bluemediafile.site/img/FNF.jpg
172.67.217.198200 OK 25 kB URL GET HTTP/3 bluemediafile.site/img/FNF.jpg
IP 172.67.217.198:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 369x325, components 3\012- data
Hash 7418012172aa768421d58dd355d161ee
59d544071c9e9989a184fd9478fb2d9c7b2e311e
20ed5ba08f022de75d81c278a9a1660119161d8790202828035b67170ad1b68c
GET /img/FNF.jpg HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:48 GMT
content-type: image/jpeg
content-length: 24818
last-modified: Sun, 07 Mar 2021 22:22:08 GMT
vary: Accept-Encoding
etag: "60455210-60f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 901
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h0wsPXRyIOIX2%2BeWJ0pxLb5HyW%2F6e9V6QHeDsoywLDpgQxQfUvwAav5ExuE6xb5ROKCV79fp5EUbH2X27%2BC7yxb07Wl5JSmSaaNkHyqpemlzzovUoDjf3IlKptat1faKWlm%2B9VI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3b3c010b45-OSL
alt-svc: h3=":443"; ma=86400
bluemediafile.site/img/AdblockDetected.jpg
172.67.217.198200 OK 1.8 kB URL GET HTTP/3 bluemediafile.site/img/AdblockDetected.jpg
IP 172.67.217.198:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 9cdc27677a5cb0141819b1568704ed75
61c073267ac68d157c7ce3fbe8a08c9be4d7607f
9ee2d8c99591cd61d18edd30a3b241c6198c3f76fbb05f9a9ea6e5a98c4f1f1b
GET /img/AdblockDetected.jpg HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:48 GMT
content-type: image/jpeg
content-length: 1849
last-modified: Sat, 28 Sep 2019 21:03:28 GMT
vary: Accept-Encoding
etag: "5d8fcaa0-739"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 901
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fCtQ%2FPe7tQTifC01LuOlejJSwTnvzMQxIKpPb4rTfmgiyRX3e0QEALIV7Bs%2FB4gVAXBwJOJ6fgDNqep5OZaVl184askvk94gCUZwYKh56jO%2BlM9JbeET6drfBNDKoalRCq0zjEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3b3c030b45-OSL
alt-svc: h3=":443"; ma=86400
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
142.250.74.170200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP 142.250.74.170:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 21:54:55 GMT
expires: Mon, 25 Nov 2024 21:54:55 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 494093
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
igg-games.com/wp-content/uploads/2023/10/na1.avif
104.26.9.161200 OK 4.6 kB URL GET HTTP/2 igg-games.com/wp-content/uploads/2023/10/na1.avif
IP 104.26.9.161:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectigg-games.com
Fingerprint3D:AC:F5:B8:0D:BC:AB:0D:AB:0F:45:08:7C:01:F9:7A:D1:A7:14:AD
ValiditySun, 12 Nov 2023 09:29:42 GMT - Sat, 10 Feb 2024 09:29:41 GMT
File type ISO Media, AVIF Image\012- data
Hash 146087d2868b0be7a826d6b393f43f26
92a3e18a3ed0ae8dd160f867e015a79e49f28a36
b2031be62f1e26e9ea3696a80d529351c3026cd35254e5dafe23d0ca875b607e
GET /wp-content/uploads/2023/10/na1.avif HTTP/1.1
Host: igg-games.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:48 GMT
content-type: image/avif
content-length: 4551
last-modified: Mon, 23 Oct 2023 11:50:42 GMT
vary: Accept-Encoding
etag: "65365e12-11c7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 33805
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a%2BIo6Lxs3ywwPrMWveWCElhdMwwPipU435%2BE4EKxx6x2EafwAtGLA9HRyc9LXHOTAXybR96O5uu186WMn165TgX9JI1en6bfPfkP%2FWdyHGawjrow8flIvYPi3j4lU0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3b9a77b529-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-155998700-1
142.250.74.168200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-155998700-1
IP 142.250.74.168:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 18d55888f4928e23022f57133ba32262
553d133509e2bb845b08fd872de658bf6c20e8bc
d68a728957746de81e523252f19d34a52796034818c3775c679826687a097c89
GET /gtag/js?id=UA-155998700-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 15:09:48 GMT
expires: Sat, 02 Dec 2023 15:09:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69021
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-H5HV9R7NL8
142.250.74.168200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-H5HV9R7NL8
IP 142.250.74.168:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 5d6c87fb4be9b346a6b6fdd7c72a6ddc
ea511cf8f180c0744976ac93605e2ab6b8f15ff9
3603c776e07e5e74fbef9a1ba88f88d17faf158acc47cd47689a51dc8a7ed1a6
GET /gtag/js?id=G-H5HV9R7NL8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 15:09:48 GMT
expires: Sat, 02 Dec 2023 15:09:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92986
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
galeaeevovae.com/tXltpqVRuh3Ul/56692
172.255.6.166200 OK 25 B URL GET HTTP/1.1 galeaeevovae.com/tXltpqVRuh3Ul/56692
IP 172.255.6.166:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerLet's Encrypt
Subjectgaleaeevovae.com
FingerprintC1:BA:BA:CD:2B:1D:D5:FB:D5:C0:94:7A:1C:E0:C3:43:0D:FE:D0:EE
ValiditySat, 18 Nov 2023 23:35:00 GMT - Fri, 16 Feb 2024 23:34:59 GMT
File type ASCII text, with no line terminators
Hash f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
GET /tXltpqVRuh3Ul/56692 HTTP/1.1
Host: galeaeevovae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 15:09:49 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://bluemediafile.site
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sun, 03-Dec-2023 15:09:49 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sun, 03-Dec-2023 15:09:49 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
cudwortparve.top/f656b48bc44f5e/48166
142.91.159.180200 OK 26 B URL GET HTTP/1.1 cudwortparve.top/f656b48bc44f5e/48166
IP 142.91.159.180:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerLet's Encrypt
Subjectcudwortparve.top
Fingerprint81:3E:6B:6A:D0:52:E8:06:33:3F:7A:FF:4E:43:B2:6C:5C:D1:4A:EE
ValidityTue, 28 Nov 2023 03:09:36 GMT - Mon, 26 Feb 2024 03:09:35 GMT
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f656b48bc44f5e/48166 HTTP/1.1
Host: cudwortparve.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 15:09:49 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://bluemediafile.site
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sun, 03-Dec-2023 15:09:49 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sun, 03-Dec-2023 15:09:49 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
lingrethertantin.com/utx?cb=mYM83kbTBEFs&top=bluemediafile.site&tid=809779
143.204.55.57204 No Content 0 B URL GET HTTP/2 lingrethertantin.com/utx?cb=mYM83kbTBEFs&top=bluemediafile.site&tid=809779
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=mYM83kbTBEFs&top=bluemediafile.site&tid=809779 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://bluemediafile.site
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 02 Dec 2023 15:10:49 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cqqidIpEejYQM-bI0M3fYef-IxJH_Cri-BcAOIq0GFFfnhE0BXhchg==
X-Firefox-Spdy: h2
ldrenandthe.org/M09FOTUccCZKCH58A0BhAxYCa3B1and/UUQdB2t9W38HCVl0KnZ4E0cmIQQNA3ZyDgwVPyxdCAJpNk1URzo2BAQVJitfWg5pMwQEHXxxFwYHYXUfQA5+Y01FUih4CBNDOzFVCAJ4dQgAAXZyAAEBd30
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/M09FOTUccCZKCH58A0BhAxYCa3B1and/UUQdB2t9W38HCVl0KnZ4E0cmIQQNA3ZyDgwVPyxdCAJpNk1URzo2BAQVJitfWg5pMwQEHXxxFwYHYXUfQA5+Y01FUih4CBNDOzFVCAJ4dQgAAXZyAAEBd30
