8ngpg0ksl6i_49fjrtqchtca.imhydlipenpatsmas.gq/
188.114.97.1302 Found 0 B URL HTTP/1.1 8ngpg0ksl6i_49fjrtqchtca.imhydlipenpatsmas.gq/
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.gq domain
GET / HTTP/1.1
Host: 8ngpg0ksl6i_49fjrtqchtca.imhydlipenpatsmas.gq
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 27 Jan 2023 08:04:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.dirtybaby.one/?s1=fhy1
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zFnfXK3Qt%2BYz%2F2o01PSQ8vPVxl%2FjYGLyJrHjc%2BaAut9Kq6M5pyUGoNi2S9U96irxca0xgaSXnyptqlpi%2BrLdcnad0ZnubK3uT%2BplcjXMjyiWrLi2w38QP072lkx4a8yyNE8d3e2%2FJUn6Y3jo%2F%2FFaqcqmp7x58BcS64W2Ixk8%2Bww%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fffaf3cd81b4f7-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20794
Expires: Fri, 27 Jan 2023 13:51:29 GMT
Date: Fri, 27 Jan 2023 08:04:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3105
Expires: Fri, 27 Jan 2023 08:56:40 GMT
Date: Fri, 27 Jan 2023 08:04:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15876
Expires: Fri, 27 Jan 2023 12:29:31 GMT
Date: Fri, 27 Jan 2023 08:04:55 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 07:42:58 GMT
content-type: application/json
age: 1317
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SeZZFN5X1Yhm8X3QByegrnzYKfuiFKd94gxdoww4Eicv6DU9eMljmHMjhrxKOYUb4jjH07s6Qto=
x-amz-request-id: ZKRC006TRAGGQFFB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 07:49:20 GMT
age: 935
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 08:04:55 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 07:41:40 GMT
age: 1395
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.dirtybaby.one/?s1=fhy1
188.114.96.1200 OK 1.8 kB URL HTTP/1.1 www.dirtybaby.one/?s1=fhy1
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fef49c3a0a0383a843b8a4f6d2709d17
71fd7b3a700dfd09d2b6ebfec0a184e4c94b5bb5
57b12b85061367215947de4df2dab0ac97b5b21f36bad64a36025ffe325c4bbb
GET /?s1=fhy1 HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; expires=Fri, 27-Jan-2023 10:04:55 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; expires=Fri, 27-Jan-2023 10:04:55 GMT; Max-Age=7200; path=/; httponly; samesite=lax
SRVNAME=w2; path=/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s7gz4eTXE5fTq0oXuyCpzNeQlNPrwrBHhDCku0Y5kNKMlVCL%2FSgiuhjULk5dLA7Pv%2FsFfTTLpP5vOYJ2zr4Dn6gkgR43a0i0%2BseH3K6v3fNyRFbKCX%2FFfCWZWR%2FJ2ZK3Zlamdw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fffaf55be61c12-OSL
Content-Encoding: gzip
www.dirtybaby.one/scripts/fp.v3.113939745c57c674e84043606f6a9bd3.js
188.114.96.1200 OK 16 kB URL HTTP/1.1 www.dirtybaby.one/scripts/fp.v3.113939745c57c674e84043606f6a9bd3.js
IP 188.114.96.1:0
File type Unicode text, UTF-8 text, with very long lines (39939)
Hash 827498670f40991c9f2061d58c2070cd
63ee3d8084365a93ae9b07af45750c47830188fb
c4909410957e882d738f3dcbbb34b161842b38751d617229f724593d8992650c
GET /scripts/fp.v3.113939745c57c674e84043606f6a9bd3.js HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dirtybaby.one/?s1=fhy1
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:55 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:08:00 GMT
etag: W/"63c65760-9c0b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6771
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aQqfjn0YNS39H9%2Bvd1LvgUbnfddm6Sd389P%2FTy0h3tRQkLxBd%2F6Osmts%2FK9gjrGLCCwdgYlCVb2NO1qMJrm33fTJWBtqDqCjCjumR1mZHUBQZVnx1AAwN0RHNZzO%2BcJpp5dpPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffaf8be921c12-OSL
