c28ccaeb1f2a6855a75bdc
38d944d88c98612f76ed693afb143f1c032ca27ba56ec46a6714ab3dc511f974
GET /static/v1/widgets/3754116945-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:26:52 GMT
expires: Wed, 04 Dec 2024 07:26:52 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 23:28:54 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 6020
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
22 kB URL apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (2664)
Hash fd67324a3d81895bdf76b073089663b1
5abb1b0a36c645085e31830e6647faa790ad4e91
8eaa06f95fa0ac44c2c186f200874f2f3ebc3aaa92412f0d0c096f517d3581d1
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Tue, 05 Dec 2023 09:07:12 GMT
expires: Tue, 05 Dec 2023 09:07:12 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "bccfddc1dce4fb76"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=tDgT76okeoh66TeBiQn1faM7qMfZhDhocRAt2oIEh6wZkEJbaYfSKR2eO-LIgN3Ya1rx71IFHsjlFtKtA8tjbd4eVV2TrAPOCNQb6GQBNcCtrft6kNTtVPe3-K69EzpsZZogdtxsjHtk_rBawduBbIpGWZKDmzh6SSRhijW4bW0; expires=Wed, 05-Jun-2024 09:07:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
databloggerpage.com/data/datablog.js
176 B URL databloggerpage.com/data/datablog.js
IP
Hash 48de93ddc9321915e59771cfc099c52d
98dd73ff20db65a4837d8db4a1dae3ad017e1786
843a0df82376e9e99193660985cfd96015e090973ff8555568da0c7f696d7151
GET /data/datablog.js HTTP/1.1
Host: databloggerpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 05 Dec 2023 09:07:12 GMT
Content-Length: 176
3.bp.blogspot.com/_MhvFrz7psjI/S3QO2K60KZI/AAAAAAAAAu0/35YFvzIpnAA/s1600/sbutton.png
1.4 kB URL 3.bp.blogspot.com/_MhvFrz7psjI/S3QO2K60KZI/AAAAAAAAAu0/35YFvzIpnAA/s1600/sbutton.png
IP
File type PNG image data, 23 x 21, 8-bit/color RGB, non-interlaced\012- data
Hash dbf9f9b73b2f4dcc531d52c026931f96
d356d104c206dc5e4bccaeb2a4919d6f7c8e369d
192823103c2ec25e0ac983c176ff34ad88ac7e714a94206499e70234395d53ec
GET /_MhvFrz7psjI/S3QO2K60KZI/AAAAAAAAAu0/35YFvzIpnAA/s1600/sbutton.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2ed"
Expires: Wed, 06 Dec 2023 09:07:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sbutton.png"
X-Content-Type-Options: nosniff
Date: Tue, 05 Dec 2023 09:07:12 GMT
Server: fife
Content-Length: 1434
X-XSS-Protection: 0
dl.dropbox.com/u/53952260/data-post.js
15 kB URL dl.dropbox.com/u/53952260/data-post.js
IP
File type gzip compressed data, from Unix\012- data
Hash 7718d7c6d58282403ccb818de8d32279
432ccaffb8e2586dfa2cd771409e45c6a6627c79
4886e9a89db9839302043ce8db2a6ff992d69ea95a9d6d875485dc37b2fdc08a
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/53952260/data-post.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://webrocksr.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 05 Dec 2023 09:07:12 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 80003fc0166945f69de7a20434e294b3
X-Firefox-Spdy: h2
4.bp.blogspot.com/_MhvFrz7psjI/S3QOGgi7RSI/AAAAAAAAAsU/QqloMOAHSvE/s1600/casing.png
3.5 kB URL 4.bp.blogspot.com/_MhvFrz7psjI/S3QOGgi7RSI/AAAAAAAAAsU/QqloMOAHSvE/s1600/casing.png
IP
File type PNG image data, 1024 x 225, 8-bit/color RGB, non-interlaced\012- data
Hash b896dae3673ba92832f78aab7f778026
3f2f96c3ec0d606620463583c5c9176efb86b3e6
3a3540e58bc873d492439628b79d700e963c63d7d96ab9a7be98dc2670d10e5a
GET /_MhvFrz7psjI/S3QOGgi7RSI/AAAAAAAAAsU/QqloMOAHSvE/s1600/casing.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v1719"
Expires: Wed, 06 Dec 2023 09:07:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="casing.png"
X-Content-Type-Options: nosniff
Date: Tue, 05 Dec 2023 09:07:12 GMT
Server: fife
Content-Length: 3483
X-XSS-Protection: 0
1.bp.blogspot.com/_MhvFrz7psjI/S3QOFuTQajI/AAAAAAAAAr8/TnzHjkYXMps/s1600/body.jpg
47 kB URL 1.bp.blogspot.com/_MhvFrz7psjI/S3QOFuTQajI/AAAAAAAAAr8/TnzHjkYXMps/s1600/body.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1400x582, components 3\012- data
Hash a1d39afd07c6b0109ef32c2cda8c88fc
79ed64205a46020bc575f13e631f0b8036f5d301
5f1f33b03d2f1adeb40343f5cfc6e11036c498dd9094f3b8a2f03bb4e2ceb168
GET /_MhvFrz7psjI/S3QOFuTQajI/AAAAAAAAAr8/TnzHjkYXMps/s1600/body.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2bf"
Expires: Wed, 06 Dec 2023 09:07:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="body.jpg"
X-Content-Type-Options: nosniff
Date: Tue, 05 Dec 2023 09:07:12 GMT
Server: fife
Content-Length: 46947
X-XSS-Protection: 0
3.bp.blogspot.com/_MhvFrz7psjI/S3QOTFh40fI/AAAAAAAAAsk/eXTUG2LeNT8/s1600/menu2.png
27 kB URL 3.bp.blogspot.com/_MhvFrz7psjI/S3QOTFh40fI/AAAAAAAAAsk/eXTUG2LeNT8/s1600/menu2.png
IP
File type PNG image data, 1025 x 36, 8-bit/color RGB, non-interlaced\012- data
Hash f126cc6cd4e4d784c86180726a37dfa0
b311f00625de19a0969300ff0b072d046bde3c27
ff7374f6081c4bf54ea09a57ecce3a456a66921ae38d450e42ac2b03b230924d