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /M09FOTUccCZKCH58A0BhAxYCa3B1and/UUQdB2t9W38HCVl0KnZ4E0cmIQQNA3ZyDgwVPyxdCAJpNk1URzo2BAQVJitfWg5pMwQEHXxxFwYHYXUfQA5+Y01FUih4CBNDOzFVCAJ4dQgAAXZyAAEBd30 HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HmRSpGuhVVBzt%2F%2FmUwNFwzWIQWULc1Ni9YulXICq9kYR34YNEnNLOuqbGGk9%2FmP7MhZYiwltHIDW%2Bx83Ly9%2FpeYCtheLpVjhQSsTsOPo3XczTMg9eQnBn9bUbXyDHsMQ7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3f3bff5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lingrethertantin.com/YW9kWlgADQc3ZwBSBnwtEwNZf2onSlYcPFNaFzk5UgcBNTlQHAt0Ow0AET4+EwAKLnYPChB/aicoBg9hFz5XCxcoLiE2CxkECRlrVCI8AgI4CyFrFCs9EykfCV4dGTYwByoSNwsqDmIbKClQHxZRHFMcCwUlPA0zJSYMNRMCBA83HwZaHQI1NDknCWkyC1UTAjEYJTULM1cLHAsgNyUzKyYjAxQULghRf2ojKDUTaSMGXAMcJh8AGA0nKwJqKBk9IQ9sIwZUCxkLCAcAMzsLLQgsDD0Ia31TLTxoaSQ8LC0sOwQ+PhcgNhALNA0ePBseMzdXYgAFOiYTPiJCVTcKDV9dHQ87JygSbQcLCCo8OwQUIgogABUeGwYNNxJoEQwxCDsHXl0jCicXFQIALDwmHmgqJTYpDgADVBwKN15SCwAvPCMSEgRJDik3Dx9ZP280NlEWCSoAC2sfIg
143.204.55.57200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/YW9kWlgADQc3ZwBSBnwtEwNZf2onSlYcPFNaFzk5UgcBNTlQHAt0Ow0AET4+EwAKLnYPChB/aicoBg9hFz5XCxcoLiE2CxkECRlrVCI8AgI4CyFrFCs9EykfCV4dGTYwByoSNwsqDmIbKClQHxZRHFMcCwUlPA0zJSYMNRMCBA83HwZaHQI1NDknCWkyC1UTAjEYJTULM1cLHAsgNyUzKyYjAxQULghRf2ojKDUTaSMGXAMcJh8AGA0nKwJqKBk9IQ9sIwZUCxkLCAcAMzsLLQgsDD0Ia31TLTxoaSQ8LC0sOwQ+PhcgNhALNA0ePBseMzdXYgAFOiYTPiJCVTcKDV9dHQ87JygSbQcLCCo8OwQUIgogABUeGwYNNxJoEQwxCDsHXl0jCicXFQIALDwmHmgqJTYpDgADVBwKN15SCwAvPCMSEgRJDik3Dx9ZP280NlEWCSoAC2sfIg
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3044), with no line terminators
Hash 465a1c5a1297d79026d364e25c4c6e67
ffbaef41f942b2d1e624e557bc34425aec07ec28
d1a4f5f39fdd37f61870eb20a56bfdf4c259d1f153eaaabd3875bd54f60a53fe
GET /YW9kWlgADQc3ZwBSBnwtEwNZf2onSlYcPFNaFzk5UgcBNTlQHAt0Ow0AET4+EwAKLnYPChB/aicoBg9hFz5XCxcoLiE2CxkECRlrVCI8AgI4CyFrFCs9EykfCV4dGTYwByoSNwsqDmIbKClQHxZRHFMcCwUlPA0zJSYMNRMCBA83HwZaHQI1NDknCWkyC1UTAjEYJTULM1cLHAsgNyUzKyYjAxQULghRf2ojKDUTaSMGXAMcJh8AGA0nKwJqKBk9IQ9sIwZUCxkLCAcAMzsLLQgsDD0Ia31TLTxoaSQ8LC0sOwQ+PhcgNhALNA0ePBseMzdXYgAFOiYTPiJCVTcKDV9dHQ87JygSbQcLCCo8OwQUIgogABUeGwYNNxJoEQwxCDsHXl0jCicXFQIALDwmHmgqJTYpDgADVBwKN15SCwAvPCMSEgRJDik3Dx9ZP280NlEWCSoAC2sfIg HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1195
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n6yjKskNmLt4qqlw09Ef4tD4hvkKn_yvZAcc_Cjv6LeqLGKV_F1k-A==
X-Firefox-Spdy: h2
lingrethertantin.com/c0k0a24SK1cGURJ0Vk0bASUJTlw1bAYtCkF8RwgPQCFRBA9COltFDR8mQQ8IASZaH0AdLEBOXDUhYTMoOwZwCBc7IFgOLTAcbSIZJgZuPjgEDXUhXTQzZjM5IA95KDYfPHooOx4ocT4LOBFmOjcneXciBkYNfxM4RQp2Llc2ClgNLR0qYSA4AAJtLQ0eEXI9HSEeciY8CX1VDgUDGH8TJxgfBSZaOw11Dj8ZC3kgAhcHeyleAR5mIQQ9en08LEAbcA8WMQh7KVYZHwQqByUBYSI5IB9hDz8UDm09V0ABZTo6JQFhIj83LlIIPwQabQEgGgpTCB4hehkmCjELej4KIiFyIV8heVE6NBsbcwAnOydmLwpCcGcmBhwmfDo7KxgHCCQxe3IqCgQiZzJeNiFhPjtDD00DLzYkeVgKFC53DV41IWA6HhRvXhgBHTkJJS8qLGAKPgEGbFgGJSVHDg
143.204.55.57200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/c0k0a24SK1cGURJ0Vk0bASUJTlw1bAYtCkF8RwgPQCFRBA9COltFDR8mQQ8IASZaH0AdLEBOXDUhYTMoOwZwCBc7IFgOLTAcbSIZJgZuPjgEDXUhXTQzZjM5IA95KDYfPHooOx4ocT4LOBFmOjcneXciBkYNfxM4RQp2Llc2ClgNLR0qYSA4AAJtLQ0eEXI9HSEeciY8CX1VDgUDGH8TJxgfBSZaOw11Dj8ZC3kgAhcHeyleAR5mIQQ9en08LEAbcA8WMQh7KVYZHwQqByUBYSI5IB9hDz8UDm09V0ABZTo6JQFhIj83LlIIPwQabQEgGgpTCB4hehkmCjELej4KIiFyIV8heVE6NBsbcwAnOydmLwpCcGcmBhwmfDo7KxgHCCQxe3IqCgQiZzJeNiFhPjtDD00DLzYkeVgKFC53DV41IWA6HhRvXhgBHTkJJS8qLGAKPgEGbFgGJSVHDg
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3051), with no line terminators
Hash 328287de75b890371e2de8b24136fe32
bd26e5ec2f25e03a53f3ecce705003953b288e32
ec9429df934a8c8ab77e83a30efbdfa5d208df2e99869765a464cb32f34327eb
GET /c0k0a24SK1cGURJ0Vk0bASUJTlw1bAYtCkF8RwgPQCFRBA9COltFDR8mQQ8IASZaH0AdLEBOXDUhYTMoOwZwCBc7IFgOLTAcbSIZJgZuPjgEDXUhXTQzZjM5IA95KDYfPHooOx4ocT4LOBFmOjcneXciBkYNfxM4RQp2Llc2ClgNLR0qYSA4AAJtLQ0eEXI9HSEeciY8CX1VDgUDGH8TJxgfBSZaOw11Dj8ZC3kgAhcHeyleAR5mIQQ9en08LEAbcA8WMQh7KVYZHwQqByUBYSI5IB9hDz8UDm09V0ABZTo6JQFhIj83LlIIPwQabQEgGgpTCB4hehkmCjELej4KIiFyIV8heVE6NBsbcwAnOydmLwpCcGcmBhwmfDo7KxgHCCQxe3IqCgQiZzJeNiFhPjtDD00DLzYkeVgKFC53DV41IWA6HhRvXhgBHTkJJS8qLGAKPgEGbFgGJSVHDg HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1199
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: edIoCHonuLMQpAFFE-j4K7CN7x8L_1r6EJY4Q7INH3v66bUf1xkQMg==
X-Firefox-Spdy: h2
lingrethertantin.com/N3N2Sm1WERUnUlZOFGwYRR9Lb19xVkQMCQVGBSkMBBsTJQwGABlkDlscAy4LRRwYPkNZFgJvX3EdFSYBeCUgHz95GjcwDFAqAQEAXwcnHRkCKiF7OHoJRnwiQDkdBAR5ACQ9WBJBNAg/Dwk6IzR2IyAbGXk3MCU8WUsfBClEJSwNCkA8DgwGUUA7eitdBwwTNXo7OQIgAzwRLRp+GR16OwUAPxMlQzAQAhVbFScfGn43M3wvZAMEEF9iEDodGVkpIwQdbjQgPTxlBwQQX2I1OwkvXSogLhxzOzQkPF41QhM1dTExeBlZKScLG1ZBLx88BR9BL19hERACQE8fOyIOATkiOhpmMU9yN2AhNSs1Dh8sDAlFFRwHVXY3ASUiXkIuKxpfGCwfCQQVGAcKY0ERbAdEHBg6UE8FT386ByM8CxpfJh4
143.204.55.57200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/N3N2Sm1WERUnUlZOFGwYRR9Lb19xVkQMCQVGBSkMBBsTJQwGABlkDlscAy4LRRwYPkNZFgJvX3EdFSYBeCUgHz95GjcwDFAqAQEAXwcnHRkCKiF7OHoJRnwiQDkdBAR5ACQ9WBJBNAg/Dwk6IzR2IyAbGXk3MCU8WUsfBClEJSwNCkA8DgwGUUA7eitdBwwTNXo7OQIgAzwRLRp+GR16OwUAPxMlQzAQAhVbFScfGn43M3wvZAMEEF9iEDodGVkpIwQdbjQgPTxlBwQQX2I1OwkvXSogLhxzOzQkPF41QhM1dTExeBlZKScLG1ZBLx88BR9BL19hERACQE8fOyIOATkiOhpmMU9yN2AhNSs1Dh8sDAlFFRwHVXY3ASUiXkIuKxpfGCwfCQQVGAcKY0ERbAdEHBg6UE8FT386ByM8CxpfJh4
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3023), with no line terminators
Hash 71b7d5ce1fe25964115aaf5e60ce2c33
51c1be4af55bc2acf16fd5576f1baf3e835a214c
2b13e06d4a964437ae5a1eacda014e79b25039b045445bc082370ccd89ec6fe2
GET /N3N2Sm1WERUnUlZOFGwYRR9Lb19xVkQMCQVGBSkMBBsTJQwGABlkDlscAy4LRRwYPkNZFgJvX3EdFSYBeCUgHz95GjcwDFAqAQEAXwcnHRkCKiF7OHoJRnwiQDkdBAR5ACQ9WBJBNAg/Dwk6IzR2IyAbGXk3MCU8WUsfBClEJSwNCkA8DgwGUUA7eitdBwwTNXo7OQIgAzwRLRp+GR16OwUAPxMlQzAQAhVbFScfGn43M3wvZAMEEF9iEDodGVkpIwQdbjQgPTxlBwQQX2I1OwkvXSogLhxzOzQkPF41QhM1dTExeBlZKScLG1ZBLx88BR9BL19hERACQE8fOyIOATkiOhpmMU9yN2AhNSs1Dh8sDAlFFRwHVXY3ASUiXkIuKxpfGCwfCQQVGAcKY0ERbAdEHBg6UE8FT386ByM8CxpfJh4 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1179
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tAocnyH6iQtFafXzvJNoKBgRJbSvsC4F0MVhUbA6aWAnAVZiAvA-Fw==
X-Firefox-Spdy: h2
lingrethertantin.com/utx?cb=9WUjOGUjMzWz&top=bluemediafile.site&tid=944745
143.204.55.57204 No Content 0 B URL GET HTTP/2 lingrethertantin.com/utx?cb=9WUjOGUjMzWz&top=bluemediafile.site&tid=944745
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=9WUjOGUjMzWz&top=bluemediafile.site&tid=944745 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://bluemediafile.site
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 02 Dec 2023 15:10:49 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4tDM7naXlY9lzsoG2YfRETGbN8a2YhA5UUO8eCev85hQ1lzeaDuPFQ==
X-Firefox-Spdy: h2
ldrenandthe.org/UmtrSkd9VAg5ejAtGz0KYT0yKywXLDocPyc6HAACCgYTAAYXW00+LjZWUn5zZV9ebDc7D1Z7YSEfCj4yIVZabC48DQR3YSRWWmR0ZkVYfmliTR53dnQfGysgb1pNOjMmB1Z7cGJaXnh+ZVJfeXVn
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/UmtrSkd9VAg5ejAtGz0KYT0yKywXLDocPyc6HAACCgYTAAYXW00+LjZWUn5zZV9ebDc7D1Z7YSEfCj4yIVZabC48DQR3YSRWWmR0ZkVYfmliTR53dnQfGysgb1pNOjMmB1Z7cGJaXnh+ZVJfeXVn
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UmtrSkd9VAg5ejAtGz0KYT0yKywXLDocPyc6HAACCgYTAAYXW00+LjZWUn5zZV9ebDc7D1Z7YSEfCj4yIVZabC48DQR3YSRWWmR0ZkVYfmliTR53dnQfGysgb1pNOjMmB1Z7cGJaXnh+ZVJfeXVn HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x2ursmgUKu5%2B33zpThDVY6SN46eo%2BzhP1AsNCJ4nUbjjEK4KF9TWa%2FhB37CV8mNs5LJs8r7H1s46hQ6tQakylVu1NQK0x%2B6CzLSCXc3uCNwBwb8L8kw%2BuJXdtce7M3w45kI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3fac7f5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lingrethertantin.com/Y21DY2kCDyAOVgJQIUUcEQF+RlslSHElDVFYMAAIUAUmDAhSHixNCg8CNgcPEQItF0cNCDdGWyUGFyYdETouEB8pLBZbPycKKidbBz4lUB0FD3ItGCo/JFIrNxVxJy1bBwkrWVcgEAwZAT97BC1QK3Q3PTomCgoRNAsCVwAoKxkRPTBdNSA+BwsiCVEBIxIhESw8NAQqIFUoJxMuKgxRWQYicjoBKS8GGSsaLDI3BAQZJjQ/AQtyD1E6FTQZKzAKKCsqDyIlDRolIShWTFEvJlIZEj8bGxw0LyssDw0eIC4eNVslU1wTJhQPXDQUCQcMJFgaJCxWSHEhDBtAKBA9DVUINAQTCBoNHSALcg9RLyx3ViggIzY0Oxs3JSsZAQwvE1EGBnYMPhoCKiQ9WyMKGScsDABSUAZcdlM+UQJmUSs1ADBFAxACLRNUBAgLC18wBgIG
