Report - fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af

Report Overview

Submitted URL
fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af
IP
172.67.149.70
ASN
#13335 CLOUDFLARENET
Submitted
2022-12-01 05:59:06
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
manager.production.almightypush.com	731001	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.3 kB	4.7 kB	3.136.143.215
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.5 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
static.production.almightypush.com	214819	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	56 kB	54.230.111.2
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	714 B	1.4 kB	142.250.74.131
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.163.1.35
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	700 B	2.0 kB	54.230.245.118
zeniocloud.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	380 B	167 B	167.114.67.56
fuckthisgirl.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	1.7 kB	172.67.149.70
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
alexatracker.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	419 B	983 B	104.21.85.99
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	51 kB	34.120.237.76
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	3.8 kB	93.184.220.29
img.almightypush.com	70553	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	426 B	94 kB	104.21.234.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-01	medium	zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af	325 B	2023-03-07	2023-03-17
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af IP 172.67.149.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:43:48 Last Seen2023-03-17 10:36:59 Times Seen1 Hash 9f6ed474c88467d1097339cf1c621720 aee0dcd1f9cc0ecfc0d39a2c4cfcf5b864671037 18c34249b50a2f573689110419b07054a3ade361059fb454ea43a596bdc4f79f Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/js/backoffer.js	430 B	2023-03-07	2024-05-10
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/js/backoffer.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:00 Last Seen2024-05-10 10:00:36 Times Seen5864 Hash 6d5aa83d23ce0b9f72d3b87d000d8fae 034fb8768eb58ffc0b5849e2c162989741a6cbec 89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800 Loading...

	static.production.almightypush.com/mng/subs_window.js?ver=1624960645	20 kB	2023-03-07	2023-08-09
Pretty URL static.production.almightypush.com/mng/subs_window.js?ver=1624960645 IP 54.230.111.2 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:00 Last Seen2023-08-09 01:40:16 Times Seen694 Hash ae593f4be1dd1f0710123918b49c4933 66fbe30bb873e0a47d3d72e737d68aa4b6916c26 fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206 Loading...

	static.production.almightypush.com/mng/channels/init.min.js?ver=1624960645	22 kB	2023-03-07	2023-03-17
Pretty URL static.production.almightypush.com/mng/channels/init.min.js?ver=1624960645 IP 54.230.111.2 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:56:43 Last Seen2023-03-17 12:47:55 Times Seen1 Hash 2ea196bb9d9670ec138eb0c8c23e6696 b0876fd8c0c56c5d34368c16a829c040c23cbaba 1475c052ae8dbc220775cd44b20e508e38db9f09168c57d4a73e0a9027f252f7 Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/js/jquery-1.js	87 kB	2023-03-07	2023-03-17
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/js/jquery-1.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:43:48 Last Seen2023-03-17 10:36:59 Times Seen1 Hash 172fe99ce616421c35d25f9fd147896a d56c86ac8eed84767f51ecc2e02f2eee4cbbe317 fa256d2bbe755e7d5a6d21c51bd5cb1f519eb0e627c50f705a59d98f3ba9ab62 Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/js/funciones.js	3.3 kB	2023-03-07	2023-03-26
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/js/funciones.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:06 Last Seen2023-03-26 00:40:45 Times Seen3 Hash 900cc9d3f86f98c45fb4193c6fc556f5 db92df6dedc005430411d0af7b274507563f6cbe e0f6c7148abae7fb9eee3af8fbf1c6ffa83deba6c864e397040b13362719e6fb Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/js/custom.js	1.7 kB	2023-03-07	2024-05-08
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/js/custom.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:06 Last Seen2024-05-08 01:14:58 Times Seen14 Hash 703c59d25f4906776955c9c9be02591d 177de851468274cb4f13c02edcd9112c4f0280a5 8b945eb39d09edb3a11de8b4e54004ff17fae9f8bc4463018bb5d6ddaf6256ea Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af	1.9 kB	2023-03-07	2023-03-26
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af IP 172.67.149.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:06 Last Seen2023-03-26 00:40:45 Times Seen3 Hash 919e22ea77faca024ea9faffb5cad49c 368caa602a7b063c322997d4cd1096eea51183c1 f80ae35adc42e50a73b374a9c1ad9bd489c2b5dc66355c61c880eb6f39ca19e9 Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af	159 B	2023-03-07	2023-03-17
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af IP 172.67.149.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:43:48 Last Seen2023-03-17 10:36:59 Times Seen1 Hash 59c614f1f2dea129fa4a56dc87bcd838 227c4f0c3b7e7ecce9e9d2a2121fa57571751ef0 b95205003689c76222ffd54ab19a893800a93e4f7a9700067be6323f7e97747c Loading...