GET /_MhvFrz7psjI/S3QOTFh40fI/AAAAAAAAAsk/eXTUG2LeNT8/s1600/menu2.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2c9"
Expires: Wed, 06 Dec 2023 09:07:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="menu2.png"
X-Content-Type-Options: nosniff
Date: Tue, 05 Dec 2023 09:07:12 GMT
Server: fife
Content-Length: 27111
X-XSS-Protection: 0
2.bp.blogspot.com/_MhvFrz7psjI/S3QOUUV2cEI/AAAAAAAAAs8/K1of7HRgjA4/s1600/head.png
176 kB URL 2.bp.blogspot.com/_MhvFrz7psjI/S3QOUUV2cEI/AAAAAAAAAs8/K1of7HRgjA4/s1600/head.png
IP
File type PNG image data, 1024 x 126, 8-bit/color RGB, non-interlaced\012- data
Size 176 kB (175519 bytes)
Hash 2e3428b742fa03d818bdb19cdd2d0e89
cc5da3fd5482214f8cd075535a5285a147149fce
481d0258690ff6681be22112a31d40c3eb9ca9c70c5235ed051d859aaa5db9b3
GET /_MhvFrz7psjI/S3QOUUV2cEI/AAAAAAAAAs8/K1of7HRgjA4/s1600/head.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2cf"
Expires: Wed, 06 Dec 2023 09:07:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="head.png"
X-Content-Type-Options: nosniff
Date: Tue, 05 Dec 2023 09:07:12 GMT
Server: fife
Content-Length: 175519
X-XSS-Protection: 0
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash d55d073a57a03dda8c2bed1d73788c2f
d8f48f7d52e86a00a30ed7847b8d4aaf4838e2b3
d350f8c81f94c91867e6800a570202831f269af1e87e22649e38be78b7550782
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 09:07:12 GMT
Server: ECAcc (amb/6B35)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: I1RroD9hxh_iz5xVgtaIV_Gk1dj-elbTLDK5ZChxKdQo2ZqDZIOkSA==
magni-dcm.info/favicon.ico
653 B URL magni-dcm.info/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: magni-dcm.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magni-dcm.info/zclkredirect?visitid=ad221181-934d-11ee-9224-12a39919a469&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Tue, 05 Dec 2023 09:07:13 GMT
content-type: text/html;charset=utf-8
content-length: 653
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
content-language: en
server: khoSfMCL
X-Firefox-Spdy: h2
go.proffering.xyz/15GRtg?zoneid=griseous-trout&campaignid=2020224&target=golf-cob-V8fTyZbV&cost=0.000960
302 Found 252 B URL User Request GET HTTP/1.1 go.proffering.xyz/15GRtg?zoneid=griseous-trout&campaignid=2020224&target=golf-cob-V8fTyZbV&cost=0.000960
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectgo.proffering.xyz
Fingerprint49:F8:32:7F:55:B1:58:09:2C:5F:C6:AD:92:32:B0:42:47:F2:96:B0
ValidityTue, 10 Oct 2023 16:39:29 GMT - Mon, 08 Jan 2024 16:39:28 GMT
File type HTML document, ASCII text, with no line terminators
Hash 7665c7a002657cace64e3f192967e73f
b1a98754967a2e2ec4780d5a49a6958aa8e3546f
171e330a8dbd88fecb0846ded41ecf92483d02f30d1e832c327d33711c5d1c5e
GET /15GRtg?zoneid=griseous-trout&campaignid=2020224&target=golf-cob-V8fTyZbV&cost=0.000960 HTTP/1.1
Host: go.proffering.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magni-dcm.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.25.2
Date: Tue, 05 Dec 2023 09:07:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 252
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15GRtgo=20231205121701767354437; domain=.go.proffering.xyz; path=/;expires=Wed, 06 Dec 2023 09:07:13 GMT; httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15GRtg; domain=.go.proffering.xyz; path=/;expires=Wed, 06 Dec 2023 09:07:13 GMT; httpOnly=true;SameSite=None; Secure;
peerclickcid=555599315c57c1e737c2499d84544823-11246-1205; domain=.go.proffering.xyz; path=/;expires=Wed, 06 Dec 2023 09:07:13 GMT; httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.go.proffering.xyz; path=/;expires=Wed, 06 Dec 2023 09:07:13 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Vary: Accept
girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
200 OK 7.2 kB URL User Request GET HTTP/1.1 girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
IP
ASN #6898 SERVER.swiss Sagl
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (531), with CRLF line terminators
Hash 228461413b6ad275e8f5497bcf3d9bd8
ce409af4ccd14b9b5ed4bc9a54f94a1d1e29446d
9315cced9ee7c46898277b6ed97f1c8cbae646e1a1bf818d1f0fede7bbf85803
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magni-dcm.info/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:13 GMT
Content-Type: text/html
Content-Length: 7215
Connection: keep-alive
set-cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a; path=/
cache-control: private, no-transform
girlsflirthere.life/media/dating/toon2/css/animate.min.css
200 OK 53 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/toon2/css/animate.min.css
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with very long lines (52592)
Hash 178b651958ceff556cbc5f355e08bbf1
97afa151569f046b2e01f27c1871646e9cd87caf
8fe3fa119255adb5e0c12479331f9e092e85bcff56ab6ecc0510bfa2056b898d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/css/animate.min.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: text/css