143.204.55.57200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/Y21DY2kCDyAOVgJQIUUcEQF+RlslSHElDVFYMAAIUAUmDAhSHixNCg8CNgcPEQItF0cNCDdGWyUGFyYdETouEB8pLBZbPycKKidbBz4lUB0FD3ItGCo/JFIrNxVxJy1bBwkrWVcgEAwZAT97BC1QK3Q3PTomCgoRNAsCVwAoKxkRPTBdNSA+BwsiCVEBIxIhESw8NAQqIFUoJxMuKgxRWQYicjoBKS8GGSsaLDI3BAQZJjQ/AQtyD1E6FTQZKzAKKCsqDyIlDRolIShWTFEvJlIZEj8bGxw0LyssDw0eIC4eNVslU1wTJhQPXDQUCQcMJFgaJCxWSHEhDBtAKBA9DVUINAQTCBoNHSALcg9RLyx3ViggIzY0Oxs3JSsZAQwvE1EGBnYMPhoCKiQ9WyMKGScsDABSUAZcdlM+UQJmUSs1ADBFAxACLRNUBAgLC18wBgIG
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3035), with no line terminators
Hash a4ec06cf8cf763b2c08786ff84982057
01dac030903b713358fd2ee6e65cc8cd6592ab8b
d020e882f08fc6a25e9d4601a48e54996637b90c34d003046990f82e7a359a98
GET /Y21DY2kCDyAOVgJQIUUcEQF+RlslSHElDVFYMAAIUAUmDAhSHixNCg8CNgcPEQItF0cNCDdGWyUGFyYdETouEB8pLBZbPycKKidbBz4lUB0FD3ItGCo/JFIrNxVxJy1bBwkrWVcgEAwZAT97BC1QK3Q3PTomCgoRNAsCVwAoKxkRPTBdNSA+BwsiCVEBIxIhESw8NAQqIFUoJxMuKgxRWQYicjoBKS8GGSsaLDI3BAQZJjQ/AQtyD1E6FTQZKzAKKCsqDyIlDRolIShWTFEvJlIZEj8bGxw0LyssDw0eIC4eNVslU1wTJhQPXDQUCQcMJFgaJCxWSHEhDBtAKBA9DVUINAQTCBoNHSALcg9RLyx3ViggIzY0Oxs3JSsZAQwvE1EGBnYMPhoCKiQ9WyMKGScsDABSUAZcdlM+UQJmUSs1ADBFAxACLRNUBAgLC18wBgIG HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1185
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 87WWLImiVlMkS3yK13uRY-VSuHOSkNea5wR2eIBmayVqKLOzSsJbHQ==
X-Firefox-Spdy: h2
ldrenandthe.org/cm8yaURdUFEaeT8DcxEmJxh+MwUaOVceEhouXhlwMF1nKBwqVxQdLRZSClp2RVsKTzQbCw9YfFQcRggwBxwPWGIbAVQGeVQZD1hqQkEAR3BUGg9YYgYfUw55Q0lCHTAeUgNedENaAFBzS1sBXXI
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/cm8yaURdUFEaeT8DcxEmJxh+MwUaOVceEhouXhlwMF1nKBwqVxQdLRZSClp2RVsKTzQbCw9YfFQcRggwBxwPWGIbAVQGeVQZD1hqQkEAR3BUGg9YYgYfUw55Q0lCHTAeUgNedENaAFBzS1sBXXI
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm8yaURdUFEaeT8DcxEmJxh+MwUaOVceEhouXhlwMF1nKBwqVxQdLRZSClp2RVsKTzQbCw9YfFQcRggwBxwPWGIbAVQGeVQZD1hqQkEAR3BUGg9YYgYfUw55Q0lCHTAeUgNedENaAFBzS1sBXXI HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aCbKunqACmzWo3fDB4Md4CvBk3ZQRbM1kEaiTGNkCh1LES8d3aaNPy0hmtlrT%2F1ETru4xexs1yJOAWG%2FqdTqsvP1oFQrwQmxEY4R1uD9QuNEBmWKweZUG2I%2FrfEEBHJPczo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3fbca25689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lingrethertantin.com/MXE0RHpQE1cpRVBMVmIPQx0JYUh3VAYCHgNERycbAhlRKxsAAltqGV0eQSAcQx5aMFRfFEBhSHdGbj48ZRVjDT9pGwQQImM/bQpKWRBiFR5ZIwUeOGYIdSU+cxJ5Ay4BIXIcGVM9TCc1dwhXFDhdHnYgKFo1dxIgRCRDJzBkHAEBKHArYgkvWSZlES9bNlMoG2M1BBY4RjdtFChwNmURK0gidXwzYgtbHj5WKGEdLn8pZxU8AyMFDipjG1smOFYZcw08cyBidUJfJHIGInA2eiYvWjh3ASxzIGJ0Iwc2BRYudzZ1dygAJHYPSn8mZSMzYyRyBiJgCBkSK2QibQUjATN5EgJZQ2Z1M3AncAUfdSR9ADxkFWcSHXcbZgIwZjdzAjxzMAEANFk8egwCYxl5dTRpM3x1PGMzfQkjVldeNxVfAQkOMlwDcgwgRBg
143.204.55.57200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/MXE0RHpQE1cpRVBMVmIPQx0JYUh3VAYCHgNERycbAhlRKxsAAltqGV0eQSAcQx5aMFRfFEBhSHdGbj48ZRVjDT9pGwQQImM/bQpKWRBiFR5ZIwUeOGYIdSU+cxJ5Ay4BIXIcGVM9TCc1dwhXFDhdHnYgKFo1dxIgRCRDJzBkHAEBKHArYgkvWSZlES9bNlMoG2M1BBY4RjdtFChwNmURK0gidXwzYgtbHj5WKGEdLn8pZxU8AyMFDipjG1smOFYZcw08cyBidUJfJHIGInA2eiYvWjh3ASxzIGJ0Iwc2BRYudzZ1dygAJHYPSn8mZSMzYyRyBiJgCBkSK2QibQUjATN5EgJZQ2Z1M3AncAUfdSR9ADxkFWcSHXcbZgIwZjdzAjxzMAEANFk8egwCYxl5dTRpM3x1PGMzfQkjVldeNxVfAQkOMlwDcgwgRBg
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3034), with no line terminators
Hash c8b987797d87b484e5ca5b5c9d39fad5
725f97fdce34fc6cfaabeeae88a242fa0950d7c4
96eda07802541475025b45cb338ec1bdc4039a54e8d13ed1d5c7154ee124712d
GET /MXE0RHpQE1cpRVBMVmIPQx0JYUh3VAYCHgNERycbAhlRKxsAAltqGV0eQSAcQx5aMFRfFEBhSHdGbj48ZRVjDT9pGwQQImM/bQpKWRBiFR5ZIwUeOGYIdSU+cxJ5Ay4BIXIcGVM9TCc1dwhXFDhdHnYgKFo1dxIgRCRDJzBkHAEBKHArYgkvWSZlES9bNlMoG2M1BBY4RjdtFChwNmURK0gidXwzYgtbHj5WKGEdLn8pZxU8AyMFDipjG1smOFYZcw08cyBidUJfJHIGInA2eiYvWjh3ASxzIGJ0Iwc2BRYudzZ1dygAJHYPSn8mZSMzYyRyBiJgCBkSK2QibQUjATN5EgJZQ2Z1M3AncAUfdSR9ADxkFWcSHXcbZgIwZjdzAjxzMAEANFk8egwCYxl5dTRpM3x1PGMzfQkjVldeNxVfAQkOMlwDcgwgRBg HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1184
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5GQtCNWDb1K_Po3XoLeBH1gBKNPjEEhsCotot9kYzYEPxmtWgfhpKA==
X-Firefox-Spdy: h2
ldrenandthe.org/a2NDZ1pEXCAUZzhSER4OWyl0Pg8fUCAJLgYxLT0tDTRyKz8FJmUTMw9eelRqX1Z7QSoCB35VY00QNwYuHhB+VnwCDSUIZ00VflZ0W011V3RYRTZaa00XMwY9VlJlFy4fD35WbVtSdlVjXFp3VGxc
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/a2NDZ1pEXCAUZzhSER4OWyl0Pg8fUCAJLgYxLT0tDTRyKz8FJmUTMw9eelRqX1Z7QSoCB35VY00QNwYuHhB+VnwCDSUIZ00VflZ0W011V3RYRTZaa00XMwY9VlJlFy4fD35WbVtSdlVjXFp3VGxc
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a2NDZ1pEXCAUZzhSER4OWyl0Pg8fUCAJLgYxLT0tDTRyKz8FJmUTMw9eelRqX1Z7QSoCB35VY00QNwYuHhB+VnwCDSUIZ00VflZ0W011V3RYRTZaa00XMwY9VlJlFy4fD35WbVtSdlVjXFp3VGxc HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KgEvpPEIor4UsLSDUyA3UriUHC6Rkck%2BKzvxx7LZucjIidt3cLUD2NVgzY6GUkLLySgpci2UlZA5to71w4vFoV9c%2FLlfglajuX69SxIxAWUExU9DMsa6UzCQqRux3fEpI00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3ffd005689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ldrenandthe.org/SkZnVHZleQQnSxkqFzUVDCpeNSEyAT4MHjonVzAGLwEfPicnA0EgHy57X2ZAeHRTcgYjIlpnRGw1EzUCPzVaZVAjKAE7S2wwWmRYc2hVekNsM1plUD42BjNLe2AXIAIme1ZjRntzVW1Bc3JUbEA
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/SkZnVHZleQQnSxkqFzUVDCpeNSEyAT4MHjonVzAGLwEfPicnA0EgHy57X2ZAeHRTcgYjIlpnRGw1EzUCPzVaZVAjKAE7S2wwWmRYc2hVekNsM1plUD42BjNLe2AXIAIme1ZjRntzVW1Bc3JUbEA
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SkZnVHZleQQnSxkqFzUVDCpeNSEyAT4MHjonVzAGLwEfPicnA0EgHy57X2ZAeHRTcgYjIlpnRGw1EzUCPzVaZVAjKAE7S2wwWmRYc2hVekNsM1plUD42BjNLe2AXIAIme1ZjRntzVW1Bc3JUbEA HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WuqY1X8yu%2FlmcvqHWjKyWZBct64cvHsV3S7iocG9dUVEDo80uCQoWf3isQwWayHK5UMCMF2HQxijtfMi%2BxhCuSmyMYao%2FYfGhODnXR%2B9GyVh%2F43AMD2IIqrfHPCFpPihuS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3ffd0a5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ldrenandthe.org/NHNHZ2obTCQUV1YkKyAkfDUmMAR1MBQxU1UXMCkobEJ+QlhyMSwMTEAaI1pSBkV1VV4SAy4DVwdBYRQeVQcyFFcGQ3dQTF0dIQhXBlUxWloaSmlVRAFVMlpbEgc3Bg0JQmEXHkAfelZdBEJyVVMDSnNUUwY
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/NHNHZ2obTCQUV1YkKyAkfDUmMAR1MBQxU1UXMCkobEJ+QlhyMSwMTEAaI1pSBkV1VV4SAy4DVwdBYRQeVQcyFFcGQ3dQTF0dIQhXBlUxWloaSmlVRAFVMlpbEgc3Bg0JQmEXHkAfelZdBEJyVVMDSnNUUwY
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NHNHZ2obTCQUV1YkKyAkfDUmMAR1MBQxU1UXMCkobEJ+QlhyMSwMTEAaI1pSBkV1VV4SAy4DVwdBYRQeVQcyFFcGQ3dQTF0dIQhXBlUxWloaSmlVRAFVMlpbEgc3Bg0JQmEXHkAfelZdBEJyVVMDSnNUUwY HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sxc8M9mVg44TWyw4h2MMQLwOm3QDUjqGGIjqoi0QG1lVTLi%2B7SlzuMWARLhDeCarbhJjGOK4mHzejItG16Adny%2FlqouIXOYMpnyRONGh59%2F7nBrrFJw9jeZbFAvzzFIzlRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3ffd0c5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lingrethertantin.com/utx?cb=J8nIJaP6lqwq&top=bluemediafile.site&tid=930458
143.204.55.57204 No Content 0 B URL GET HTTP/2 lingrethertantin.com/utx?cb=J8nIJaP6lqwq&top=bluemediafile.site&tid=930458
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=J8nIJaP6lqwq&top=bluemediafile.site&tid=930458 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://bluemediafile.site
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 02 Dec 2023 15:10:49 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gNiTUyPV-4iMKFweiMEhikbIfemoAZDjEE2b05ooT9UM9IWdCgYABQ==
X-Firefox-Spdy: h2
lingrethertantin.com/utx?cb=I8R9VoVwOr1b&top=bluemediafile.site&tid=826224
143.204.55.57204 No Content 0 B URL GET HTTP/2 lingrethertantin.com/utx?cb=I8R9VoVwOr1b&top=bluemediafile.site&tid=826224