	alexatracker.com/jscode/JAIA.js?sub1=fuckthisgirl.net&sub2=&sub3=&sub4=&sub5=&prid=	0 B	2023-03-07	2024-05-10
Pretty URL alexatracker.com/jscode/JAIA.js?sub1=fuckthisgirl.net&sub2=&sub3=&sub4=&sub5=&prid= IP 104.21.85.99 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-10 15:47:39 Times Seen37510236 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net	601 B	2023-03-08	2023-03-26
Pretty URL zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net IP 167.114.67.56 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:30:13 Last Seen2023-03-26 00:32:50 Times Seen2 Hash 0378dfcafcbfe2736cf1f9a5e7f5ebdb c2ab92d4b3d4705a447535719091d10f496c49a9 35a2dac4f4dae877685b6e1c97f79b0e24fb9ea83e1302315f02520a5f0f6308 Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af	179 B	2023-03-07	2023-03-17
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af IP 172.67.149.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:43:48 Last Seen2023-03-17 10:36:59 Times Seen1 Hash b5f128838280a2b878490505a67f83d5 387b27b31be449717e21166ab6230cf2bade1792 667b0404735114261e05910c1b6cfae5e5aba57b5170ebc7ce432efd31c594c8 Loading...

	fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af	638 B	2023-03-07	2023-03-26
Pretty URL fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af IP 172.67.149.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:06 Last Seen2023-03-26 00:40:45 Times Seen3 Hash 79d9cc35bdb39e4c3ceaf353254dfb8e a0ca94a0befd785a5600f6fe7768fd3b8770f3b8 5978be09ebbfc769511412b3aa320e41e5acb65807f2352c4be07035b543d3cc Loading...

HTTP Transactions (42)

URL IP Response Size

fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af

172.67.149.70

301 Moved Permanently

0 B

URL HTTP/1.1
fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af
IP
172.67.149.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Thu, 01 Dec 2022 05:58:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 01 Dec 2022 06:58:55 GMT
Location: https://fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tMWZPTHvqQuseKTXNclGNyBAvHfhxnQqbMFaqdCTBtitOhqa%2BAGaGuvDTdbsAT%2Ftj80GYESYbhAWRN0ZW9Qk5HM04H%2BVMyuTkp2GW02HHz9b6V6q5Z5KEroaD7eAQ%2BUHniZ4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772998023be40af6-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9916
Expires: Thu, 01 Dec 2022 08:44:11 GMT
Date: Thu, 01 Dec 2022 05:58:55 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6475
Cache-Control: max-age=109218
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:55 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 12:19:13 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 05:18:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2448
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
8ee2f2b77ac9e65ed1c5c928aea4b00f
c00040cb88a72f54a0f78fd903ba908e0fbabd6d
c08708cdabbbfd234fd27ec67896042665828e5057f89941ea23182c733ae2c8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=111726
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:55 GMT
Etag: "6387540d-116"
Expires: Fri, 02 Dec 2022 13:01:01 GMT
Last-Modified: Wed, 30 Nov 2022 13:01:01 GMT
Server: nginx
Content-Length: 278