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2279
Expires: Fri, 27 Jan 2023 08:42:54 GMT
Date: Fri, 27 Jan 2023 08:04:55 GMT
Connection: keep-alive
e1.o.lencr.org/
95.101.11.115200 OK 345 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 96ffa949e7ee793a3a53688f90be3b09
8babf3d9e1b8d6a5485f8ddba80c8af7865069cf
2583edb1723dbeb0a514864109cb6f9b28ad320baf5fc4659f28eb2185232d90
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2583EDB1723DBEB0A514864109CB6F9B28AD320BAF5FC4659F28EB2185232D90"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10214
Expires: Fri, 27 Jan 2023 10:55:09 GMT
Date: Fri, 27 Jan 2023 08:04:55 GMT
Connection: keep-alive
www.dirtybaby.one/landings/44/js/vendor.d1391b6f25178e4e489cf8e63ca85f7e.js
188.114.96.1200 OK 35 kB URL HTTP/1.1 www.dirtybaby.one/landings/44/js/vendor.d1391b6f25178e4e489cf8e63ca85f7e.js
IP 188.114.96.1:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 94383d858fd66d0080eefa396d845e35
7d841ac0f8413045b5191e92dc434548a3b09aea
99a273e23f21f2e28af19c6c509dff6fd6796695bfe7ad3263e8ecb88658ac03
GET /landings/44/js/vendor.d1391b6f25178e4e489cf8e63ca85f7e.js HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dirtybaby.one/?s1=fhy1
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:56 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:07:59 GMT
etag: W/"63c6575f-18ba9"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1AOnWrnJLXIMEVbA2nHoRtI38atKdHqtORpVJYcbRx1a%2FA0zx3LzKF0ZghE708F2h8yNsLCOm8u%2BsqKyQOt5vCODL5pByYAJH6AwG70LgNRv%2Fo7pAx%2BBAT2C28EWrXN3Xe%2BbTg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffaf8b8ebb51b-OSL
Content-Encoding: gzip
www.dirtybaby.one/landings/44/fonts/vendor.857e14bd2eb6e6a5e2c65ca20cc8c76f.css
188.114.96.1200 OK 4.2 kB URL HTTP/1.1 www.dirtybaby.one/landings/44/fonts/vendor.857e14bd2eb6e6a5e2c65ca20cc8c76f.css
IP 188.114.96.1:0
File type ASCII text, with very long lines (15852)
Hash 2ace26c7c7ae7d88d105aa939b115f70
4db2fec004f55582d153efe41c4540d16c50fe59
6e9ce90b592c7d7b0ed8e811f2b968a70d562d27671d569e7dfc28c0886be710
GET /landings/44/fonts/vendor.857e14bd2eb6e6a5e2c65ca20cc8c76f.css HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dirtybaby.one/?s1=fhy1
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:56 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:07:59 GMT
etag: W/"63c6575f-3ded"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wdAEdip9ilMqqTQLkpoi2sBaGHvV4MnrwKQ4a5HxTcBu7jvYljoE2igbJCm0ARu08ddyPTCeqTynKZjyFh%2FxP4SVdrT54LSdP8exXy8QYwgX0JPTNSermeWJgpuo3dtVZuYfqA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffaf8be8bb51d-OSL
Content-Encoding: gzip
e1.o.lencr.org/
95.101.11.115200 OK 345 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 96ffa949e7ee793a3a53688f90be3b09
8babf3d9e1b8d6a5485f8ddba80c8af7865069cf
2583edb1723dbeb0a514864109cb6f9b28ad320baf5fc4659f28eb2185232d90
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2583EDB1723DBEB0A514864109CB6F9B28AD320BAF5FC4659F28EB2185232D90"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10213
Expires: Fri, 27 Jan 2023 10:55:09 GMT
Date: Fri, 27 Jan 2023 08:04:56 GMT
Connection: keep-alive
push.services.mozilla.com/
52.41.131.197101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.131.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bcdiWlL2zTv6rSEH+bLkAg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5KwIJrmt5HKHcqtgqnQkSOva514=