Content-Length: 52789
Connection: keep-alive
ETag: "178b651958ceff556cbc5f355e08bbf1"
Last-Modified: Tue, 21 Nov 2023 12:30:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DE2A7AC876C16
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223378#39689154/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/exit-new/exit1.js
200 OK 3.5 kB URL GET HTTP/1.1 girlsflirthere.life/media/exit-new/exit1.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 625e5e2950612f771e246beb33c9ea61
e4fc251c6c000496c285f8dc3fa097040b031681
618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/exit-new/exit1.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: application/javascript
Content-Length: 3473
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Mon, 20 Feb 2023 09:32:43 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DE3EAB8F13857
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843279#623580037/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/utils.js
200 OK 7.5 kB URL GET HTTP/1.1 girlsflirthere.life/util/utils.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/utils.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: application/javascript
Content-Length: 7512
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Mon, 20 Feb 2023 09:36:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DE428AE763EFE
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676885559#334512232/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/toon2/css/style.css
200 OK 8.6 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/toon2/css/style.css
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with CRLF line terminators
Hash 549edaff59c582a6a3ca91f95c60ea71
a9edcba7d667efcfd812bcd413ccbdcb2b67cc88
b28722475035fc8fdc751034c2df8f49d66eb25cf28cf031c4e7357414a131da
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/css/style.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: text/css
Content-Length: 8608
Connection: keep-alive
ETag: "549edaff59c582a6a3ca91f95c60ea71"
Last-Modified: Wed, 20 Sep 2023 15:22:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DE2A7AF1F040B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134506#144014750/gid:0/gname:root/mode:33279/mtime:1655387458#962597414/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.962597414Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
magni-dcm.info/zclkvisitor/ad221181-934d-11ee-9224-12a39919a469/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
5.4 kB URL magni-dcm.info/zclkvisitor/ad221181-934d-11ee-9224-12a39919a469/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1709), with CRLF, LF line terminators
Hash a7d894c61fd1f728699ca81bca316ca8
6e60904eaf044df8ea32c8fc309d44e5483ee614
468c24f013cca528f2d155954fb61f0d18877942c543663944b47d68ecd82f5c
GET /zclkvisitor/ad221181-934d-11ee-9224-12a39919a469/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 HTTP/1.1
Host: magni-dcm.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://webrocksr.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 09:07:12 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
server: ygphItfi
X-Firefox-Spdy: h2
girlsflirthere.life/media/bb.js
200 OK 639 B URL GET HTTP/1.1 girlsflirthere.life/media/bb.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with very long lines (639), with no line terminators
Hash 0d553e4bac91c74bfee2dbabba61e99e
5af71e2377c9c012a7826a695f2724901941b19b
1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/bb.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: application/javascript
Content-Length: 639
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Mon, 20 Feb 2023 09:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DE3F82657DE03
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676832256#258761277/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/toon2/images/123.jpg
200 OK 179 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/toon2/images/123.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1069, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=620], progressive, precision 8, 620x1032, components 3\012- data
Size 179 kB (179176 bytes)
Hash a2d245e1c43c61ca34bea001510dd6d9
7a7e0dbf8bb132958fecd093e6741ffe49d060b5
f6113b1f6bdd279404fd53c920f6ba411b66a897db4c67e16d2129af22370a57
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/images/123.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: image/jpeg
Content-Length: 179176
Connection: keep-alive
ETag: "a2d245e1c43c61ca34bea001510dd6d9"
Last-Modified: Wed, 20 Sep 2023 15:22:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DE2A7AED65954
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134506#144014750/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/toon2/js/jquery-2.2.4.min.js