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=I8R9VoVwOr1b&top=bluemediafile.site&tid=826224 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 15:09:49 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://bluemediafile.site
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 02 Dec 2023 15:10:49 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y2VYT5YowaB_0Uihn0P0mjoTjpAm9mmCJfitmBNqBSYbKbfy9SC0-w==
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-0T6EDCXSXW&l=dataLayer&cx=c
142.250.74.168200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-0T6EDCXSXW&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash cf3118bb4ae1094dae557fe9e54a7682
94961db36d502b085b20b2697da8d7a7a28f43eb
edb0c8aa7ec084b00c48e8934af39888650c39b655a2338de654a35e5430b325
GET /gtag/js?id=G-0T6EDCXSXW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 15:09:50 GMT
expires: Sat, 02 Dec 2023 15:09:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81220
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
bluemediafile.site/imgads/CH3.gif
172.67.217.198200 OK 456 kB URL GET HTTP/3 bluemediafile.site/imgads/CH3.gif
IP 172.67.217.198:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 160 x 600\012- data
Size 456 kB (456298 bytes)
Hash 768eb5719a406bb3612b5e5a8536f384
e1e4670b2cd6f1a1068ebcfbcb3ce9880e783502
6a638f9cc70cb4819472295d94d23f710a74288d6f3b55e923251649bcd33fef
GET /imgads/CH3.gif HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
DNT: 1
Connection: keep-alive
Cookie: _ga_H5HV9R7NL8=GS1.1.1701529794.1.0.1701529794.0.0.0; _ga=GA1.1.513181303.1701529795
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:50 GMT
content-type: image/gif
content-length: 456298
last-modified: Mon, 14 Jun 2021 13:28:55 GMT
vary: Accept-Encoding
etag: "60c75997-6f66a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 738
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mUCzki3SwARHgToDY7H2sQVL0LytZ91TaqGp5dwwT7kqYIvT2XdPm3GmqHCuTrk14%2BbDIiNZxcchLmMhzUgZ1WucPsWWz1%2Bw9xOBeymP%2Fd9GpLvCumRdqeyrDwRS2CgfwtHj7RY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e44a93e0b45-OSL
alt-svc: h3=":443"; ma=86400
ldrenandthe.org/cXFvM3VeTgxASCMkIX0UQDsWUD0FFQ5dEQYXKUscFUI5AyImHklHHBVMVwFDQ0NbFQUYFVIAR1cCG1IBBAJSAUVBRklaGxceUgFTB0xfHUxfQ0EGUwRMXgpMRURYBUVDR18BRUBAWBUBARAIDkRXARtHGUxAWANERENWBExEQloD
172.67.194.104204 No Content 0 B URL POST HTTP/3 ldrenandthe.org/cXFvM3VeTgxASCMkIX0UQDsWUD0FFQ5dEQYXKUscFUI5AyImHklHHBVMVwFDQ0NbFQUYFVIAR1cCG1IBBAJSAUVBRklaGxceUgFTB0xfHUxfQ0EGUwRMXgpMRURYBUVDR18BRUBAWBUBARAIDkRXARtHGUxAWANERENWBExEQloD
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cXFvM3VeTgxASCMkIX0UQDsWUD0FFQ5dEQYXKUscFUI5AyImHklHHBVMVwFDQ0NbFQUYFVIAR1cCG1IBBAJSAUVBRklaGxceUgFTB0xfHUxfQ0EGUwRMXgpMRURYBUVDR18BRUBAWBUBARAIDkRXARtHGUxAWANERENWBExEQloD HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 02 Dec 2023 15:09:50 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0HTa2vSszJF5x7%2FVDwPzlNahmFXZFB3GRhTsTPE2ORz5fzhjSwQIMj2RbJWx1fW9R7EiCsWx%2FvRONqe2sWHusKZUbrx1UlLPA%2B5c8QyRN3oH%2BD3nPtHrlG%2FDLrB%2BH22NQ7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e457bba56c0-OSL
alt-svc: h3=":443"; ma=86400
lingrethertantin.com/multi?cs=MTVMakgBAHVSeAEHeFN6Bwx1X3s&abt=0&red=1&sm=76&k=&v=1.0.60.3&sts=0&prn=0&emb=0&tid=930458&rxy=1280_1024&u=1994576026020117&agec=1701529789&fs=1&mbkb=120.91898428053204&ref=https%3A%2F%2Fbluemediafile.site%2Furl-generator-1.php%3Furl%3DXWWUCOrsJWk%2Bkpqcqmf3Wb4A%2F3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX%2BKbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA%3D&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_aXDY=1701529795356&crc=1
143.204.55.57200 OK 1.5 kB URL GET HTTP/2 lingrethertantin.com/multi?cs=MTVMakgBAHVSeAEHeFN6Bwx1X3s&abt=0&red=1&sm=76&k=&v=1.0.60.3&sts=0&prn=0&emb=0&tid=930458&rxy=1280_1024&u=1994576026020117&agec=1701529789&fs=1&mbkb=120.91898428053204&ref=https%3A%2F%2Fbluemediafile.site%2Furl-generator-1.php%3Furl%3DXWWUCOrsJWk%2Bkpqcqmf3Wb4A%2F3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX%2BKbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA%3D&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_aXDY=1701529795356&crc=1
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3255), with no line terminators
Hash 5c6ff6f13318de5bb39b53963718c006
c1174b216a59cd7619eacd0d02e7799a421c02de
14e8f3fbd02b46415504aa7fb3ba10c499ad799ff8eff26b954d1e9162cf42b9
GET /multi?cs=MTVMakgBAHVSeAEHeFN6Bwx1X3s&abt=0&red=1&sm=76&k=&v=1.0.60.3&sts=0&prn=0&emb=0&tid=930458&rxy=1280_1024&u=1994576026020117&agec=1701529789&fs=1&mbkb=120.91898428053204&ref=https%3A%2F%2Fbluemediafile.site%2Furl-generator-1.php%3Furl%3DXWWUCOrsJWk%2Bkpqcqmf3Wb4A%2F3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX%2BKbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA%3D&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_aXDY=1701529795356&crc=1 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1530
date: Sat, 02 Dec 2023 15:09:50 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://bluemediafile.site
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=371ea3ff-5926-4a8d-8629-4850046a1649
csu=1994576026020117
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _3tyIijaR4D6Bm_1bAWBrIWqE7cP7FM-BfnhnckY6EieIcwkYKS3yg==
X-Firefox-Spdy: h2
d25sca3heoa1so.cloudfront.net/hUXFHODcyHileCCUYIwUOZUVwDAJ3GzRXWSFMCXluNCUmaEUeKXRQYT0CIh5DKxV6CBE9EClfCncUKVsKYFcmXFVsRWFMRz4aekpQKxIkV1M4HDAeQjBMKldNOB0rWRJjN3IWB3RDdxBAOB8jV0AiVHUIWSVUdQgGYV93HQQTVHUIQDgfcQwSYjNiCgcpR3-MdBBNUdQhFJ1R0eQZhRGkIHnRDd19SMhooHQUXQ3cJB2FAdwkSY0EhUUU0FyhAEmM3dggCf0FhTQpg
143.204.42.195 644 B URL d25sca3heoa1so.cloudfront.net/hUXFHODcyHileCCUYIwUOZUVwDAJ3GzRXWSFMCXluNCUmaEUeKXRQYT0CIh5DKxV6CBE9EClfCncUKVsKYFcmXFVsRWFMRz4aekpQKxIkV1M4HDAeQjBMKldNOB0rWRJjN3IWB3RDdxBAOB8jV0AiVHUIWSVUdQgGYV93HQQTVHUIQDgfcQwSYjNiCgcpR3-MdBBNUdQhFJ1R0eQZhRGkIHnRDd19SMhooHQUXQ3cJB2FAdwkSY0EhUUU0FyhAEmM3dggCf0FhTQpg
IP 143.204.42.195:0
File type ASCII text, with very long lines (896), with no line terminators
Hash 8c2a103091b7ad9da38c938e730384e6
a02ea9663186968d2eb595369d0672e8f2ffc6a5
6d5750e0146e78ab88ef9e8215843faec259fe03991c1367f30b1384b360cb80
GET /hUXFHODcyHileCCUYIwUOZUVwDAJ3GzRXWSFMCXluNCUmaEUeKXRQYT0CIh5DKxV6CBE9EClfCncUKVsKYFcmXFVsRWFMRz4aekpQKxIkV1M4HDAeQjBMKldNOB0rWRJjN3IWB3RDdxBAOB8jV0AiVHUIWSVUdQgGYV93HQQTVHUIQDgfcQwSYjNiCgcpR3-MdBBNUdQhFJ1R0eQZhRGkIHnRDd19SMhooHQUXQ3cJB2FAdwkSY0EhUUU0FyhAEmM3dggCf0FhTQpg HTTP/1.1
Host: d25sca3heoa1so.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingrethertantin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 644
date: Sat, 02 Dec 2023 15:09:50 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5I11HL_ReSOYmQy4yv6Y7FzEoTSrseW_t1_bwdIY_k2v3pgg6aSKfw==
X-Firefox-Spdy: h2
d25sca3heoa1so.cloudfront.net/7ZzFTdWIEXj0TXRNYN0haVQdhR1ZBWyAaDBcMGT0PFXcbLxcOFycPBloBdRkDCVZuUwcJUm5ERAZVMUhWQUUjGglaRD0RBwFYPRAGQUQySA8ISzoZDgYUYTNXSQF2R1JPRjobBghGIFBQV18nUFBXAGNbUkICEVBQV0Y6G1RTFGA3R1UBK0NWQgIRUFBXQy-VQUSYAY0BMVxh2R1IAVDAeDUIDFUdSVgFjRFJWFGFFBA5DNhMNHxRhM1NXBH1FRBIMYg
143.204.42.195200 OK 366 B URL GET HTTP/2 d25sca3heoa1so.cloudfront.net/7ZzFTdWIEXj0TXRNYN0haVQdhR1ZBWyAaDBcMGT0PFXcbLxcOFycPBloBdRkDCVZuUwcJUm5ERAZVMUhWQUUjGglaRD0RBwFYPRAGQUQySA8ISzoZDgYUYTNXSQF2R1JPRjobBghGIFBQV18nUFBXAGNbUkICEVBQV0Y6G1RTFGA3R1UBK0NWQgIRUFBXQy-VQUSYAY0BMVxh2R1IAVDAeDUIDFUdSVgFjRFJWFGFFBA5DNhMNHxRhM1NXBH1FRBIMYg
IP 143.204.42.195:443
Requested by https://lingrethertantin.com/MXE0RHpQE1cpRVBMVmIPQx0JYUh3VAYCHgNERycbAhlRKxsAAltqGV0eQSAcQx5aMFRfFEBhSHdGbj48ZRVjDT9pGwQQImM/bQpKWRBiFR5ZIwUeOGYIdSU+cxJ5Ay4BIXIcGVM9TCc1dwhXFDhdHnYgKFo1dxIgRCRDJzBkHAEBKHArYgkvWSZlES9bNlMoG2M1BBY4RjdtFChwNmURK0gidXwzYgtbHj5WKGEdLn8pZxU8AyMFDipjG1smOFYZcw08cyBidUJfJHIGInA2eiYvWjh3ASxzIGJ0Iwc2BRYudzZ1dygAJHYPSn8mZSMzYyRyBiJgCBkSK2QibQUjATN5EgJZQ2Z1M3AncAUfdSR9ADxkFWcSHXcbZgIwZjdzAjxzMAEANFk8egwCYxl5dTRpM3x1PGMzfQkjVldeNxVfAQkOMlwDcgwgRBg