www.dirtybaby.one/landings/44/fonts/Lato/Lato-Regular.woff
188.114.96.1200 OK 309 kB URL HTTP/1.1 www.dirtybaby.one/landings/44/fonts/Lato/Lato-Regular.woff
IP 188.114.96.1:0
File type Web Open Font Format, TrueType, length 308680, version 0.0\012- data
Size 309 kB (308680 bytes)
Hash cd6c6aac15595c65e75760bce456198a
43f6b15d9dedd33637cc5f34d80f7f2613bc28a6
7cf624c2cd85b4ac2c7b44b09627034156408931974cdbcec6df1223ea7a24e3
GET /landings/44/fonts/Lato/Lato-Regular.woff HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.dirtybaby.one/landings/44/fonts/vendor.857e14bd2eb6e6a5e2c65ca20cc8c76f.css
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:56 GMT
Content-Type: application/font-woff
Content-Length: 308680
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:07:59 GMT
etag: "63c6575f-4b5c8"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BIAjZHIJBITfzv0wBLGCUEvQLy%2FQe%2B14gxJfWcEeb6nq%2F2uDKEPgiCvAhrsG%2Bh4UrPlAdfoSklviD9LNj9bvoY8tfAbdrJytT7J4eiIKe4kdyiY%2B8fPR7wSfWJgw%2B1ymH4xDGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffafb5993b51d-OSL
www.dirtybaby.one/landings/44/fonts/Lato/Lato-Black.woff
188.114.96.1200 OK 307 kB URL HTTP/1.1 www.dirtybaby.one/landings/44/fonts/Lato/Lato-Black.woff
IP 188.114.96.1:0
File type Web Open Font Format, TrueType, length 307448, version 0.0\012- data
Size 307 kB (307448 bytes)
Hash 11ccdd05f3122b41c32fdcdb99912633
f7b9181a79a42f46df7f1654b033ab4caddc9bcc
7c5b01bafa24bbb18ea8fcabc795b38230fe3c80987cf1bdbb561369ad4573a6
GET /landings/44/fonts/Lato/Lato-Black.woff HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.dirtybaby.one/landings/44/fonts/vendor.857e14bd2eb6e6a5e2c65ca20cc8c76f.css
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:56 GMT
Content-Type: application/font-woff
Content-Length: 307448
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:07:58 GMT
etag: "63c6575e-4b0f8"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=55CzOxSLVEnAb%2Bw076bNrZ4CRfPvER1T5Nd4zY%2BjtEnTPhg40ekSjKNstdIZON3ky0hZiK6gnai4WQRlw%2BjKkAtTdqZd1Qq1FT6Xj%2B9FfDRBFjat5XQM%2Fv7qTIH4LadOTt412Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffafb58391c12-OSL
www.dirtybaby.one/favicon.ico
188.114.96.1200 OK 0 B URL HTTP/1.1 www.dirtybaby.one/favicon.ico
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dirtybaby.one/?s1=fhy1
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:56 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:07:57 GMT
etag: "63c6575d-0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3133
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ChFDskM6cvLigl2SR95aGvtv4wnaiEkzdrWVgx8tvWXDpK9InhLuASD9jWMoQMKxDKIJijbo9jm7NY5TtIJH1PMdYEdoghjpPDcx04Iv1%2BmmTNLVgLIj9GCbsQyOMTZhVZe6JQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffafdac6db51d-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11465
Expires: Fri, 27 Jan 2023 11:16:02 GMT
Date: Fri, 27 Jan 2023 08:04:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11465
Expires: Fri, 27 Jan 2023 11:16:02 GMT
Date: Fri, 27 Jan 2023 08:04:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11465
Expires: Fri, 27 Jan 2023 11:16:02 GMT
Date: Fri, 27 Jan 2023 08:04:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:01:22 GMT
age: 32615
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 464592dade1d7207d58b22d5d09d9254
3caa2537edfe4c738540884b3eda51e437d26f4d