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3104
Expires: Thu, 01 Dec 2022 06:50:39 GMT
Date: Thu, 01 Dec 2022 05:58:55 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: FEqKifC6ZqtXq+ox0y4LiKWCcqdGKC8zewYIvAwkhYU5+TEVXYB7SN07ficmfy1EOnVhIvBZIBU=
x-amz-request-id: JDDYXB8X2X66RRTS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 05:46:09 GMT
age: 766
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 05:58:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
8ee2f2b77ac9e65ed1c5c928aea4b00f
c00040cb88a72f54a0f78fd903ba908e0fbabd6d
c08708cdabbbfd234fd27ec67896042665828e5057f89941ea23182c733ae2c8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=111726
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:55 GMT
Etag: "6387540d-116"
Expires: Fri, 02 Dec 2022 13:01:01 GMT
Last-Modified: Wed, 30 Nov 2022 13:01:01 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278

static.production.almightypush.com/mng/subs_window.js?ver=1624960645

54.230.111.2

200 OK

20 kB

URL HTTP/2
static.production.almightypush.com/mng/subs_window.js?ver=1624960645
IP
54.230.111.2:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text
Size
20 kB (19491 bytes)
Hash
ae593f4be1dd1f0710123918b49c4933
66fbe30bb873e0a47d3d72e737d68aa4b6916c26
fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206

HTTP Headers

GET /mng/subs_window.js?ver=1624960645 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript
content-length: 19491
last-modified: Mon, 05 Sep 2022 12:24:26 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 17:43:12 GMT
etag: "ae593f4be1dd1f0710123918b49c4933"
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LaTs3JrQnicKLuxSrIr0ObyOzujgCVNOoTQEm4sbkTs26xvIu3M8ug==
age: 44462
X-Firefox-Spdy: h2

static.production.almightypush.com/mng/channels/init.min.js?ver=1624960645

54.230.111.2

200 OK

22 kB

URL HTTP/2
static.production.almightypush.com/mng/channels/init.min.js?ver=1624960645
IP
54.230.111.2:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
22 kB (21924 bytes)
Hash
2ea196bb9d9670ec138eb0c8c23e6696
b0876fd8c0c56c5d34368c16a829c040c23cbaba
1475c052ae8dbc220775cd44b20e508e38db9f09168c57d4a73e0a9027f252f7

HTTP Headers

GET /mng/channels/init.min.js?ver=1624960645 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript
content-length: 21924
last-modified: Mon, 05 Sep 2022 12:24:26 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 07:11:11 GMT
etag: "2ea196bb9d9670ec138eb0c8c23e6696"
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2sZZbKD8Tzx_IWOB1rl1VHyApi1dVCKHtvG9DUrZdmN_LrWFGtzafw==
age: 82560
X-Firefox-Spdy: h2

static.production.almightypush.com/mng/subs_window.css?ver=1624960645

54.230.111.2

200 OK

6.9 kB

URL HTTP/2
static.production.almightypush.com/mng/subs_window.css?ver=1624960645
IP
54.230.111.2:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text
Size
6.9 kB (6945 bytes)
Hash
bd7dbae15f904a4e1213439ebfefddbe
9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e
30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a

HTTP Headers

GET /mng/subs_window.css?ver=1624960645 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
content-length: 6945
last-modified: Mon, 05 Sep 2022 12:24:26 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 07:59:05 GMT
etag: "bd7dbae15f904a4e1213439ebfefddbe"
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sWPEK0nxoeMLKGqQ6IKhMElCt_BXpPJ4a_tS9wo6g4--RqWHhgqdOA==
age: 79327
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
63fef1dc1e4e9c05dbfa87e3febcc02d
610167f4af3cd8c2a5836bed6bbb6bcb160e03d1
b82d5648d6f914803c4c22752ebe0749c072bb61aba4fb1ae382fe5e8f1412de

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B82D5648D6F914803C4C22752EBE0749C072BB61ABA4FB1AE382FE5E8F1412DE"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10528
Expires: Thu, 01 Dec 2022 08:54:23 GMT
Date: Thu, 01 Dec 2022 05:58:55 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 05:08:56 GMT
cache-control: public,max-age=3600
age: 3000
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6464
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:56 GMT
Last-Modified: Thu, 01 Dec 2022 04:11:12 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/s/gts1p5/WN5AJRoEZfI

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/WN5AJRoEZfI
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
886714779ee4d08dbc99f5d9921c8171
c05afa722d1c750ac1d760165cbdad4cdfd3a94b
9b359b46a506bd35ced4699a1f0703d00ca62c8b474ecc7c1068fcfd09f7884f