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (461), with no line terminators
Hash 725261fb3137aa7df03f8a3cf0b89b09
6afae3c543ab1bb19de8f5a251de0ad9a18bde77
b78ad3fbddfd4557e6bdfdb0afea0f760bf36b7e8c7ee12f43602d78bb89c0b2
GET /7ZzFTdWIEXj0TXRNYN0haVQdhR1ZBWyAaDBcMGT0PFXcbLxcOFycPBloBdRkDCVZuUwcJUm5ERAZVMUhWQUUjGglaRD0RBwFYPRAGQUQySA8ISzoZDgYUYTNXSQF2R1JPRjobBghGIFBQV18nUFBXAGNbUkICEVBQV0Y6G1RTFGA3R1UBK0NWQgIRUFBXQy-VQUSYAY0BMVxh2R1IAVDAeDUIDFUdSVgFjRFJWFGFFBA5DNhMNHxRhM1NXBH1FRBIMYg HTTP/1.1
Host: d25sca3heoa1so.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingrethertantin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 366
date: Sat, 02 Dec 2023 15:09:50 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yATNg6-fpf4oCn5t9HabmSREt2PVQ-17tu5nFEQCzf_4krhpZ9bhcw==
X-Firefox-Spdy: h2
ldrenandthe.org/popunder.gif
172.67.194.104200 OK 489 B URL GET HTTP/3 ldrenandthe.org/popunder.gif
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 0860be56924c6b3eea084cbc3745f912
ce1e3e16821343edba9536926bed1d3c39933297
56323eca8ec5c8e081ea6cbf1530b768fd9a5609298cd7600623955ecbc81a22
GET /popunder.gif HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:50 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 87860
last-modified: Fri, 01 Dec 2023 14:45:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MYOFW5DQCZUbnciEf2ZGHy6%2B3w70kigk4qmFnsyqwPMsiQs1yQMm8HcZHX9ysqK6eFh6KHT9bx6NyIE6%2BN900IexndacXKebX6PRiMNwnDOpVEFIDP8gfixsOUmY8qxLCXg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f47e450b3d56c0-OSL
alt-svc: h3=":443"; ma=86400
d25sca3heoa1so.cloudfront.net/ncllOVVURNiAzagYwKmhtQWt5YW1UMz06OwJkNiNsRw5+BR8zLiYAPVQtNDFoQn8iNDsVZGgwOxFkf3M0FjtzYXMHOHM4OggwIjk0V2sIYHtCfHxlfQUwIDE6BSprZ2UcLWtnZUNpYGVwQRtrZ2UFMCBjYVdqDHBnQiF4YXBBG2tnZQAva2YUQ2l7e2VbfH-xlMhc6JTpwQB98ZWRCaX9lZFdrfjM8ADwoOi1XawhkZUd3fnMgT2g
143.204.42.195 192 B URL d25sca3heoa1so.cloudfront.net/ncllOVVURNiAzagYwKmhtQWt5YW1UMz06OwJkNiNsRw5+BR8zLiYAPVQtNDFoQn8iNDsVZGgwOxFkf3M0FjtzYXMHOHM4OggwIjk0V2sIYHtCfHxlfQUwIDE6BSprZ2UcLWtnZUNpYGVwQRtrZ2UFMCBjYVdqDHBnQiF4YXBBG2tnZQAva2YUQ2l7e2VbfH-xlMhc6JTpwQB98ZWRCaX9lZFdrfjM8ADwoOi1XawhkZUd3fnMgT2g
IP 143.204.42.195:0
File type ASCII text, with no line terminators
Hash 02b9ac5c3af77304aaa316b16947a06c
655ecfa924200a98b3bec9da43e7e8d3481488da
5e9010b636f10755725a8d61c6280ef155ae3b0332b599212a33e6b8560398c1
GET /ncllOVVURNiAzagYwKmhtQWt5YW1UMz06OwJkNiNsRw5+BR8zLiYAPVQtNDFoQn8iNDsVZGgwOxFkf3M0FjtzYXMHOHM4OggwIjk0V2sIYHtCfHxlfQUwIDE6BSprZ2UcLWtnZUNpYGVwQRtrZ2UFMCBjYVdqDHBnQiF4YXBBG2tnZQAva2YUQ2l7e2VbfH-xlMhc6JTpwQB98ZWRCaX9lZFdrfjM8ADwoOi1XawhkZUd3fnMgT2g HTTP/1.1
Host: d25sca3heoa1so.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingrethertantin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 192
date: Sat, 02 Dec 2023 15:09:50 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NhmRJk1ij25u2DCMyRRLiQkJIBWaoMYvQ4aSs9AWuYrqtLzfum410w==
X-Firefox-Spdy: h2
d25sca3heoa1so.cloudfront.net/GbU9vQ3QOIAElSxkmC35MXXZYdE1LJRwsGh1yCnQhNHojEj8CIF4EN0s7FSdJXWkDIhoKckkmGg5yXmUVCS1Sd1IZPwAoSR8oFSAXAisGLgNLOg5+GQI1Bi8YDGpdBUFDf0pxREU4Bi0QAjgcZkZdIRtmRl1+X21ESHwtZkZdOAYtQllqXAFRX38XdUBIfC-1mRl09GWZHLH5fdlpdZkpxRAoqDCgbSH0pcURcf19yRFxqXXMSBD0KJRsVal0FRV16QXNSGHJe
143.204.42.195 625 B URL d25sca3heoa1so.cloudfront.net/GbU9vQ3QOIAElSxkmC35MXXZYdE1LJRwsGh1yCnQhNHojEj8CIF4EN0s7FSdJXWkDIhoKckkmGg5yXmUVCS1Sd1IZPwAoSR8oFSAXAisGLgNLOg5+GQI1Bi8YDGpdBUFDf0pxREU4Bi0QAjgcZkZdIRtmRl1+X21ESHwtZkZdOAYtQllqXAFRX38XdUBIfC-1mRl09GWZHLH5fdlpdZkpxRAoqDCgbSH0pcURcf19yRFxqXXMSBD0KJRsVal0FRV16QXNSGHJe
IP 143.204.42.195:0
File type ASCII text, with very long lines (885), with no line terminators
Hash 268542b7114aec924451edc755182d05
c20817a782163c841401bac7df18cedaffb09719
1026ebada798f029eb174c296c72bd2472f27959b93ab16582a36c02fbec6791
GET /GbU9vQ3QOIAElSxkmC35MXXZYdE1LJRwsGh1yCnQhNHojEj8CIF4EN0s7FSdJXWkDIhoKckkmGg5yXmUVCS1Sd1IZPwAoSR8oFSAXAisGLgNLOg5+GQI1Bi8YDGpdBUFDf0pxREU4Bi0QAjgcZkZdIRtmRl1+X21ESHwtZkZdOAYtQllqXAFRX38XdUBIfC-1mRl09GWZHLH5fdlpdZkpxRAoqDCgbSH0pcURcf19yRFxqXXMSBD0KJRsVal0FRV16QXNSGHJe HTTP/1.1
Host: d25sca3heoa1so.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingrethertantin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 625
date: Sat, 02 Dec 2023 15:09:50 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TxBBStbxL0ej0AMlHNdf44q0e0-SduTFeuZfoVqg2sLGn5rrRQV9Fw==
X-Firefox-Spdy: h2
lingrethertantin.com/floater?cs=NkwwNHgBfwYCQAR%2FAQNIBHoJBkA&abt=0&red=1&sm=83&k=&v=0.9.2.5&sts=0&prn=0&emb=0&tid=826224&rxy=1280_1024&u=1994576026020117&agec=1701529789&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=120.91898428053204&ref=https%3A%2F%2Fbluemediafile.site%2Furl-generator-1.php%3Furl%3DXWWUCOrsJWk%2Bkpqcqmf3Wb4A%2F3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX%2BKbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA%3D&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=oi1_&_hsJl=1701529795352&crc=1
143.204.55.57200 OK 4.1 kB URL GET HTTP/2 lingrethertantin.com/floater?cs=NkwwNHgBfwYCQAR%2FAQNIBHoJBkA&abt=0&red=1&sm=83&k=&v=0.9.2.5&sts=0&prn=0&emb=0&tid=826224&rxy=1280_1024&u=1994576026020117&agec=1701529789&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=120.91898428053204&ref=https%3A%2F%2Fbluemediafile.site%2Furl-generator-1.php%3Furl%3DXWWUCOrsJWk%2Bkpqcqmf3Wb4A%2F3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX%2BKbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA%3D&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=oi1_&_hsJl=1701529795352&crc=1
IP 143.204.55.57:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6659), with no line terminators
Hash 643d15c69f2b56a19d67aa98173cedbf
1453c7c67aaca0f99bfb320925fed591c6823292
513ac6da8a065c93a30aedef5e634e737ddcfcf0f1bb9ba7de2227717175468e
GET /floater?cs=NkwwNHgBfwYCQAR%2FAQNIBHoJBkA&abt=0&red=1&sm=83&k=&v=0.9.2.5&sts=0&prn=0&emb=0&tid=826224&rxy=1280_1024&u=1994576026020117&agec=1701529789&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=120.91898428053204&ref=https%3A%2F%2Fbluemediafile.site%2Furl-generator-1.php%3Furl%3DXWWUCOrsJWk%2Bkpqcqmf3Wb4A%2F3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX%2BKbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA%3D&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=oi1_&_hsJl=1701529795352&crc=1 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 4128
date: Sat, 02 Dec 2023 15:09:50 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://bluemediafile.site
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=35c0079b-b36d-4b76-82d7-646a42b2a447
csu=1994576026020117
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sksm8ox-Zrv6VR-Nb0DNqzvXWmnZHtvz6adeSYod7Q5Lozvv_xIiZA==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
64.233.164.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 64.233.164.84:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:oE3f-KzFpooVvk07HnR3qbvFe6odJw:nehanaCVsUX5iNEC; Expires=Mon, 01-Dec-2025 15:09:50 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 15:09:50 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3MOk5NlJmcDaew8TONUMVLFdeJ8j1YNpeklQYWh4Fx547sSKvdZ3QGi70FAAFXVaSiE3BY5Q
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-W_tR3vaL_-EnuRRFL1cZgw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