c0cdec94ff460c4b875657bb53ed90ef2ef786a2b8095d1ebf09365556536375
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4627
x-amzn-requestid: 38f2ed09-3a2e-4b5d-bde9-24fd7467d1a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZJE-BIAMFvdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3a-4ad90b1c2883444f547b6f84;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ErJ6DOjDOIMHxXIoZ2ds8Fts1RbThjP5X2qRvr6vNt6iNVeOVpQcUw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:25:36 GMT
age: 13161
etag: "3caa2537edfe4c738540884b3eda51e437d26f4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc869235086902c4acc379733b6bfdb8
0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae
e614e29b14e69209fd4b82a688290f7a3f541909833a6558cf480aca899bab6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9056
x-amzn-requestid: 81cf473d-8dc6-49e7-b012-d0b7dfaec7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB4COHTlIAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3a0e-0848461c054db5c66fde9107;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 06:51:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fdefZSZfSJi1-C7ZTSahawckLN-To4P91H-n1cyPqw34f18VzTeHRg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:54:06 GMT
age: 69051
etag: "0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa4a77d-7ed7-4b76-bcb0-24d1679a5359.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa4a77d-7ed7-4b76-bcb0-24d1679a5359.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2dfd3530064d405643a31fedd4fd7618
d8268771360e609892c5506f3114dc4f73c0aad0
b4790125e39e400c30d640cd0c64497256168892405511ec3d43b03dc0e5715a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa4a77d-7ed7-4b76-bcb0-24d1679a5359.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10973
x-amzn-requestid: caff330a-0cc6-488d-be82-c09c2bb87408
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLQYTEduIAMFZkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cdfa9b-1f26b225062c8465440cf460;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 03:10:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L-i1AEFIP6AoWwjds6n7ohyz-Ls1HoF9CXNJS7RRDFApBceBZXmoxA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:29:15 GMT
age: 70542
etag: "d8268771360e609892c5506f3114dc4f73c0aad0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bad60daf652c598a06510ff955137b69
235bf4642e726bb6a303fe1b69238e2e973414cb
d655c5ac17274a30a89c31674e14dc9c1b6bc39bfff94db1c9ff0d8006bb673b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12508
x-amzn-requestid: 68787c38-72fe-4d8a-9521-aeb9efa56b05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYWyGIHoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca075e-1ee9488d2dd0437728beac94;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2RZzMCqjRpKbm-g_6vAq1YV4LQ5RAB9HrkKCQx_ah4C6PnAzHZpKCg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:49:04 GMT
age: 47753
etag: "235bf4642e726bb6a303fe1b69238e2e973414cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 869cdfba2637cc932ce387317a3c485e
51d87a5223d87c959bf27b2a825dce0a28f52ada
6dc4247dd3110836195f9962463bd8265be89633e9e589bf19955991751c26fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5669
x-amzn-requestid: 17f6235c-d495-4813-9453-407331e0dcad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZSH4fIAMFxeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3b-67ff5c7f416727670e7c3b21;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uBZkutqH9dy9U8-_i3LISu9nYOtCTP8YtgxvgZVywkDx7bRzLjqUhw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:27:02 GMT