200 OK 86 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/toon2/js/jquery-2.2.4.min.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/js/jquery-2.2.4.min.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: application/javascript
Content-Length: 85578
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2f6b11a7e914718e0290410e85366fe9"
Last-Modified: Mon, 20 Feb 2023 09:32:28 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DE2A7B1B3A25A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843394#515755084/gid:0/gname:root/mode:33279/mtime:1655387458#954597395/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.954597395Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/toon2/images/bg.jpg
200 OK 120 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/toon2/images/bg.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=660, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1279], progressive, precision 8, 1279x660, components 3\012- data
Size 120 kB (119754 bytes)
Hash 842a5629f17ec8342230aa12ea32291a
0f2390a3eda1a71d676f1cd1866956fef8e77090
1c7361fcec43aecb4c517914dde9ecbf1fe1aaa0969411a7a383391236f335f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/toon2/images/bg.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/toon2/css/style.css
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: image/jpeg
Content-Length: 119754
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "842a5629f17ec8342230aa12ea32291a"
Last-Modified: Mon, 20 Feb 2023 09:32:28 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 179DE2A7BADA4D79
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843394#515755084/gid:0/gname:root/mode:33279/mtime:1655387458#958597404/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:58.958597404Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
dl.dropbox.com/u/53952260/blogger.js
1.0 kB URL dl.dropbox.com/u/53952260/blogger.js
IP
File type gzip compressed data, from Unix\012- data
Hash a9846fad5f7015d4c593def10412457b
a38ffd96b6cee5917a86a281d13c91a95fbe4490
c085a1e9d6800ad4809ef1ccaa75c278897376d1789eb230e6cd11663e030c7a
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/53952260/blogger.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://webrocksr.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 05 Dec 2023 09:07:11 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: a7f331dd5aea4bac8b0a8a62f563c29f
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://girlsflirthere.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:00:51 GMT
expires: Fri, 29 Nov 2024 04:00:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 450383
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://girlsflirthere.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 21:59:03 GMT
expires: Tue, 03 Dec 2024 21:59:03 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
age: 40091
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
girlsflirthere.life/favicon.ico
204 No Content 0 B URL GET HTTP/1.1 girlsflirthere.life/favicon.ico
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Connection: keep-alive
Cache-Control: no-transform
girlsflirthere.life/cookie/js.cookie.js
200 OK 4.3 kB URL GET HTTP/1.1 girlsflirthere.life/cookie/js.cookie.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
Fingerprint40:00:A6:A6:A3:64:36:41:7F:63:66:A5:32:64:ED:1E:54:1C:0C:18
ValidityWed, 11 Oct 2023 04:14:18 GMT - Tue, 09 Jan 2024 04:14:17 GMT
File type ASCII text, with very long lines (4532), with no line terminators
Hash 28792605aa4c45fe0b784971e772db11
daf7a1639580b428860f078c568ffb78842ffd00
4fd533b3bcaef8e06e933d2bb14afb8acb8a266fd600ab7b9585d37f2fdcb324
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cookie/js.cookie.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Cookie: sid=t5~yqatynd1qu0u2tixk5hnug1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 09:07:14 GMT
Content-Type: text/javascript
Content-Length: 4264
Connection: keep-alive
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Tue, 21 Nov 2023 12:29:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 179DE3BD789FB881
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1699191628#679657031/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z
Expires: Wed, 04 Dec 2024 09:07:14 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext
200 OK 33 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=555599315c57c1e737c2499d84544823-11246-1205
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 879f440d5e214e00a0c01b00780a7454
3882dac7298d5ae9598c84d322f45ff59ec815e0
d64259d39864129775a1a42bfebd44c3a02ae14bb8dbfc1b1f84cd720ecb82b3
GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 09:07:14 GMT
date: Tue, 05 Dec 2023 09:07:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
142.250.74.129
206.189.58.138
185.155.184.85
46.8.8.100