64.233.164.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 64.233.164.84:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:XGUfYqVYwI-tsJLdGNgSr_mQhFFIJw:8Q2wFPB2gg2r0kgi; Expires=Mon, 01-Dec-2025 15:09:50 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 15:09:50 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3a2WGhlFECU8N-u7KgEWpvQ7jCxT5tzIEw-Al02QXh1yBJeO_lkisp0PIWhlOj8jOmssU3BQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-QNZDZPOi3NM87WswJxjq1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bluemediafile.site/img/favicon-16x16.png
172.67.217.198200 OK 1.2 kB URL GET HTTP/3 bluemediafile.site/img/favicon-16x16.png
IP 172.67.217.198:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 868a2d23436f008f0c63fd8e0e0ba515
d3c84f637c7c71de847aa7167758467c7a76d391
b47d45cef48ad6c1d1cd50167396a22b1bfe603c92f5da62269b0bb0242942b4
GET /img/favicon-16x16.png HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
DNT: 1
Connection: keep-alive
Cookie: _ga_H5HV9R7NL8=GS1.1.1701529794.1.0.1701529794.0.0.0; _ga=GA1.1.513181303.1701529795; _ga_0T6EDCXSXW=GS1.1.1701529795.1.0.1701529795.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:50 GMT
content-type: image/png
content-length: 1183
last-modified: Wed, 10 Mar 2021 15:53:54 GMT
vary: Accept-Encoding
etag: "6048eb92-49f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 5691
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IYif1CTXbB7yf28SHhyg3cyjK5wjtI190RHlImlIOF0%2F65uQFYNw7JPTVbXJJ9%2BoWC27Do0HX6l6kwmgkMzvckW7t1ygScsk09Mnvgug1jikb95q1UK9fkPhH7nd90b3pIeFryo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e483bf80b45-OSL
alt-svc: h3=":443"; ma=86400
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3MOk5NlJmcDaew8TONUMVLFdeJ8j1YNpeklQYWh4Fx547sSKvdZ3QGi70FAAFXVaSiE3BY5Q
64.233.164.84302 Found 404 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3MOk5NlJmcDaew8TONUMVLFdeJ8j1YNpeklQYWh4Fx547sSKvdZ3QGi70FAAFXVaSiE3BY5Q
IP 64.233.164.84:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (399)
Hash 2f667a2bb6f4a6d02d370597280ec601
57ea54a1f3a81538a321bf9fb802a7059a0c40dc
c1c574dfeaef48554b8938bd069f9bb2721d012e2cb6c50db917a079b770a400
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3MOk5NlJmcDaew8TONUMVLFdeJ8j1YNpeklQYWh4Fx547sSKvdZ3QGi70FAAFXVaSiE3BY5Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:AufQSzin7Qzs0j2CBb3XB5wTLuRCYQ:Nrkt3Jztsr8dOa4T;Path=/;Expires=Mon, 01-Dec-2025 15:09:50 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 15:09:50 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1jFibsWmIAK5hykrNJrkyCtlhDkIml9LfAGwCn-X3kYcsM-N6it6VbSN3zEhbtc6T9ZsKoKA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-871879159%3A1701529790837871&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-YTzicWw5iFgOS_VVxkosNA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 404
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3a2WGhlFECU8N-u7KgEWpvQ7jCxT5tzIEw-Al02QXh1yBJeO_lkisp0PIWhlOj8jOmssU3BQ
64.233.164.84302 Found 403 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3a2WGhlFECU8N-u7KgEWpvQ7jCxT5tzIEw-Al02QXh1yBJeO_lkisp0PIWhlOj8jOmssU3BQ
IP 64.233.164.84:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (394)
Hash 8cdc98ed2aacb0c780d7acf9b4c0a522
04b99d8e278c19cba79422c85ac25d30c5e601ec
f6be9d9214ad2857bb1fb7fbfafc44efc75de95bb3a9e9ed28484c95c0513d7f
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3a2WGhlFECU8N-u7KgEWpvQ7jCxT5tzIEw-Al02QXh1yBJeO_lkisp0PIWhlOj8jOmssU3BQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:3050mPSMEEBd4Yl-xxNtXyjTL0zYGg:agtuYRVqq_x9lOVt;Path=/;Expires=Mon, 01-Dec-2025 15:09:50 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 15:09:50 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1TEuB2YC1_a1_JzdyC12IKRy6KV3hM88b0At4yaYGkPTgvEzhMg4D-J0Hf0uznMLDwyqY9KQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S537000292%3A1701529790843860&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-aqdC6VWu7LnQsYAPSk5Piw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 403
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1jFibsWmIAK5hykrNJrkyCtlhDkIml9LfAGwCn-X3kYcsM-N6it6VbSN3zEhbtc6T9ZsKoKA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-871879159%3A1701529790837871&theme=glif
64.233.164.84403 Forbidden 809 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1jFibsWmIAK5hykrNJrkyCtlhDkIml9LfAGwCn-X3kYcsM-N6it6VbSN3zEhbtc6T9ZsKoKA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-871879159%3A1701529790837871&theme=glif
IP 64.233.164.84:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash cef9d42cb3ee8b8a9d43b2daf4658a1d
2f6480336e44757ca2873359cf0dad63ad33f05f
ac89df8bdabf4cbd6cbb56ef1ce3a98cf76b88fa757a11ea14efd67bd222ee54
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1jFibsWmIAK5hykrNJrkyCtlhDkIml9LfAGwCn-X3kYcsM-N6it6VbSN3zEhbtc6T9ZsKoKA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-871879159%3A1701529790837871&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 15:09:50 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-zKx-_kBfV7JTytSVbM5SEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ldrenandthe.org/S0J3N0RkfRREeRJwA18RAyYiYAIvLyMGAhIXMFMMHhRGbh0gelFDLS9/TwVyeXBDETQiJkoEdm0xA1YwPjFKBXR7d1FeKi0tSgV0e3RHB3V4cFIAByM2A0c3bnE2EnYNZ0VxPCYuWVQrPG8DXikuMBVCIC8nBRkrOSVSBQI/KgJaJiUjHltheAQeEncPMB1dIDk4Bn8lJBsoB2F5dAcSdw9zQAd1fnBOAH17bEUFdHNzQhJ2fSsaUDBucTNeJyQsUgAHJTcbW2F8AU8Bd3NzRgNyeHVADnV5cUcOc35kAQp0ZXtZBWp+ZAIKdXJ7QwJzfXJFAXR5ckYGc202B1YjdnNRRzA/LkoGc3tzQgV9fHtBD3N6
172.67.194.104204 No Content 0 B URL POST HTTP/3 ldrenandthe.org/S0J3N0RkfRREeRJwA18RAyYiYAIvLyMGAhIXMFMMHhRGbh0gelFDLS9/TwVyeXBDETQiJkoEdm0xA1YwPjFKBXR7d1FeKi0tSgV0e3RHB3V4cFIAByM2A0c3bnE2EnYNZ0VxPCYuWVQrPG8DXikuMBVCIC8nBRkrOSVSBQI/KgJaJiUjHltheAQeEncPMB1dIDk4Bn8lJBsoB2F5dAcSdw9zQAd1fnBOAH17bEUFdHNzQhJ2fSsaUDBucTNeJyQsUgAHJTcbW2F8AU8Bd3NzRgNyeHVADnV5cUcOc35kAQp0ZXtZBWp+ZAIKdXJ7QwJzfXJFAXR5ckYGc202B1YjdnNRRzA/LkoGc3tzQgV9fHtBD3N6
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /S0J3N0RkfRREeRJwA18RAyYiYAIvLyMGAhIXMFMMHhRGbh0gelFDLS9/TwVyeXBDETQiJkoEdm0xA1YwPjFKBXR7d1FeKi0tSgV0e3RHB3V4cFIAByM2A0c3bnE2EnYNZ0VxPCYuWVQrPG8DXikuMBVCIC8nBRkrOSVSBQI/KgJaJiUjHltheAQeEncPMB1dIDk4Bn8lJBsoB2F5dAcSdw9zQAd1fnBOAH17bEUFdHNzQhJ2fSsaUDBucTNeJyQsUgAHJTcbW2F8AU8Bd3NzRgNyeHVADnV5cUcOc35kAQp0ZXtZBWp+ZAIKdXJ7QwJzfXJFAXR5ckYGc202B1YjdnNRRzA/LkoGc3tzQgV9fHtBD3N6 HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 02 Dec 2023 15:09:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oa3MvCQ7AqPncrcWGhd2wHvZ4eh7HiZ0x8UbqA8wil1jU0Psu6bK0bnzq%2FEre1YkYyyvOdx5zQOv3eeeQUHU9NBcbTDj%2FIZkCHNoe7uYaVy%2BsgRKnVkH30khsjfvAul0nE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e4edc9c56c0-OSL
alt-svc: h3=":443"; ma=86400
xml.cow-timerbudder.org/thumbnail?i=rjjdrzqHaoY_0&p=1701529790.220815&imgt=icon
198.134.116.29302 Found 0 B URL GET HTTP/1.1 xml.cow-timerbudder.org/thumbnail?i=rjjdrzqHaoY_0&p=1701529790.220815&imgt=icon
IP 198.134.116.29:443
ASN #27257 WEBAIR-INTERNET
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerLet's Encrypt
Subjectcow-timerbudder.org
Fingerprint92:FB:AD:7E:F2:58:1A:19:42:46:6A:A4:C4:CA:25:F8:28:6C:61:0D
ValidityThu, 02 Nov 2023 06:44:00 GMT - Wed, 31 Jan 2024 06:43:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=rjjdrzqHaoY_0&p=1701529790.220815&imgt=icon HTTP/1.1
Host: xml.cow-timerbudder.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 02 Dec 2023 15:09:52 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.servingserved.com/n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg
static.servingserved.com/n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg
23.36.76.88200 OK 5.9 kB URL GET HTTP/1.1 static.servingserved.com/n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg
IP 23.36.76.88:443
ASN #20940 Akamai International B.V.