HTTP Headers

POST /s/gts1p5/WN5AJRoEZfI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.production.almightypush.com/mng/channels/sw.min.js

54.230.111.2

200 OK

6.2 kB

URL HTTP/2
static.production.almightypush.com/mng/channels/sw.min.js
IP
54.230.111.2:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
6.2 kB (6178 bytes)
Hash
b2405c913e932b43ebf78735d6443f3e
0bc31e5f485d5080be019d8494be42b0b1a3c860
e8ee0d1cbe8b059c84f744ac6ed1b37205bbca409c174c0bd4376e738e1b7e11

HTTP Headers

GET /mng/channels/sw.min.js HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 6178
last-modified: Mon, 05 Sep 2022 12:24:26 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 05:59:49 GMT
etag: "b2405c913e932b43ebf78735d6443f3e"
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MQ3MhSnqkrp4d3M11M-_1g9fxjzQWmbdgHYO2qq03HLnb_lle43lEQ==
age: 86348
X-Firefox-Spdy: h2

alexatracker.com/jscode/JAIA.js?sub1=fuckthisgirl.net&sub2=&sub3=&sub4=&sub5=&prid=

104.21.85.99

200 OK

0 B

URL HTTP/2
alexatracker.com/jscode/JAIA.js?sub1=fuckthisgirl.net&sub2=&sub3=&sub4=&sub5=&prid=
IP
104.21.85.99:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /jscode/JAIA.js?sub1=fuckthisgirl.net&sub2=&sub3=&sub4=&sub5=&prid= HTTP/1.1
Host: alexatracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:56 GMT
content-type: application/json; charset=UTF-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
set-cookie: trbarid=fb4902cc97fccd87202567b9342bd85e7a1417a4048ea15aeead8d07bcd3e000a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22trbarid%22%3Bi%3A1%3Bi%3A6055346324965442208%3B%7D; expires=Thu, 05-Dec-2024 05:58:56 GMT; Max-Age=63504000; path=/; secure; HttpOnly; SameSite=None
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N5vMjmjv2LJ6tSf2ag6QU9RGZQZmkTyc0N0FR56Mg0wCw0FGvrT6H2idDvT%2Bjk8L7IaprbwnsHV9fpuXa47%2B%2F0Sy5L5y5HdAu%2FcamaZUifz3wetPPFnZd7pW3ScScSQMA6Ja"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729980aedc8b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

push.services.mozilla.com/

35.163.1.35

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.163.1.35:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7WH0fMVBlT3iR3BDgU61vQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: im2SIS0QJY2GyQHInwfPV3275R8=

ocsp.pki.goog/s/gts1p5/WN5AJRoEZfI

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/WN5AJRoEZfI
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
886714779ee4d08dbc99f5d9921c8171
c05afa722d1c750ac1d760165cbdad4cdfd3a94b
9b359b46a506bd35ced4699a1f0703d00ca62c8b474ecc7c1068fcfd09f7884f

HTTP Headers

POST /s/gts1p5/WN5AJRoEZfI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.sca1b.amazontrust.com/

54.230.245.118

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.118:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
bd8808ceeb55ac11bb2f306d47734ee3
bc4459f1c85736acd50fe13b25c602b3f0cc089f
e97ec68f774c055c08f44cf5e46fdc8eb5f9a3fed9bd52308fd2d5c06d0c4e8d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97668
Date: Thu, 01 Dec 2022 05:58:56 GMT
Etag: "63870839-1d7"
Expires: Fri, 02 Dec 2022 09:06:44 GMT
Last-Modified: Wed, 30 Nov 2022 07:37:29 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -TjnfI6hxZQkeDXWWpc6UXneJgkxdUNxjFoCs2lQCztVSaUzv3358w==
Age: 5355