age: 13075
etag: "51d87a5223d87c959bf27b2a825dce0a28f52ada"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.dirtybaby.one/landings/44/images/3.png
188.114.96.1200 OK 254 kB URL HTTP/1.1 www.dirtybaby.one/landings/44/images/3.png
IP 188.114.96.1:0
File type PNG image data, 1366 x 818, 8-bit colormap, non-interlaced\012- data
Size 254 kB (254013 bytes)
Hash f1953375b296f3c2df5d87215bd0a464
816b7aec1a98a472dc4a66c4e8391cf3ed498023
cebb0c0eb74f463525d9c8240dc30fda73b461e03a8b620c10b166ffbabfe14e
GET /landings/44/images/3.png HTTP/1.1
Host: www.dirtybaby.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dirtybaby.one/landings/44/fonts/vendor.857e14bd2eb6e6a5e2c65ca20cc8c76f.css
Cookie: XSRF-TOKEN=eyJpdiI6Ii9wei9vRWJHRk1JRUdoR0VLQ2g3MFE9PSIsInZhbHVlIjoibEZLbHE2V3pjMVlCaWZKMklTM0kvVmo3cVYwUldWMHZUdWFyaVFQczVDcVBuS0d1TWhnclVsazBkaTJIOUcrLyIsIm1hYyI6IjdhMmRmNTViYjExODIzMGVjNmI2ZTNhMzVlNWM1YjY1Y2UyNWEwYmNkNzc0NzhiNjhlMjc5OWY1MWRmNDk1MTUifQ%3D%3D; laravel_session=eyJpdiI6IkkrQUUyYjNGVVplMnJER1JTMi9EMGc9PSIsInZhbHVlIjoiOXYyTEhmS1k2c2ZhdmFVMVkxb2dDL3k1UCsxUTVlYVByOVVmbk9tWVg1WXhXN3I2OEdqcjN5RTRBcjJJc0ZVRyIsIm1hYyI6ImQ2NjgzNGI0ODA3Y2I5ODUwMDZhMTI3Yjg3M2NjZDM4NGJlMDFlZWU3ODgxNTFhYWVjYmMzZDIwMzY1YTViOWEifQ%3D%3D; SRVNAME=w2
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 08:04:56 GMT
Content-Type: image/png
Content-Length: 254013
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 08:07:59 GMT
etag: "63c6575f-3e03d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jA3euoAUBH2LWiyI7UYXShSDoMOwlmi6MaWgI59tZQJFZmJ0gXH4VmcUquc3FhTUi3BTCD8%2FM5wvda5Hsg66PVNIvb%2BQTb9uL%2F3JnWHq5eKlSY3RHoE3zymLtWjpStDYNK4MjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fffafb4c54b51b-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e96f3ea585b5fa8ed6446ed16e2b4b2
f90c205f370a2426dffe3c21b24bfa551b385556
6967ba25887f87200fcb39a3e6f065fd27596b2ebcf0d33a2751c655d6e724f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4272
x-amzn-requestid: e051c22b-c2ec-4e59-b29b-ba1464d8015b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRz28G13oAMFeeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d099c5-48b013ff34b9702a6d2fd560;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 02:53:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X4SfAYS0JvW4sUNqSuBERNBwaI_xgKugxZ76_fsih_LSnImMC7Pnzg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 03:37:14 GMT
age: 85438
etag: "f90c205f370a2426dffe3c21b24bfa551b385556"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
svntrk.com/assets/fhy1_63d385a79555b.js
188.114.97.1200 OK 0 B URL HTTP/2 svntrk.com/assets/fhy1_63d385a79555b.js
IP 188.114.97.1:0
GET /assets/fhy1_63d385a79555b.js HTTP/1.1
Host: svntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dirtybaby.one/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 08:04:56 GMT
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
set-cookie: svnimp=63d385a8150ba; path=/; secure; httponly; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lHpHCIb%2B1UBEVXWzw%2FzWbeNKQDKreh19xUqZu3swHrXj0%2FF6AxqSkyT6P9Q9j0PUAhVDMb5GXbBkAnTDZlJ1hpTKtjdJrvYqX7lrEgSGGBL316J5lJt8AAXuqcK4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fffaf998ceb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2