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerLet's Encrypt
Subjectstatic.servingserved.com
Fingerprint8D:A7:85:30:23:0E:8A:B4:5C:7B:2A:B6:67:E0:BC:21:F0:FD:AA:1D
ValidityThu, 16 Nov 2023 15:11:28 GMT - Wed, 14 Feb 2024 15:11:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 817e4b4654c13e0e36e83b889cabf5f8
ead6ba9b2ea1ca76009edfd06fc192dce81a2e91
8396eac2dea5db817c502e4f960bd364bee3415318383b29f9b123b811fffa71
GET /n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg HTTP/1.1
Host: static.servingserved.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Content-Length: 5930
Last-Modified: Fri, 07 Apr 2023 23:14:33 GMT
ETag: "6430a3d9-172a"
Accept-Ranges: bytes
Cache-Control: max-age=42254
Expires: Sun, 03 Dec 2023 02:54:06 GMT
Date: Sat, 02 Dec 2023 15:09:52 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
dec0215.funsoups.com/winnotice?sid=H4sIAAAAAAAC%2F1RTzWskRRSvWVdw8aToQdjDeFORSXdPz2TGRVb3SxbXJOwHuQnVVd3JMz1VTVX39CSnoCB7c8SDe6z8Jh%2BsruKCV1E6XiQg7FwkovkXFIU9y8yOGX3Q%2FT5%2Bj%2BJX7%2F3q453ihPko%2BPHKe3qL0pQvtBpe%2FZVVUlKXtr50u%2B57De9CfZVUO7xQH0x%2Bpv%2BG77Ua3qv1d2KxoRcCz%2Fc83%2FPr18jEiR4sTFFQ9qDrN7peIwwafivEwDjYogbLa5D9E%2FY8SI6fXv%2FpIUhUUL1vrsR2I9fZ61d7RcpzbdCXB3fUhtKlQm8eJqaGRB3MuqHtmLF7Z6DVwYw1dH93whoRjVntFx%2BROphRQ9Tfe8IuShErRPJZlP0KcVqBeAWhPwLJRwwQEkvLUL39JW1KvvkE5RN0zM4%2B%2FhtUjtnZ31%2BA6n19KaVB%2FZZOi5y0shgkDjSoQGsVsuIQ%2BRYDlYcQ%2BYcg%2BTNbeHwDqre7bFMNkm56e6IKlFRI4yG4ZSgmHzEUSQ1FVkNPHtd5q5t43mISJc1mJxRCNJtCtDpt2ZLNsJN4KMSE3hB5NoRIhxBmG5nZxgYNYYpPQLZCwR0oc8jsfidoB0GIWBy99QybGjgd17229GUSdjtd328FUbgookh2w7gd%2Ba1WM15EREcXL99%2FzbsT8FFE6jRBSgwxP%2Fr%2Bz9lpVjmowo2UIQcTH7GZjYzMjy6edq07WMlgc4a%2BdChjhtIylJyhJIYyZyj7bk%2BmNrBuX6a2iPyZD2a%2B6UY6X3N7Ol%2BLFQM3w53shD03XdZf4n1sxMf1xBNBJ%2BmGzaATdrtRR4aLzXanLYUvO3HYkbD070jIngG3NWzRmL342x%2FIJjqSnyHih7DpIQS9DF6cBy8d%2BLrDlnKQ%2BlsZCy%2FwW42kUFYXmW0I3UOWn0O%2BWdtJT9hLUz7te3f%2FN3NhHDLj8AH9yLCW3h3d1CXbvalLyx4uZzn1aItPhHUr53n81BfvxpulNvL6FTu8%2F7aYAJPwwe3Y5je4kqTWLPvyEkkZm2vaiJh9d92uxtFKYdcvFUYV2Y2Vy9eu9zITW0taVeD06OrnEDRm5z79dfpkzn%2F1JshUMIVDrzhdG0hXENk2bDavWc1g0nkeZQxl4UYmiObFiTDS%2Bf7BIwf7nzyaxzv2B1hyyC37BwAA%2F%2F8BAAD%2F%2Fxf%2FOaycBAAA&ap=${AUCTION_PRICE}&l=3577992&sub3=1701529790&pid=91283&sub2=icon&sub2=to3000&auid=06d1df49891152b47cbbd94e6b1553e7&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
192.243.61.226 0 B URL GET dec0215.funsoups.com/winnotice?sid=H4sIAAAAAAAC%2F1RTzWskRRSvWVdw8aToQdjDeFORSXdPz2TGRVb3SxbXJOwHuQnVVd3JMz1VTVX39CSnoCB7c8SDe6z8Jh%2BsruKCV1E6XiQg7FwkovkXFIU9y8yOGX3Q%2FT5%2Bj%2BJX7%2F3q453ihPko%2BPHKe3qL0pQvtBpe%2FZVVUlKXtr50u%2B57De9CfZVUO7xQH0x%2Bpv%2BG77Ua3qv1d2KxoRcCz%2Fc83%2FPr18jEiR4sTFFQ9qDrN7peIwwafivEwDjYogbLa5D9E%2FY8SI6fXv%2FpIUhUUL1vrsR2I9fZ61d7RcpzbdCXB3fUhtKlQm8eJqaGRB3MuqHtmLF7Z6DVwYw1dH93whoRjVntFx%2BROphRQ9Tfe8IuShErRPJZlP0KcVqBeAWhPwLJRwwQEkvLUL39JW1KvvkE5RN0zM4%2B%2FhtUjtnZ31%2BA6n19KaVB%2FZZOi5y0shgkDjSoQGsVsuIQ%2BRYDlYcQ%2BYcg%2BTNbeHwDqre7bFMNkm56e6IKlFRI4yG4ZSgmHzEUSQ1FVkNPHtd5q5t43mISJc1mJxRCNJtCtDpt2ZLNsJN4KMSE3hB5NoRIhxBmG5nZxgYNYYpPQLZCwR0oc8jsfidoB0GIWBy99QybGjgd17229GUSdjtd328FUbgookh2w7gd%2Ba1WM15EREcXL99%2FzbsT8FFE6jRBSgwxP%2Fr%2Bz9lpVjmowo2UIQcTH7GZjYzMjy6edq07WMlgc4a%2BdChjhtIylJyhJIYyZyj7bk%2BmNrBuX6a2iPyZD2a%2B6UY6X3N7Ol%2BLFQM3w53shD03XdZf4n1sxMf1xBNBJ%2BmGzaATdrtRR4aLzXanLYUvO3HYkbD070jIngG3NWzRmL342x%2FIJjqSnyHih7DpIQS9DF6cBy8d%2BLrDlnKQ%2BlsZCy%2FwW42kUFYXmW0I3UOWn0O%2BWdtJT9hLUz7te3f%2FN3NhHDLj8AH9yLCW3h3d1CXbvalLyx4uZzn1aItPhHUr53n81BfvxpulNvL6FTu8%2F7aYAJPwwe3Y5je4kqTWLPvyEkkZm2vaiJh9d92uxtFKYdcvFUYV2Y2Vy9eu9zITW0taVeD06OrnEDRm5z79dfpkzn%2F1JshUMIVDrzhdG0hXENk2bDavWc1g0nkeZQxl4UYmiObFiTDS%2Bf7BIwf7nzyaxzv2B1hyyC37BwAA%2F%2F8BAAD%2F%2Fxf%2FOaycBAAA&ap=${AUCTION_PRICE}&l=3577992&sub3=1701529790&pid=91283&sub2=icon&sub2=to3000&auid=06d1df49891152b47cbbd94e6b1553e7&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
IP 192.243.61.226:0
ASN #39572 DataWeb Global Group B.V.
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /winnotice?sid=H4sIAAAAAAAC%2F1RTzWskRRSvWVdw8aToQdjDeFORSXdPz2TGRVb3SxbXJOwHuQnVVd3JMz1VTVX39CSnoCB7c8SDe6z8Jh%2BsruKCV1E6XiQg7FwkovkXFIU9y8yOGX3Q%2FT5%2Bj%2BJX7%2F3q453ihPko%2BPHKe3qL0pQvtBpe%2FZVVUlKXtr50u%2B57De9CfZVUO7xQH0x%2Bpv%2BG77Ua3qv1d2KxoRcCz%2Fc83%2FPr18jEiR4sTFFQ9qDrN7peIwwafivEwDjYogbLa5D9E%2FY8SI6fXv%2FpIUhUUL1vrsR2I9fZ61d7RcpzbdCXB3fUhtKlQm8eJqaGRB3MuqHtmLF7Z6DVwYw1dH93whoRjVntFx%2BROphRQ9Tfe8IuShErRPJZlP0KcVqBeAWhPwLJRwwQEkvLUL39JW1KvvkE5RN0zM4%2B%2FhtUjtnZ31%2BA6n19KaVB%2FZZOi5y0shgkDjSoQGsVsuIQ%2BRYDlYcQ%2BYcg%2BTNbeHwDqre7bFMNkm56e6IKlFRI4yG4ZSgmHzEUSQ1FVkNPHtd5q5t43mISJc1mJxRCNJtCtDpt2ZLNsJN4KMSE3hB5NoRIhxBmG5nZxgYNYYpPQLZCwR0oc8jsfidoB0GIWBy99QybGjgd17229GUSdjtd328FUbgookh2w7gd%2Ba1WM15EREcXL99%2FzbsT8FFE6jRBSgwxP%2Fr%2Bz9lpVjmowo2UIQcTH7GZjYzMjy6edq07WMlgc4a%2BdChjhtIylJyhJIYyZyj7bk%2BmNrBuX6a2iPyZD2a%2B6UY6X3N7Ol%2BLFQM3w53shD03XdZf4n1sxMf1xBNBJ%2BmGzaATdrtRR4aLzXanLYUvO3HYkbD070jIngG3NWzRmL342x%2FIJjqSnyHih7DpIQS9DF6cBy8d%2BLrDlnKQ%2BlsZCy%2FwW42kUFYXmW0I3UOWn0O%2BWdtJT9hLUz7te3f%2FN3NhHDLj8AH9yLCW3h3d1CXbvalLyx4uZzn1aItPhHUr53n81BfvxpulNvL6FTu8%2F7aYAJPwwe3Y5je4kqTWLPvyEkkZm2vaiJh9d92uxtFKYdcvFUYV2Y2Vy9eu9zITW0taVeD06OrnEDRm5z79dfpkzn%2F1JshUMIVDrzhdG0hXENk2bDavWc1g0nkeZQxl4UYmiObFiTDS%2Bf7BIwf7nzyaxzv2B1hyyC37BwAA%2F%2F8BAAD%2F%2Fxf%2FOaycBAAA&ap=${AUCTION_PRICE}&l=3577992&sub3=1701529790&pid=91283&sub2=icon&sub2=to3000&auid=06d1df49891152b47cbbd94e6b1553e7&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg HTTP/1.1
Host: dec0215.funsoups.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 02 Dec 2023 15:09:52 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3d7eb5e1f474d9053fb3dbfa586b2b4b
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
45.133.44.10200 OK 33 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
IP 45.133.44.10:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:05:18 19:19:17], baseline, precision 8, 200x200, components 3\012- data
Hash 70cf8250da1a25a7b445231428af7828
a849d338423d2919949340838c768bba90b9081c
b7060bc46dc459a00d4124523a26f0cbf31fba31d41fccae9f82bedaf22c1186
GET /cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:52 GMT
content-type: image/jpeg
content-length: 33103
server: nginx/1.21.6
last-modified: Tue, 09 Jun 2020 11:44:50 GMT
etag: "5edf7632-814f"
expires: Mon, 04 Dec 2023 15:09:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
bluemediafile.site/img/NUTDL.jpg
172.67.217.198200 OK 2.9 kB URL GET HTTP/3 bluemediafile.site/img/NUTDL.jpg
IP 172.67.217.198:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 344x49, components 3\012- data
Hash fb48df482049de320eb7a80417229285
3cd45f25fdc94e73c7b97759f4d2dfc6c413aee9
fa4be2aa84a1216af71cf516f815f4bbd2bdc66ee04a22b491a3b3a7c92781aa
GET /img/NUTDL.jpg HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
DNT: 1
Connection: keep-alive
Cookie: _ga_H5HV9R7NL8=GS1.1.1701529794.1.0.1701529794.0.0.0; _ga=GA1.1.513181303.1701529795; _ga_0T6EDCXSXW=GS1.1.1701529795.1.0.1701529795.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:55 GMT
content-type: image/jpeg
content-length: 2934
last-modified: Sun, 07 Mar 2021 22:22:12 GMT
vary: Accept-Encoding
etag: "60455214-b76"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EaMd10t2fWmOgKHwPn4B%2BKtAs5OZ5xM8qWiZUNR3FX%2BaUl5brNtnN4wfKyuu5eoRziIru%2BKAE%2B7V1VSjwdFNV81zcxiHoQNNWpP5H1TPL13UPL59nnDdXUJ8tUmO8K5QTSN6gmI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e6318dc0b45-OSL
alt-svc: h3=":443"; ma=86400
bluemediafile.site/sw.js
172.67.217.198200 OK 103 kB IP 172.67.217.198:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103042 bytes)
Hash 9b54dc61560fdb30944e333c3b687762
de8baa8464bc323a42a4c6106cae79a46246cce0
10606cea64fc86e98861f28ce9cd07706eed1f26c520a2b619dc36ee92989c4e
GET /sw.js HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 15:09:48 GMT
content-type: application/javascript
last-modified: Thu, 04 May 2023 03:50:06 GMT
vary: Accept-Encoding
etag: W/"64532b6e-19282"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 901
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DNYZb34zu7yF5KMNu63RLstKb06xGE3bfnjoHPee1HpxDNeepcwc7YMvAgFnqC%2BK%2BmNaUDjbAlejUhmXLhp3t1Z0teGRlRMi4uo%2FG4VIj9ipx3%2FjcAv7vzXryyB8xeDAeowOdSQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3b5c160b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
consukultingeca.com/ck03ZUoJb0QSFQc%2FW0dwUCVDEToBdxhKKB44UggvFiRWAyMeKBkWIwYoGBY9XCdER2ZQPloDaEh8G0c5HzsVX2hGYwRHZlA5VgIVGykVX2hFewNTf0dvG0c5By9oDC5Abw1HKUR8BQB8EHsaBHpDehpRfkF1GgdzFn0aUy4Rf1NdfxcsA1x%2BUDA
54.225.185.110502 Bad Gateway 0 B URL GET HTTP/2 consukultingeca.com/ck03ZUoJb0QSFQc%2FW0dwUCVDEToBdxhKKB44UggvFiRWAyMeKBkWIwYoGBY9XCdER2ZQPloDaEh8G0c5HzsVX2hGYwRHZlA5VgIVGykVX2hFewNTf0dvG0c5By9oDC5Abw1HKUR8BQB8EHsaBHpDehpRfkF1GgdzFn0aUy4Rf1NdfxcsA1x%2BUDA
IP 54.225.185.110:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerLet's Encrypt
Subjectconsukultingeca.com
FingerprintE4:6E:B5:43:03:91:40:FF:1A:C0:DC:5D:25:02:4F:9A:8A:E1:FD:2B
ValiditySun, 29 Oct 2023 09:15:17 GMT - Sat, 27 Jan 2024 09:15:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ck03ZUoJb0QSFQc%2FW0dwUCVDEToBdxhKKB44UggvFiRWAyMeKBkWIwYoGBY9XCdER2ZQPloDaEh8G0c5HzsVX2hGYwRHZlA5VgIVGykVX2hFewNTf0dvG0c5By9oDC5Abw1HKUR8BQB8EHsaBHpDehpRfkF1GgdzFn0aUy4Rf1NdfxcsA1x%2BUDA HTTP/1.1
Host: consukultingeca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 502 Bad Gateway
set-cookie: e02ef1672ae5d8716db6414eab74f025=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.166.32200 OK 27 B IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a602caaf7bd915cc50d422d4d0a2dfcd
ee8f697d16b8e6f8ffe931ba3f3ccb0debc58455
998a947faf190926043a8e7b483483a6920465f9515ddae2fa486aa0d548b90c
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: text/plain
set-cookie: csu=2037164604815806@1@1701529789; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gDwhDmjqhY9S%2BxQ%2FjATjE3j%2BFOoLocgW1azc4%2BpzGvZpu6oftS6Z2dHHoyDblaerLqHAtyIi5mPWhIhADgdvVJ2HbnV%2FTAnHJTlTq66DJI3hCMrg%2BTyL0871NXqepm%2Fw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3ff98f63e5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
172.64.166.32200 OK 102 kB IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 02 Dec 2023 13:09:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J7SCEgp1ngVzL5j4FaRujY0FkjO3UCarHlBQmwpOLjIs%2Fxcj11hS80QeCIiAuvMxkxFVoyIO9Af48LRRfZLlWAXAhGfFOpss1fa5cp4JciSJQKgVwaA0eIU0ehQo%2BRRw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f47e3fb92f63e5-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.166.32200 OK 26 B IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 00761a470255e02c7d834c82ebb8e6db
e90364d60b686b3166a8bff7af1b2ab00ed924fd
87d03951f01aa49914814487e6f5a3d289c8847bcd4faad8cf0ae76ae559c1a1
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: text/plain
set-cookie: csu=838573359076323@1@1701529789; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HuyGpUAjvToCoX%2BFIFpp%2FFOcGr9U2%2BXxsfHStKzIZrjsV6RvPYXjWcsceIZCcMSCd7%2BNKkTvBCbDkPQXzkvASQlXrTgBfw634uLsscsaqxxPVnqjt2AenKCf4%2BMkjR0r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3fe96863e5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
172.64.166.32200 OK 102 kB IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 02 Dec 2023 13:09:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ReY9AP8%2B1IUCJLts7CMHcCbNq0I0KNFnNyNB9KwQ88TNpii5Etqrm2FXWooUHi02svLI%2Fxt3egbpKvYJUru4%2F5bwWsOSrOC2yA%2FFYQs%2BN3Aktm9sQ%2FgMQPb1XWBJ59vN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f47e3fb94163e5-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1TEuB2YC1_a1_JzdyC12IKRy6KV3hM88b0At4yaYGkPTgvEzhMg4D-J0Hf0uznMLDwyqY9KQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S537000292%3A1701529790843860&theme=glif
64.233.164.84403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1TEuB2YC1_a1_JzdyC12IKRy6KV3hM88b0At4yaYGkPTgvEzhMg4D-J0Hf0uznMLDwyqY9KQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S537000292%3A1701529790843860&theme=glif
IP 64.233.164.84:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1TEuB2YC1_a1_JzdyC12IKRy6KV3hM88b0At4yaYGkPTgvEzhMg4D-J0Hf0uznMLDwyqY9KQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S537000292%3A1701529790843860&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 15:09:50 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-uKbKN6RN4WQE3Q50FXuzMw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
172.67.217.198200 OK 865 kB URL User Request GET HTTP/2 bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
IP 172.67.217.198:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:AA:16:1F:ED:EB:4E:45:23:CB:73:8F:1C:03:99:C2:B7:DB:24:5B
ValidityFri, 24 Feb 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
Size 865 kB (865016 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA= HTTP/1.1
Host: bluemediafile.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dhHm4igFN1nNfg1ZAlztxEExMKv7KPn676A1cN1YCQmp5dEiYLO6AWoJ4FzeZ33NZZO5ClqN46ubi8tEYx%2Bj7uNCyDbEP0Ykp0kynTgPsmJqxV8sOS0wden9E5phPU9cHMTNyjY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e385c385685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
172.64.166.32200 OK 102 kB IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 02 Dec 2023 13:09:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r0%2FtOHAwRyiJG7gMM9LEEYVPYviVZp2TukQWf2jFKdDF7dmpHhGgDBDC0fXAz72LvNHrqYWwRhtRcAu0tAI9du3r2HvA9RhsDqQXUUSSSYg9FuE2HFKOPAViDgkrCvtb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f47e3ff98263e5-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.166.32200 OK 26 B IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 578103aae7878d8e216a12f826b6689d
09bafcc79938c24d9e209ccff80b6203ddc58211
7482628a3befe67caa29d6df9a6d46242c65d63ea6222ae27ef438bb218552f2
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: text/plain
set-cookie: csu=481962115408142@1@1701529789; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ol%2BZjZa8JUKFyR%2BN5jJ2Z6on7pKGx3VWMIhymZsMk8KYI0gK8Z0kgHRE5vLn36xmM4BlHCWps7rFcpgqszyDP7u9rE67dkCwyZaBk8fno497KL5W5Pny92QgqQshDX5X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e3fc94363e5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
172.64.166.32200 OK 102 kB IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 02 Dec 2023 13:09:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=poWNV3kvqlQUO8%2FBLEmy4zt2XvbcHKl4nKo2okCt9CGbe76EVO%2FhCs4uEUD95t2wkmQytKP0JXxaczbS8maHVwoDrSyR%2BdO9w1MdVYmv2mCeOSoMyvey%2FRiAnz%2BTjnTT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f47e40099f63e5-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ldrenandthe.org/SHlCVFdnRiEnaiwhGDwFDQkBBgEsACE/Mw4sChphGkkADTMmMGQgPixEemZhekt2cichHX9nZW4KNjUjPQp/Zmd4TGQ9OS4Wf2ZneE9yZGd7SmdjFCANNiQkbUoDcWUOXHASMy0acmZmfVckITk7FjckJGYaLTlyej81PTkmFjY9NC1ccRIkIR1nZxMATTEdFgk4AxUWCTpnZmJ6P3MGAzIuMT8FGio0AwEsDno1AycoJj4TLT8NBgQQHRIuZRw+EAI1eyo6Ng8CNjUcIhkXFAIzezMPLmYeLRQMZHE6ETo4Czt1N28bPSdiLXAzKnFlfUsAJyU9MgECZg1PGj0GL04EIzwnDykMEQEsey1vMTYFDGQZXHBhZQ4td3FlfUsAPnJ6THAWHRBOZ2Ziej9xJWN9Sis8ByMWZ2ZiejsSHBwtSjMYZzgoNCAVOBxnZmJ6PxgCAR0VCQwjOkxyIXJ6THAWYn89J20ULiMUARh/ARMcZzBccGFlCgk0cWV9SwATYH8sI2cmPkgmZhwwFhA3FDJccGFlDhp6Z3J6THASBzpIej4SISt2JwMOPxNtJgwLDGMnLTA1IzYuEDQRIAwTGzswKjUjYRNxPGdmYno/G2wEAU8kDCFtS3dmETgwFzwCHTVzIiU7K3Adbi4jdGUzfyshJC0qHQEMFXsfFzwjAxUTOW8tMzM1EBo7cRkiOTE2ORsOThhiEx4OGyNmLDF7ZyAgFhA+ASYNBCxyekxwFgUHCSoGBnEtJDFvAQwRPBI6KxIeDSQpch80HggAMRYfERIjGwIrNSMGDRI0GAIESnseAHkyNCI8DUwQGmcyNHZxZX1LAHFlfUsEPCMdEzY6DXtIZ2ZiejsDYjl5QAk1AQpccGFlDiMYGz59AHInPy8SBj4EJygFJwE7DAsFcnpMcBYFET0uDTQZXHBhZQogITNyekxwFgMGGyccIAwIMDFgKj8PGjwlTHQxYQEyLhIFAU07E2MSKiU5HzI8FwcGeT8UPxkYMTYwYjlMNmBkJTARHjR5FAgsBQs3CCAUPD0yIGUSNQwnHQZNCRkEDUoqFmIGFhAdPzA7LxNiJiM6Mw4GIBskBxk1GBcgGkktN28iCiQ9Myc7chMeHzs7bW4ZACATPS8dc2NlekAFAQQsEzYwZHpBBAE1LxYtPz96DnUzM21Ld2YVKUgVGWZ9PBARNBA1e21yekxwEi0qChZsEQ48dD4FCiolIy8YXHBhZQ4LZ2Ziejs4bTs4Lyg5OD8WcAEeGRoWHGAPIygNLQUTO2IyLAhyYwAFFSU3YylccGFlCh0BPD0gDQstOwIAKh4eEQAYLT1/GylxZX1LADkZOjs3DGEpSysELhI9cDVyekxwFmEdIHQMZAZODThyekxwFhsOKA9nIH1KMTwTeEoaMA0uTSxlJDA0JGUvCjcAHnJ6THAWOg8DIxUDLAs2BgV8GA4uDykXDg0CPjZxHA4jGwZkYHgTCzowD0oMAy0aFA5nY3oBZ2Ziej8LHj05KiwtHyERdRAnASgRbRMOTyEWLnAdZ2ZiejsOJhMkFwkFcnpMcBY7OyMBLXJ6THASIB9NcHIhdUlsbXl6V3dyInVIe21jfU50ZGV+SXBkZnlOZCAnKR5/ZXE4DTY4anlOcmViekB1bWFwTHY
172.67.194.104204 No Content 0 B URL POST HTTP/3 ldrenandthe.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
IP 172.67.194.104:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 02 Dec 2023 15:09:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5cTuizpyy%2BpqQyciZP3eXy0BLh7CgfLMtKFPjYHsMkka0ffebXCx2CWdEZww4E%2BUsXhOa64I0l406MoPuUQY6FMPFlyKl5QGBhQdEwX0xSMt0njfhkXPqXhY2i7BU8BLurg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e4ebc7256c0-OSL
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
172.64.166.32200 OK 27 B IP 172.64.166.32:443
Requested by https://bluemediafile.site/url-generator-1.php?url=XWWUCOrsJWk+kpqcqmf3Wb4A/3qAQMwbtrxO7z2m42e5AP2X35vWXNfLEzS5aK8nX+KbU5oY428ljsqIYzVrluWRKv4eKeZszT76I1LaPcA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ead149d890d7c884d32a7c3681af846c
5e467e38248b4624fa22f281a7263b19b0e8a8be
99d7e7650af2fae7bfbb1f3833322c74260ba40649525e8ee69a652e0d1a1548
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bluemediafile.site/
Origin: https://bluemediafile.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 15:09:49 GMT
content-type: text/plain
set-cookie: csu=1994576026020117@1@1701529789; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://bluemediafile.site
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IMr449gNKWhfoWnDg7HOBlr3qZ%2F70mxo7WRKGQiQ1gFwNraBBNryRaoPYzB4W2MoHVufJqKTspkDUdfjEkxrCbmvoErF7qaV%2B2HdfOPfSMCXD6HwZG8n8nndjfx2gN%2FJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f47e4009a163e5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2