ocsp.sca1b.amazontrust.com/

54.230.245.118

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.118:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
bd8808ceeb55ac11bb2f306d47734ee3
bc4459f1c85736acd50fe13b25c602b3f0cc089f
e97ec68f774c055c08f44cf5e46fdc8eb5f9a3fed9bd52308fd2d5c06d0c4e8d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93793
Date: Thu, 01 Dec 2022 05:58:56 GMT
Etag: "63870839-1d7"
Expires: Fri, 02 Dec 2022 08:02:09 GMT
Last-Modified: Wed, 30 Nov 2022 07:37:29 GMT
Server: ECS (dcb/7EA2)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: a1xiWGgqK3LMSzQVZz-bT1J4o4SvpBteKUshTl51LBYLxSKLswYUow==
Age: 1480

manager.production.almightypush.com/api/v1/code-snippet/

3.136.143.215

200 OK

0 B

URL HTTP/2
manager.production.almightypush.com/api/v1/code-snippet/
IP
3.136.143.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /api/v1/code-snippet/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token
Referer: https://fuckthisgirl.net/
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:56 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

manager.production.almightypush.com/api/v1/code-snippet/

3.136.143.215

200 OK

1.6 kB

URL HTTP/2
manager.production.almightypush.com/api/v1/code-snippet/
IP
3.136.143.215:0
ASN
#16509 AMAZON-02

File type
JSON data\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1634), with no line terminators
Size
1.6 kB (1643 bytes)
Hash
120463d50c2e1d60a88c609f23b557a6
443ee97467d289e98a916e4d671fc17084298374
9ca86d59d457840e053e8f54954903ee8b25dd3074ff4daf4dcbb0a46ebfc0fe

HTTP Headers

GET /api/v1/code-snippet/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuckthisgirl.net/
Channel-Token: NWExZDA2NjA4NDZlOGZjMzdmNGEyYjQ4YTE1MTNhZDA9NDEwNj0v
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:57 GMT
content-type: application/json
content-length: 1643
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
x-content-type-options: nosniff
referrer-policy: same-origin
set-cookie: attached-subscription-window-id-4106=1618; Path=/
X-Firefox-Spdy: h2

manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1618

3.136.143.215

200 OK

0 B

URL HTTP/2
manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1618
IP
3.136.143.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /api/v1/window-session-rules/?name=allow_notifications&value=0&window=1618 HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token,content-type
Referer: https://fuckthisgirl.net/
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:57 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1618

3.136.143.215

204 No Content

0 B

URL HTTP/2
manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1618
IP
3.136.143.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/v1/window-session-rules/?name=allow_notifications&value=0&window=1618 HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Channel-Token: NWExZDA2NjA4NDZlOGZjMzdmNGEyYjQ4YTE1MTNhZDA9NDEwNj0v
Origin: https://fuckthisgirl.net
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
date: Thu, 01 Dec 2022 05:58:57 GMT
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
e6fd73375792bef51b95301ca3c7936f
c72cb18b5d127a0bee684e545257c13aeb202f58
e83b102510f787c4f4728454a0cd418edd112104dfa5cfedb1a494d524c14549

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2891
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:57 GMT
Etag: "6386f74e-118"
Last-Modified: Thu, 01 Dec 2022 05:10:46 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 280

manager.production.almightypush.com/api/v1/session-events/

3.136.143.215

200 OK

0 B

URL HTTP/2
manager.production.almightypush.com/api/v1/session-events/
IP
3.136.143.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /api/v1/session-events/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: channel-token,content-type
Referer: https://fuckthisgirl.net/
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:57 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

img.almightypush.com/image/dc0843d687364708807c35f974a773f9/image.jpg

104.21.234.131

200 OK

93 kB

URL HTTP/2
img.almightypush.com/image/dc0843d687364708807c35f974a773f9/image.jpg
IP
104.21.234.131:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3\012- data
Size
93 kB (93400 bytes)
Hash
476cdda39ef8ab396888c1817a62a726
5330bbcfd752b6b66468ed245a28b4b3ed425a4e
91902b6e343eae4011bfd0075710def9ba6a86946e7aa72055c5c3f6ad8ff03d

HTTP Headers

GET /image/dc0843d687364708807c35f974a773f9/image.jpg HTTP/1.1
Host: img.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:57 GMT
content-type: image/jpeg
content-length: 93400
expires: Fri, 02 Dec 2022 05:58:57 GMT
etag: "5330bbcfd752b6b66468ed245a28b4b3ed425a4e"
cache-control: public, max-age=86400
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, PATCH
access-control-allow-headers: Origin, Authorization, X-Requested-With, X-Push-Channel-Id, Content-Type, Accept, Channel-Token
access-control-allow-credentials: true
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lXJUVkSLjMI4%2BON7oVBXjGdiTAlsSeEF7GdabbaYx2v1Lt%2FIP2oNB2vH5LBAsGmpuys8t0M9kmFdb9Xu3s2qnBK3Ay9lPszgD7FYRU9OmVrf1IxMdt%2FfPGG9yPSnRwiQJmbAZP52Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772998116c157795-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

manager.production.almightypush.com/api/v1/session-events/

3.136.143.215

201 Created

0 B

URL HTTP/2
manager.production.almightypush.com/api/v1/session-events/
IP
3.136.143.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /api/v1/session-events/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Channel-Token: NWExZDA2NjA4NDZlOGZjMzdmNGEyYjQ4YTE1MTNhZDA9NDEwNj0v
Content-Length: 46
Origin: https://fuckthisgirl.net
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 201 Created
date: Thu, 01 Dec 2022 05:58:57 GMT
content-length: 0
server: gunicorn/19.9.0
vary: Accept, Origin
allow: POST, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
x-content-type-options: nosniff
referrer-policy: same-origin
set-cookie: session_uuid=dd73ddb7-39e9-4cae-8ee8-4b211734aedb; expires=Fri, 01 Dec 2023 05:58:57 GMT; Max-Age=31536000; Path=/
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
e6fd73375792bef51b95301ca3c7936f
c72cb18b5d127a0bee684e545257c13aeb202f58
e83b102510f787c4f4728454a0cd418edd112104dfa5cfedb1a494d524c14549

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2891
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 05:58:57 GMT
Last-Modified: Thu, 01 Dec 2022 05:10:46 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14191
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 05:58:57 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

719 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
719 B (719 bytes)
Hash
30ada3bd57aff1458f42b7e450d36469
9ff84b8b5cd6d363e912183fa1cb9244eceb105c
83d0c66d74ea77af253a51a78cfec398aabf3665ee4cb8238140b3a5778421a8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14191
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 05:58:57 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14191
Expires: Thu, 01 Dec 2022 09:55:28 GMT
Date: Thu, 01 Dec 2022 05:58:57 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F454095ab-a1f1-4a4f-bb9e-68ca835c0b19.jpeg

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F454095ab-a1f1-4a4f-bb9e-68ca835c0b19.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7446 bytes)
Hash
f8fd0816eb402409135c039ae8366346
8a2adf9f19759d833bc4bc16d52de6c59fba355b
a398e0653664609674795d6310ec79310edbe30c216dc3c54f28f9d6442dfccc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F454095ab-a1f1-4a4f-bb9e-68ca835c0b19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7446
x-amzn-requestid: 4e1e09be-e182-47b9-ada5-6b4774f291c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cc5drFUroAMFjsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63883c57-046a05ce234dd47e20b1e7b9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 05:32:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8jEMlOF2_Ic-HWF_JGNnodcddUcIBTlD0_7-EbX4NUMxYt6YBAcv-w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 05:33:59 GMT
age: 1498
etag: "8a2adf9f19759d833bc4bc16d52de6c59fba355b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02cf22ee-ded9-4b9d-b5d8-ee6690ac9f45.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10985 bytes)
Hash
f07f254d44ff2fb86ee22cee39ef3eb0
0660a548a491d4a58ca2246f094f0553437c3f61
859b2416d638b1dc91ff563800517124b38d45b4c5db99e21539c1700829dbe4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02cf22ee-ded9-4b9d-b5d8-ee6690ac9f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10985
x-amzn-requestid: ef9e5eb9-b7b3-41e9-9837-a5979ab35d94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV91OFzsoAMFcew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63857687-53b152c0027d26e52383e27e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JGFRksMQ_LxceeV_368Xt-gjhd67bMn7D_s0X1V1fAiR6npuqCHayw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 03:10:11 GMT
age: 10126
etag: "0660a548a491d4a58ca2246f094f0553437c3f61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.3 kB (5295 bytes)
Hash
eb4b8985f697c1ff7753d3961fb4f67d
b412d62d44993500b947a38e8e242d0c6d6b7588
571c1543cd99b08e62438146f383bf48a9172ae377b4c17dbc6c8c58bdbb5803

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5295
x-amzn-requestid: e9c096df-2dba-408c-b45a-d114755fa883
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzM0HmuoAMF4Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbeb-5808a0756f4180a0613cdbcd;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUjE1-vViTaS5s23OSlhLlxC597y0etgzMYGUdlqdpHBTK_ww5DEYA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 29377
etag: "b412d62d44993500b947a38e8e242d0c6d6b7588"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38aeadfb-098c-4e6a-8abc-40288efe2526.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.8 kB (3751 bytes)
Hash
609419f1a2c58ae67febde5e2cb91c9f
bfb37735a2500848338a8fa12f28516a1ad9b5ba
32a4a65c8bd4da715b5331537bd606bab2767ad8c07af3b8aebbe5cad5591812

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38aeadfb-098c-4e6a-8abc-40288efe2526.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3751
x-amzn-requestid: 80396218-5515-4f77-9d57-95b323e1f1c0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzNHHGGoAMF8mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbed-09f83d1a5b7f65175fb137ab;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _mQdH9J5CaTiYNIQf5xVn-HGUP5tKhW_1foVDdpsVIoG_NKb9wZOJg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:48:09 GMT
age: 29448
etag: "bfb37735a2500848338a8fa12f28516a1ad9b5ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4762 bytes)
Hash
d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:29:35 GMT
age: 59362
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12655 bytes)
Hash
1039182464db1365a476dd88029b97d8
06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac
2e081da1464a18d755a841558f63303634a9e22df888c9c43246565abfc3d48d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12655
x-amzn-requestid: beeeccd0-a494-4d0c-91e9-0d1e2ab37b6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0YoFmMIAMFT4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdd0-60f5e2286cf3965a42ab31b9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CiGOvF7Lmz8cICQcjUcE6QGokbAIAd3WClI4PK_aDSxo-yHVcPPA7w==
via: 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:29 GMT
age: 29608
etag: "06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

104.21.87.253

200 OK

0 B

URL HTTP/2
fuckthisgirl.net/it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af
IP
104.21.87.253:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /it/multi/ms/3-861045/?cep=6mtEB8bCBsfq6cHcqHMbA6UYkxHF4g9HEy98NW3TeKgqxz7VuevUi2bKhe7aM-rm6UkhB1GSU_yOLVLkzmYnrQn1nFUPTWMkKWDcyskLEFSs_PGFJ9n2Smtxc3ys5b92knng307bXFfF_UOwFzNGet32qdBatLlAZqbgihUpF9e8IPAss0N3gHm3Vi0avKipUgPykTgR6OFARgJM3Q4-MXSm_nIEduawIAnW-3OGvy_4LY0MXKoV9oDVqcOIMYkL3Kmza6LjLHImtTOe3tcJfhIbwukVXXp6Qmc8_TuV7s70TdhnhGWNv27Er0WzVuEauMT2m7MdBEhCg54x5rQlxAJUCTu6ADulVORpOJRhvwY8AkD0a5UdedZs19vnmhCg&lptoken=165469f1871e03f325af HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Thu, 01 Dec 2022 05:58:55 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X0u6XfDoSITCUiglHG07a68xt%2F1f9rG2JKsM6CRNd%2BQZwhZ8lIpD5PNe%2BqdI5iW4l3tEMAVdNNOZiN1s94J%2BPe56KVHDBTCfgfXrcLLEn392IvauYyFY8st0DZSugZ0SEF3K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77299804acddb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net

167.114.67.56

200 OK

0 B

URL HTTP/2
zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net
IP
167.114.67.56:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /JAIA.js?sub1=fuckthisgirl.net HTTP/1.1
Host: zeniocloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Thu, 01 Dec 2022 05:58:56 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations