Overview

URL www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
IP74.206.189.118
ASNMOJOHOST
Location United States
Report completed2022-09-09 12:43:46 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-09 2 honestlydeploy.com Sinkholed
2022-09-09 2 honestlydeploy.com Sinkholed
2022-09-09 2 honestlydeploy.com Sinkholed
2022-09-09 2 obituaryfuneral.com Sinkholed
2022-09-09 2 forgerylimit.com Sinkholed
2022-09-09 2 obituaryfuneral.com Sinkholed
2022-09-09 2 addresseepaper.com Sinkholed
2022-09-09 2 reapinject.com Sinkholed
2022-09-09 2 obituaryfuneral.com Sinkholed
2022-09-09 2 forgerylimit.com Sinkholed
2022-09-09 2 reapinject.com Sinkholed
2022-09-09 2 reapinject.com Sinkholed
2022-09-09 2 graduatewonderentreaty.com Sinkholed
2022-09-09 2 forgerylimit.com Sinkholed
2022-09-09 2 obituaryfuneral.com Sinkholed
2022-09-09 2 phosphatepossible.com Sinkholed
2022-09-09 2 siegepolitical.com Sinkholed
2022-09-09 2 forgerylimit.com Sinkholed
2022-09-09 2 unseenreport.com Sinkholed


Files

No files detected



Passive DNS (23)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS fonts.googleapis.com (2) 8877 2014-07-21 13:19:55 UTC 2022-09-09 09:00:59 UTC 142.250.74.10
mnemonic passive DNS graduatewonderentreaty.com (1) 0 2022-09-03 20:26:10 UTC 2022-09-09 10:33:44 UTC 173.233.137.60 Unknown ranking
mnemonic passive DNS phosphatepossible.com (1) 0 2022-09-03 20:30:35 UTC 2022-09-09 09:54:14 UTC 192.243.59.20 Unknown ranking
mnemonic passive DNS cdn.cloudimagesb.com (1) 23099 2021-02-12 16:15:41 UTC 2022-09-09 09:07:04 UTC 45.133.44.9
mnemonic passive DNS unseenreport.com (1) 0 2022-03-30 14:33:17 UTC 2022-09-09 07:16:18 UTC 192.243.61.225 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-09 05:37:59 UTC 143.204.55.115
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-09 04:48:21 UTC 34.117.237.239
mnemonic passive DNS simplewebanalysis.com (2) 0 2022-02-25 04:06:25 UTC 2022-09-09 09:13:34 UTC 52.59.153.168 Unknown ranking
mnemonic passive DNS siegepolitical.com (1) 0 2022-09-03 20:27:50 UTC 2022-09-09 11:01:56 UTC 192.243.59.12 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-09 12:02:18 UTC 93.184.220.29
mnemonic passive DNS www.sexplayed.com (51) 0 2021-11-20 10:10:44 UTC 2022-09-09 07:43:23 UTC 74.206.189.118 Domain (sexplayed.com) ranked at: 338054
mnemonic passive DNS ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.88
mnemonic passive DNS obituaryfuneral.com (4) 0 2022-08-18 01:24:02 UTC 2022-09-09 10:48:31 UTC 192.243.61.225 Unknown ranking
mnemonic passive DNS forgerylimit.com (4) 0 2022-08-13 02:34:51 UTC 2022-09-09 08:48:35 UTC 192.243.61.227 Unknown ranking
mnemonic passive DNS addresseepaper.com (1) 18169 2021-11-01 21:11:31 UTC 2022-09-09 10:24:07 UTC 104.21.235.2
mnemonic passive DNS reapinject.com (3) 0 2022-08-25 13:04:49 UTC 2022-09-09 07:42:34 UTC 173.233.137.36 Unknown ranking
mnemonic passive DNS img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-09-09 07:18:24 UTC 34.120.237.76
mnemonic passive DNS honestlydeploy.com (3) 0 2022-06-03 14:16:50 UTC 2022-08-31 19:24:41 UTC 192.243.61.227 Unknown ranking
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-09 04:43:53 UTC 35.83.91.138
mnemonic passive DNS ocsp.pki.goog (5) 175 2017-06-14 07:23:31 UTC 2022-09-09 04:41:59 UTC 142.250.74.3
mnemonic passive DNS fonts.gstatic.com (3) 0 2014-08-29 13:43:22 UTC 2022-09-09 04:41:01 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2022-09-09 04:40:05 UTC 23.36.76.226
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-09 04:47:11 UTC 143.204.55.35


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 74.206.189.118

Date UQ / IDS / BL URL IP
2022-11-26 20:20:03 +0000
0 - 0 - 15 www.sexplayed.com/ 74.206.189.118
2022-11-23 08:58:08 +0000
0 - 0 - 13 www.sexplayed.com/ 74.206.189.118
2022-11-15 06:12:46 +0000
0 - 0 - 3 www.sexplayed.com/ 74.206.189.118
2022-11-01 19:47:16 +0000
0 - 0 - 3 www.sexplayed.com/ 74.206.189.118
2022-10-29 20:31:56 +0000
0 - 0 - 3 www.sexplayed.com/ 74.206.189.118

Last 5 reports on ASN: MOJOHOST

Date UQ / IDS / BL URL IP
2022-11-26 20:20:03 +0000
0 - 0 - 15 www.sexplayed.com/ 74.206.189.118
2022-11-26 09:40:59 +0000
0 - 0 - 6 m.xxxymovies.com/17340/ 64.59.90.156
2022-11-26 09:36:55 +0000
0 - 0 - 1 www.sexyporntubes.com/4 64.59.90.131
2022-11-26 03:51:05 +0000
0 - 0 - 3 maxinex.com/members/index.html 199.182.104.75
2022-11-24 14:08:16 +0000
1 - 0 - 0 penisgrowthsupplements.com/gfdx/pagommeente/R (...) 99.192.161.179

Last 5 reports on domain: sexplayed.com

Date UQ / IDS / BL URL IP
2022-11-26 20:20:03 +0000
0 - 0 - 15 www.sexplayed.com/ 74.206.189.118
2022-11-23 08:58:08 +0000
0 - 0 - 13 www.sexplayed.com/ 74.206.189.118
2022-11-15 06:12:46 +0000
0 - 0 - 3 www.sexplayed.com/ 74.206.189.118
2022-11-01 19:47:16 +0000
0 - 0 - 3 www.sexplayed.com/ 74.206.189.118
2022-10-29 20:31:56 +0000
0 - 0 - 3 www.sexplayed.com/ 74.206.189.118

No other reports with similar screenshot



JavaScript

Executed Scripts (14)


Executed Evals (1)

#1 JavaScript::Eval (size: 2110, repeated: 1) - SHA256: bf3f72557e17f678a408bf22044b8d3bb53aa6ecbccf17969287783f991eb209

                                                       (function() {
                   var bn;
                   if (bn = document.getElementById('atLink-cd5bb673e36b29cd88b94c39310d0fe4')) {
                       var callback = function() {
                           (new Image()).src = '//reapinject.com/clk.gif?landing_id=2540562&placement_id=17206326&sid=H4sIAAAAAAAC%2F1RTPWwcRRueTZw0X%2FN9SYrv04fQFQgBwvbM%2FszOkgIwwSjCJFECCh2aX2fivd3VzO7t2VUgEkpB4YZ%2B%2FZ6TCAgICkoidI6ERCSkOyoXuKCjRkpDAbrD4uCVVu%2FzvM9bPDvzzId7zRHC0PDDC2%2BVOzbP%2BWqygnvPvUvI%2Bd6GLZphb8joezQ%2B33ODlzK6gp%2FvvaHlVrkaYoIxwaS3bp025XB1JoKtHmRkJcMrcbhCkhiG7p%2FcNwF4HoAaHKEzYNV06VFwDqwcQ9H%2F8oL2W3VZvfh6v8l5XToYqPvvFFtF2RbQX0DjAjDF%2FeNtKP1k%2FSGUxd25XSgHfy0KO0XBdw9BFPePTYIY7M99ihx0AUL9C9rBGHQ%2BBsvHIMvbYNUEAUgFly5D0b93qXQt3%2F5T5TN1ipae%2FAq2naKln85B0f9iLbfD3rUyb2pbFh6GpgM7HIPdHEPVHEC9cwJsewCy%2FgCs%2BgGtPtmAor9%2F2eclWHX4TCpZorniy5mMyHIcG7bMCDXLhjGacEVYRKL5AVk7BmvGkOtd4D6AZvbZABoTQFMF0FeHPUkISbGSHLNMykilWlCFCU8N4QRTBo2c%2FcMu1NUuyHwXpLsFlbsFW%2Fbjycmvb07OvjJJfp4kZ8A134K%2FcfiQ6ZgzTlKaCCawYUaLmCdxkmEVqSSlxkRChDqNCMNaRGmqeRqnNBSYqyzBJGRMUGIkjShXIZVaS05FRhTnhsU6lSkTWRhpFmMdUy24yUKKtQqNSIkmnIk4pVlKSYZ5mCRJqLFQqTJGEIwFESrEchZDGlIsmBEszHCKpeCcSmbAqwB8jWCgOmg1gtYjaDmC1iJoawTtoLurch%2F67p7KfSPIcQ%2BPe9SNynpzj98t601doL3qCP1nFoLg9EcUtvRhT6pECJpGOqIizKRiTGSxjLKIYIWNjsHbDqw%2FMb%2ByHTtFT73wC1SzYK61IPgB%2BPwApP038OYU8HYUYQz8xihMMOwUn3s9rHK%2BrdWKLPugyg6qegnq7WAvP0L%2Fm6fx2UdnQMvH6LhAug4q18FN%2BwjBZn5ndLVs0f7VsvXoq8tVbft2h8%2BSeq3mtT796Zt6uy2dunjB737yqpwJM%2Fjgbe3rDV4oW2x69NmaVUq79dJJjb656K9rcaXxN9YaVzTVxpXX1i%2F2K6e9t2UxBm4n%2BnuQdopO%2Ff7f%2BRM8e%2F19sG4Mrumg3yyc2nIMsroFvlrMfInA5QsuKgRt041cKBbD3CLI9YJz0YH%2FGxcLvOfvwKZ7Gnh9G4p%2BBwPXwSDvgOe74JuTo7pyj1%2F%2BMZoXiDwYidyhfZG7mW4Pe3ESJ9REqYypYipNIpxxpYnJVBzFqTFQ%2B6n8f%2FzbHwAAAP%2F%2FAQAA%2F%2F8KKDnwSAUAAA%3D%3D&psid=';
                       };
                       if (bn.addEventListener) bn.addEventListener('click', callback, false);
                       else if (bn.attachEvent) bn.attachEvent('onclick', callback);
                       else bn.onclick = callback;
                   }
               })();
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 115, repeated: 1) - SHA256: 38f413f8544fc04899673357ca0367a7a98b91494f7d70724a1b1779efb93fd7

                                        < script type = "text/javascript"
src = "http://honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js" > < /script>
                                    


HTTP Transactions (106)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4186
Expires: Fri, 09 Sep 2022 13:53:20 GMT
Date: Fri, 09 Sep 2022 12:43:34 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 12:11:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ay7JnaRJqng7AdjryxMJEEqOHFc7aHQ78t1_HOxZGN9xf1H_WOLkFg==
Age: 1936


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oVxqK1n3Gn-ZZOj7B7mMIvmlP2XjkI2WVqTqBLO-e_oiurNRjJbPxQ==
age: 32220
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 09 Sep 2022 12:43:34 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 09 Sep 2022 11:56:07 GMT
Expires: Fri, 09 Sep 2022 12:30:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _bH_PuHc_FX4S86hK6LNxIqEeE3DCF9B-Uv5DvdMzPbYPwlk4R9Ytw==
Age: 2848


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2307
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 12:43:35 GMT
Last-Modified: Fri, 09 Sep 2022 12:05:08 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rf6a1L56N9b28XzR1r/7Bw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.83.91.138
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vua2ooJ1li+qK0zT2Ee2AOwvmBI=

                                        
                                            GET /?ref=DBMJ3GAK2-HA.com HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 09 Sep 2022 12:43:36 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8455
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (439), with CRLF, LF line terminators
Size:   8455
Md5:    2440cd5edd11023d03a84a6cc1122c5c
Sha1:   5a73011cce1082dd134fd1063497b963bcfff55b
Sha256: 1ae0058f770dc4867bc7873c35b02d4301d7524446dcbadffe7b6cd524f93fe6
                                        
                                            GET /js/jquery-1.12.0.min.js HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 09 Sep 2022 12:43:36 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "17c57-5df69215b636b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sun, 09 Oct 2022 12:43:36 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 33856
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32060), with CRLF line terminators
Size:   33856
Md5:    5bc41199601b915a7dd7750b3a0d7180
Sha1:   af7bd4e370dadf0fbe72fb1211f78a340ac95f0a
Sha256: 8af0e3ef8f2ef480b8d2dc1b01ab71dd00a16760585b13e4e6ed946784beead7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4532
x-amzn-requestid: e5694699-7f38-4542-8808-54bda7ee7d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIMmGGUmIAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63198e26-1aa6788e24fcfdf0008bee21;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 06:39:34 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: smtzoqnzJiET63xsW_r_-eVNsTK01mGqRbvuwekbqjnzS6Sb1fw9HQ==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:54:58 GMT
etag: "70ede5692526afd351d134a391383461dafdc64f"
age: 49718
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4532
Md5:    a5fdeb374d4e3669ce5d9ff2cd22cd19
Sha1:   70ede5692526afd351d134a391383461dafdc64f
Sha256: 10c5d8e41aae1a36525a45375966b5067333f0c7edc176a540fd6527ebe1ad8c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8354
x-amzn-requestid: e7ec7e84-0924-4f5f-b289-4c750ea99567
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHHnNIAMFlrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-49565105361ec7f76cb818e0;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: DvCs6zEt1p58iwZaXfuF9YFA-fieE5Y974E07YMNYPiaGbR5iuXK-A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 53865
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8354
Md5:    7afe346e3b24ea4388913b449d1ffc42
Sha1:   f5348ba99fb8966dded580409108316f4e4e1237
Sha256: 1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F941aee78-aa38-4160-9ace-6710bf30c1ee.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7524
x-amzn-requestid: c97e5c90-4fde-400d-b07a-cb7c2f119419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgIGwDIAMFVcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-2dc24fae4af1a68c79dcee95;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: gr9E1e8e64FTEN8FGnRfSCki0wxK-d2DbnJxf_2Vekysz9jwClzRuQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 57bd3a2d9e0e4cbf89d9eb3d7dfb916e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 53865
etag: "1ab4fc655948819c42906d19f60c69f399ab221d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7524
Md5:    91b464f11732e00e4fd02f22a588db95
Sha1:   1ab4fc655948819c42906d19f60c69f399ab221d
Sha256: d47f87039129d760f53735d65258611eb2debbc58024738bc60e5a0c99ec8cc5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:05:15 GMT
age: 52701
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4002
Md5:    c9590b525c8b07a297c8784f02b161a1
Sha1:   cec8428d159a5bde29e89c64cfb04146f759d52b
Sha256: d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10950
x-amzn-requestid: 435fc2f4-fbcb-4eec-81d8-a23154dcec61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YFUwZEfvIAMFjCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63186802-2348a4000430702d4e9ea132;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 09:44:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ORlM8dFTc_iThvJghFakY86D3ToJ5TCmP8Ip2PcvXCCkSKKHpWQ0Zw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:02:59 GMT
age: 52837
etag: "f930fcb22325e28592bc39b0b1974f5197c19afd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10950
Md5:    15249f3dafdd1690bc87ebb4fa6d518d
Sha1:   f930fcb22325e28592bc39b0b1974f5197c19afd
Sha256: a0b9e88c78e85a037363e0b0e4e03478718f8715fe69e72bfd159922eca28301
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3125
x-amzn-requestid: 5820e798-6469-40f9-8d70-ee71f1a163b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLM5GGQAoAMF8eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ac1d3-3a0e9db848ea7ab145f1cffa;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 04:32:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eZaKpjBYe3Qn7vs3zF52Cxob-xu3LMFs8esQAu6Lp6bzM0aOEHoXVg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 04:32:54 GMT
etag: "113393e0dbabb3aff949d19ab6517ba1082b622d"
age: 29442
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3125
Md5:    0078c7a407144a1ede33aef6f734eecf
Sha1:   113393e0dbabb3aff949d19ab6517ba1082b622d
Sha256: 42afcaf15e45dfa9aff14f59f69d60a3de127005e35783d2d35a4cfa652b57b3
                                        
                                            GET /css/main.css HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 04:51:10 GMT
ETag: "9353-5df6a3d3b2d32-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sun, 09 Oct 2022 12:43:37 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8179
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   8179
Md5:    f1d368dc0683e34579560d8f5f1392b6
Sha1:   c5da52484773bfe6b1fb45732b36f65f86f8ca91
Sha256: ffe776d8b05e5eaab9c22a4791aa8a24e7e15abde02d4790cfeb65ceca37cf8d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/main.js?v=1.2 HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "2244-5df69215b636b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sun, 09 Oct 2022 12:43:37 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2612
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (328)
Size:   2612
Md5:    a06c21fb880f08755566d8d0ac2d7849
Sha1:   d9ce89923d1144b66a1fc8bacb6814d5fb0b1630
Sha256: acf7431dc77b4eb9cb8b51f1341baa2ca06c3e4dc466360d3855e2b8a90ccde5
                                        
                                            GET /images/logo.gif HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Thu, 02 Sep 2021 05:00:31 GMT
ETag: "53dd-5cafc0fec82fa"
Accept-Ranges: bytes
Content-Length: 21469
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:37 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 329 x 92\012- data
Size:   21469
Md5:    320716c5f057ef806baa364ad8b7dfd1
Sha1:   4c1c4abf9740529b0743dcfe2464041ba28c3b58
Sha256: cd7e25e8cb44e7acc90e9dd937fc73b3bcb28ad4c3079e90bfbc5d811b8718bc
                                        
                                            GET /icon?family=Material+Icons HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 12:43:37 GMT
date: Fri, 09 Sep 2022 12:43:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 148169
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /t.png HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "56d-5df69215b5f83"
Accept-Ranges: bytes
Content-Length: 1389
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:37 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   1389
Md5:    ab263e09423e03bb4f1053892dd94b2c
Sha1:   7408088e606af655e98cf026c01005134267f227
Sha256: cd0d4f54deb180b21f4c761802c322c1bc8bcfe66da829b9be9571c86e29c2b3
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 148169
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            GET /s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15168
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 21:14:17 GMT
expires: Wed, 06 Sep 2023 21:14:17 GMT
cache-control: public, max-age=31536000
age: 228560
last-modified: Fri, 24 Jun 2022 18:41:36 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15168, version 1.0\012- data
Size:   15168
Md5:    1598ebfa232c5514a99a8af0405cc9a6
Sha1:   d81db409924496627326925cffa27d465c24de3d
Sha256: 45a8badf06824c87461905a8b1871fc3ca3eb5934cee490deadad743ebf99661
                                        
                                            GET /css?family=Cabin:700|Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 12:43:37 GMT
date: Fri, 09 Sep 2022 12:43:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6447
Md5:    12d3376d48f4dccfe99c77a3cee05226
Sha1:   dd9086b9d6ec92a79022984d6cfdab136c90a7aa
Sha256: ba5d67ebbb74f86aa8e9b02f0826f09eda667c1ce0735ad1a5251059e391cf08
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cd5bb673e36b29cd88b94c39310d0fe4/invoke.js HTTP/1.1 
Host: honestlydeploy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5579e6854f872f5a7565a767d7ec712d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26978), with no line terminators
Size:   9809
Md5:    fd248ce33b79997bb6665118621dc3c3
Sha1:   197ac248966b7598ff2b35da544045d6ae6a11e2
Sha256: 8c11f39f20d0ef6cdf1130cda2ac41358ff225c28c3054a5b03d78e6f7749638

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /cd5bb673e36b29cd88b94c39310d0fe4/invoke.js HTTP/1.1 
Host: honestlydeploy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ebe66c3746b32cf9847e2595af7a486a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26972), with no line terminators
Size:   9805
Md5:    cb1373106ddbdfdb7245ce2900d74d65
Sha1:   d3c09b2ba375e331fed9ab0bfdcfdece61af6617
Sha256: 6428c3ee6c0651e0b22ae1af7ee74b2c9a95289e27735c78306de95ea4a72124

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 12:43:38 GMT
Last-Modified: Fri, 09 Sep 2022 11:39:15 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HS26q8hm5Pl5F267IyOTZ0BCqrS0nsId5gz_YqXVuPaTe86nHfpxpg==
Age: 3863

                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         52.59.153.168
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 09 Sep 2022 12:43:38 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.sexplayed.com
access-control-allow-credentials: true
set-cookie: uid_id2=7c85eada-9c31-44f8-816f-f8865ad18313:1:1; expires=Mon, 06 Sep 2032 12:43:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    c1511cd259e12bba0a9df19dedbde239
Sha1:   e1fa03f307581442b810a30c2c00c48c0c67be43
Sha256: 89dcceac1b29ab49d3d3ab2b91122d3c79bedc8de1eb02ee6c03983e0ad066db
                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         52.59.153.168
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 09 Sep 2022 12:43:38 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.sexplayed.com
access-control-allow-credentials: true
set-cookie: uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1; expires=Mon, 06 Sep 2032 12:43:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    dc3c2eb93d72524b9cc841a322495718
Sha1:   ad79cbfd3c175cc5ef886cd787697e75c372806a
Sha256: 8c7aee532a8b7a4f23c04d639621eb5a3a7035be9ae973d82e63ee3900e3d926
                                        
                                            GET /cd5bb673e36b29cd88b94c39310d0fe4/invoke.js HTTP/1.1 
Host: honestlydeploy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 660cd949553c52d4c28bdb0712e99666
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26968), with no line terminators
Size:   9803
Md5:    b76c637bfb28b0a9863f362a589cac82
Sha1:   4cb75e83ea92783dfbc03af457abab93b8a47c62
Sha256: 31979a7f51325c59d1d78aecbc85f0bfc7b3636f59397ddbe2ee0ae351aee2ca

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /thumbs/AA/aj/sc.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:59:11 GMT
ETag: "3cb2-5d8cee218fe7b"
Accept-Ranges: bytes
Content-Length: 15538
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   15538
Md5:    3b0f99fdce44ab4f19672a586fe7789a
Sha1:   3f1935f0fadc56f5225e50cfdd4703b3853f2435
Sha256: c2d57c25b4e75edf0c77d8b0142000a9f4ae01c65a182089ac69ec948bfc0573
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "80003F4BA4335297C8A5774AB12E4E8E7BB178A2C3584C1AB9D241BD01E06182"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2831
Expires: Fri, 09 Sep 2022 13:30:49 GMT
Date: Fri, 09 Sep 2022 12:43:38 GMT
Connection: keep-alive

                                        
                                            GET /ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js HTTP/1.1 
Host: obituaryfuneral.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.61.225
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75a8a4df1a8e5d129acc897f093ff256
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (59405), with no line terminators
Size:   20324
Md5:    7f93e13d79bd21ed017a3928d472ea7c
Sha1:   5b8a59a00dcdd0bb7df6ddb93351445ca1c67986
Sha256: c1aa9c7e6cbba729724f29ff8ec070599d11b67c13b8b037f35e354da4f5c48a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /images/topbg.gif HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/css/main.css

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Thu, 02 Sep 2021 05:00:31 GMT
ETag: "21b2-5cafc0ff4b0b7"
Accept-Ranges: bytes
Content-Length: 8626
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 110 x 92\012- data
Size:   8626
Md5:    cddc6fe4cef20e347f43377078c648bb
Sha1:   a74f2db04efe2674d84486b49d1b037c3cb89c82
Sha256: 0dadfc55c73c2e7c5c12e8ee391380569fdcf1459e85d2be5302da0bbc74a585
                                        
                                            POST /ain.php HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 67
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Set-Cookie: 0bb94c16=MXwwfDE2NjI3Mjc0MTh8MTY2MjcyNzQxOHwwO25vdHJhZGVzO2RibWozZ2FrMi1oYS5jb20%3D; expires=Sat, 10-Sep-2022 12:43:38 GMT; Max-Age=86400; path=/ 0bb94c16f=hXi0yY%7C1662727418; expires=Sat, 09-Sep-2023 12:43:38 GMT; Max-Age=31536000; path=/
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive

                                        
                                            GET /icons/icons.woff2?79366695 HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.sexplayed.com/css/main.css

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "141c-5df69215b6753"
Accept-Ranges: bytes
Content-Length: 5148
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 5148, version 1.0\012- data
Size:   5148
Md5:    83c2dc984cfbfbc0df5aba9aa2381e5e
Sha1:   d360eda208d4076c5e044e73dfcd248a55cd4693
Sha256: a4571fbdea1888d44446da2c4ecd4e0d2c4333c2f52ac0f556a48ad2db408648
                                        
                                            GET /thumbs/AA/R8/HM.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 01:30:44 GMT
ETag: "2ba2-5d8f5e1792c74"
Accept-Ranges: bytes
Content-Length: 11170
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   11170
Md5:    e1baff283096a2a545fc266be4af0461
Sha1:   d0ca84852b36a28a4e245fe0d75f8ce78acda5ab
Sha256: e269079f80536271fae2a3af49ab4201d8d9ea3d09ba93dff588cf9ae3557d25
                                        
                                            GET /thumbs/AA/Tp/Az.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:41:31 GMT
ETag: "3a74-5d8cea2e1458b"
Accept-Ranges: bytes
Content-Length: 14964
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   14964
Md5:    10784676eab4f8e50b95cb60b6481cc6
Sha1:   caec5069c3419b0d8af285ac349087120e419dc1
Sha256: 08b37c344fa28273b3fa4d571fc6a56084f619534f6bfa19d44d9f098c2bc7a9
                                        
                                            GET /ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js HTTP/1.1 
Host: forgerylimit.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ae03ad5adb59b9378508f357cf3abe2a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (59390), with no line terminators
Size:   20326
Md5:    caa124f1fe4440cde91a51e3729d7cea
Sha1:   091e997c997ae93522db37f7ce1f8bb7f1615474
Sha256: 98a27f243e4b6ab1b50aa8f2995bd35e19d0400af9c827a9423ca4ec2d81fc33

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1 HTTP/1.1 
Host: obituaryfuneral.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.225
HTTP/1.1 307 Temporary Redirect
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com
Access-Control-Allow-Origin: http://www.sexplayed.com
Access-Control-Allow-Credentials: true
Location: https://obituaryfuneral.com/watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=190e17d8b4c2b6066befa7ebee2f8d9996fb12fc3902fa1cfdd7817223ffe6c3d5e90fa58345ed8a3d9ebe357ca94df0934984556ba38ed2d4944fc4a7feb1c7c0f377456340a4c734d75bd53f23cf9757d049a4&pst=1662727478&rmtc=t
Set-Cookie: u_pl=17206326; expires=Sat, 10 Sep 2022 12:43:38 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; expires=Fri, 09 Sep 2022 12:44:38 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c4f2be04ccadbea879fa97775e116b5f
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /sfp.js HTTP/1.1 
Host: addresseepaper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         104.21.235.2
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 386d0834b07ed6c38f138775dd63ac3c
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Fri, 09 Sep 2022 12:43:38 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qQVFMrXM9%2BaAaswu55a8zE9yHAT%2FP597KZjeue7W%2Bzs03vdF2Gfjg6s4FHKLX0pG%2BwiQBnoACvtlh9zGphckk3FRDPUaqrVXQthMxsnGuTkjhPiUmYob0m9XmBd58%2FeUSA3vnLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748002bffe417771-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size:   22840
Md5:    487ad2b48cd98e36abf708a3b60f4a36
Sha1:   ccf7b110523d50bb619becd48c3f013cc5fdce87
Sha256: 768eff747f795e1232d182eb859170e32d4f06ed29da872c09af5363c459668f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "37E8404D71D98B26BB61B23C97984E5F674F9006F260B1607D6F5876ED4B2277"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8219
Expires: Fri, 09 Sep 2022 15:00:38 GMT
Date: Fri, 09 Sep 2022 12:43:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1E5B508CC623EF3D5E35713E70846BBB1AA272A5294C2AEDA8F53609740DA663"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Fri, 09 Sep 2022 13:38:45 GMT
Date: Fri, 09 Sep 2022 12:43:39 GMT
Connection: keep-alive

                                        
                                            GET /ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js HTTP/1.1 
Host: reapinject.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         173.233.137.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3fe92eff3b4c46c68c7b3ed53e8157fe
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (59381), with no line terminators
Size:   20319
Md5:    6356110cec95b13dc2644ccac806788c
Sha1:   edb843fe096de32b0e7e5914291b3c3b980b7593
Sha256: fc04f687507dabeccbf385e792871f090a7c83928c7f299a4adf989ee450bb54

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /thumbs/AA/iJ/uO.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:47:10 GMT
ETag: "2c5c-5d8ceb717ed6e"
Accept-Ranges: bytes
Content-Length: 11356
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   11356
Md5:    e1aae275691520dd865f20115c3234d8
Sha1:   1bea3a13e6f5ad6ac675652f3234835be604ba56
Sha256: c1c407bea9ceefa826ccc372d827a2ea6b98afe64c5a99edd3d6ae7ad699dbcf
                                        
                                            GET /thumbs/AA/eC/LP.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 10 Jul 2022 08:28:02 GMT
ETag: "36c7-5e36f36be3f05"
Accept-Ranges: bytes
Content-Length: 14023
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   14023
Md5:    cc82ca0030bc9581f6a3a5f936f2326f
Sha1:   af128bbf5cdce9a48d2a654e73875ac70cd93c11
Sha256: c21083058d5aa2dc201d6c41d85dda6145c1a8e378d202e6ff823c68876f40a5
                                        
                                            GET /watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=190e17d8b4c2b6066befa7ebee2f8d9996fb12fc3902fa1cfdd7817223ffe6c3d5e90fa58345ed8a3d9ebe357ca94df0934984556ba38ed2d4944fc4a7feb1c7c0f377456340a4c734d75bd53f23cf9757d049a4&pst=1662727478&rmtc=t HTTP/1.1 
Host: obituaryfuneral.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Referer: http://www.sexplayed.com/
Connection: keep-alive
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.225
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ccb88e5160b9d15a7083e38d912132c3
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /watch.1540212936797.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1 HTTP/1.1 
Host: forgerylimit.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c2ba863d71fd692d99a6db3d63c845b8
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1 HTTP/1.1 
Host: reapinject.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         173.233.137.36
HTTP/1.1 307 Temporary Redirect
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com
Access-Control-Allow-Origin: http://www.sexplayed.com
Access-Control-Allow-Credentials: true
Location: https://reapinject.com/watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=8e4a8a1765b8b0f8feb4a54590d3d576ff3bb2e73180eb377ea74762b0ad9501288b61fc636ad26ceeca6b91daaf84e7c78b923e840e46ebaf9260ed2fb71e1a8b476976190a25552e0bd7dffb100b1bd20c01016260b8fb829070cbaa6c8f&pst=1662727479&rmtc=t
Set-Cookie: u_pl=17206326; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzIwNjMyNiwiayI6ImNkNWJiNjczZTM2YjI5Y2Q4OGI5NGMzOTMxMGQwZmU0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODQ1OTkzLCJwaWQiOjgyNTUxLCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjE2LCJhaWQiOjUsInB0Ijo0LCJwayI6ImQ5bXljMXNrNiIsImNwa3MiOnsgIjI4IjoiY2U5MTUwNjZmZmVhYzRiYWUzYzY0NGYwYzA1MjBmZGEifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwOi8vd3d3LnNleHBsYXllZC5jb20vP3JlZj1EQk1KM0dBSzItSEEuY29tIn19.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; expires=Fri, 09 Sep 2022 12:44:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2e20e103956f872c4d19469ba79f20d2
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /thumbs/AA/IS/F5.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 09:02:13 GMT
ETag: "3a844-5e66c1ef3853a"
Accept-Ranges: bytes
Content-Length: 239684
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size:   239684
Md5:    ee0ad22b3bd1e3efa857aa7546738b61
Sha1:   ab0f4c87958074e30fb111f0f0506e79007d4cd1
Sha256: 219f26b1a8382fbc471d2917dda0840b540f015e1fb950cff47dfab2fd5fc307
                                        
                                            GET /thumbs/AA/2Y/lA.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 23:41:03 GMT
ETag: "4875-5d8f45936dfd2"
Accept-Ranges: bytes
Content-Length: 18549
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   18549
Md5:    9bd0610a96f1be779d1325bf54da82b7
Sha1:   e6f0c1ac159d4cda38e9edab09df84f8bc45f3be
Sha256: b19d7c5af7d461afae5f9bba114cc7256e4fefe121c55570f16677d3ba07478d
                                        
                                            GET /thumbs/AA/HC/1H.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 08:23:03 GMT
ETag: "2993-5e1dcd00e2392"
Accept-Ranges: bytes
Content-Length: 10643
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   10643
Md5:    609d05ea319e42241af12df270f927c3
Sha1:   f93a7a05166e40bc452f67ecae0125d6c0470efa
Sha256: e7ee822eab22da006c1bfd5b08f88be89c44908e58f5802a43990b2d5246d3ce
                                        
                                            GET /thumbs/AA/bg/93.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 09:22:06 GMT
ETag: "4235-5e83b146a909e"
Accept-Ranges: bytes
Content-Length: 16949
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   16949
Md5:    33d17ee57d2acb8fc4e14289aef2e82e
Sha1:   ae782491365f4a68d37b599716fa0c0c19df8e22
Sha256: 0d0899d2ce04bf7ab17e95e5dd8523ff89d5b3531ede6fa7859f604727dd9816
                                        
                                            GET /watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=8e4a8a1765b8b0f8feb4a54590d3d576ff3bb2e73180eb377ea74762b0ad9501288b61fc636ad26ceeca6b91daaf84e7c78b923e840e46ebaf9260ed2fb71e1a8b476976190a25552e0bd7dffb100b1bd20c01016260b8fb829070cbaa6c8f&pst=1662727479&rmtc=t HTTP/1.1 
Host: reapinject.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Referer: http://www.sexplayed.com/
Connection: keep-alive
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         173.233.137.36
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com
Access-Control-Allow-Origin: http://www.sexplayed.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=7c85eada-9c31-44f8-816f-f8865ad18313:1:1; expires=Fri, 16 Sep 2022 12:43:39 GMT; secure; SameSite=None pdhtkv=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None uncs=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None pdhtkv5=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None uncs5=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7118ae18b5c756d5c049e2c76c3a0d09
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2447)
Size:   1988
Md5:    65551aca236acad5035ab9c859ef0a48
Sha1:   e4ddcb716090fbbd4018f84e98a7ff68914c3ebb
Sha256: 000743b0f51ca518306d62725e89e5d4f22f33779ac75f85fcbe9cfafa56edea

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70 HTTP/1.1 
Host: graduatewonderentreaty.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         173.233.137.60
HTTP/1.1 502 Bad Gateway
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 157
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   157
Md5:    d41a93f6d3a61aa8e32d7a0afcfbb2d0
Sha1:   77718bef53accc9fd03bea992dc25e4086a17d50
Sha256: 3f72ba697c379550b6005be4ed325a33b228eea31e056a4dfa1150c6ace3f6cd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /thumbs/AA/VX/uA.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 18 Aug 2022 09:02:35 GMT
ETag: "3cc0-5e6803e1e61fb"
Accept-Ranges: bytes
Content-Length: 15552
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   15552
Md5:    5b91b9f38560d57f196f65a46e2b153b
Sha1:   2d92882643e9e0e857f5094c1d0e5e3c22ea8c1d
Sha256: 0630800899eb7180bf0ab9f1295573ec1b85d1b436c0d525a00e13955a65734a
                                        
                                            GET /thumbs/AA/El/C2.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 20 Aug 2022 09:04:11 GMT
ETag: "3036-5e6a87f7da86c"
Accept-Ranges: bytes
Content-Length: 12342
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   12342
Md5:    88e788f3fc444841d5be50e7ce22827c
Sha1:   418fd94973c92eff78a5ae06149291c5755a814c
Sha256: 8865aaa9b2553d1a4d4ce4c5baff5b7a7b749cc23e3e221fa776bcb9481e82fe
                                        
                                            GET /thumbs/AA/pX/wv.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Mon, 27 Jun 2022 04:52:04 GMT
ETag: "4cff-5e266ae6c4ae5"
Accept-Ranges: bytes
Content-Length: 19711
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x361, components 3\012- data
Size:   19711
Md5:    370b7afa733dd44a1f710c2da45a25d9
Sha1:   64b4fdbcd31acd45f8b1d42b26c314d749b9f2f6
Sha256: b3a8fd01b2be6d0bacf436d23bc3d427c66536c0fe1325e91124e0564fe3b69b
                                        
                                            GET /watch.1540212936797?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1 HTTP/1.1 
Host: forgerylimit.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17206326; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzIwNjMyNiwiayI6ImNkNWJiNjczZTM2YjI5Y2Q4OGI5NGMzOTMxMGQwZmU0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODQ1OTkzLCJwaWQiOjgyNTUxLCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjE2LCJhaWQiOjUsInB0Ijo0LCJwayI6ImQ5bXljMXNrNiIsImNwa3MiOnsgIjI4IjoiY2U5MTUwNjZmZmVhYzRiYWUzYzY0NGYwYzA1MjBmZGEifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwOi8vd3d3LnNleHBsYXllZC5jb20vP3JlZj1EQk1KM0dBSzItSEEuY29tIn19.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; expires=Fri, 09 Sep 2022 12:44:39 GMT; secure; SameSite=None uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1; expires=Fri, 16 Sep 2022 12:43:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8f1fb077d6e145b799cb9f125c4bc8e2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (638)
Size:   1248
Md5:    292949f15b319ea22c4b7057365c5c1a
Sha1:   8dad9250a10d21e3a614ca8602fd46904cc6e44d
Sha256: 02d4c701d2ae22e0e93c5f7a1074016fa6fe9722cba9e6fe707c99912a502725

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /watch.992221919460?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1 HTTP/1.1 
Host: obituaryfuneral.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.225
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 99d3ec70b831355f4af63803110b0e42
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70 HTTP/1.1 
Host: phosphatepossible.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.59.20
HTTP/1.1 200 OK
                                        
Server: nginx/1.17.9
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /thumbs/AA/vA/60.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 02:27:46 GMT
ETag: "3508-5d8f6ad67698d"
Accept-Ranges: bytes
Content-Length: 13576
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   13576
Md5:    d5c82d12b3d58fd8e87f3f947b5395f9
Sha1:   88c4a11e0728261b62dc652365cd4e1e758cf51f
Sha256: cf201388cbe8320da67b4cbafb9c7bf4bfbe290ac402352c11ba96a378938974
                                        
                                            GET /thumbs/AA/kH/zt.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Tue, 01 Mar 2022 09:47:40 GMT
ETag: "37b1-5d9250e48cc45"
Accept-Ranges: bytes
Content-Length: 14257
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   14257
Md5:    0ccbcd4e7ff83a5fb4d7a222064272cd
Sha1:   35f7e49b644473e586d44fbdb166a51e6f3d913d
Sha256: 48f17cc234cff9b75acc771f3592e36264521e454d3a3274c3cf25a4e0471fac
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54DAF99F14294BD52D5F516AA5CEC0584B8A43DAAE4525FABB7692F9F114AF5B"
Last-Modified: Wed, 07 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11778
Expires: Fri, 09 Sep 2022 15:59:57 GMT
Date: Fri, 09 Sep 2022 12:43:39 GMT
Connection: keep-alive

                                        
                                            GET /thumbs/AA/PC/hu.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 03:24:23 GMT
ETag: "40fe-5d8e35a07684e"
Accept-Ranges: bytes
Content-Length: 16638
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Size:   16638
Md5:    6cbf48fa93d1bc93b341493ce6fd8290
Sha1:   9920f91a7048a4f2b1d027d08be0dd0ec85d6199
Sha256: 69573a37a757b2ed535346e912d606a8c2582d77e2c79688a4592d3c302e6305
                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70 HTTP/1.1 
Host: siegepolitical.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.59.12
HTTP/1.1 200 OK
                                        
Server: nginx/1.17.6
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /f20/419/c5c/ad_02.jpg HTTP/1.1 
Host: cdn.cloudimagesb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         45.133.44.9
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 09 Sep 2022 12:43:39 GMT
content-length: 39096
server: nginx/1.17.6
last-modified: Wed, 14 Aug 2019 17:06:55 GMT
etag: "5d543faf-98b8"
expires: Sun, 11 Sep 2022 12:43:39 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:08:08 12:59:32], progressive, precision 8, 300x250, components 3\012- data
Size:   39096
Md5:    7e23781e0c4955d97957ef96aafab7b9
Sha1:   5355e43d60cfd1e3a6c9d0d81ba245e0c4cb8b17
Sha256: c22f0e91b903e6cd4c0d50c42b125e3183d6876c1e5183c9fcc79fd2105bf670
                                        
                                            GET /watch.1540212936797?shu=71a6fcedf084bc4ddc4e67d2ed255cb8ef8e7ca130f6d85c2294781076758561d6925eba4413a59ff17295242c1ac82ccf96f023a8dad45620e69b074eafe63637f59249eabde087c2c07b0a65faabdbda56de78&pst=1662727479&rmtc=t&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1&pii=&in=false&key=cd5bb673e36b29cd88b94c39310d0fe4&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&dev=r&res=12.29&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&tz=0 HTTP/1.1 
Host: forgerylimit.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forgerylimit.com/watch.1540212936797?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Access-Control-Allow-Origin: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1; expires=Fri, 16 Sep 2022 12:43:39 GMT; secure; SameSite=None pdhtkv=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None uncs=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None pdhtkv5=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None uncs5=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 15e7afe22bbd19c67fd04c83733d0948
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2372)
Size:   1721
Md5:    19623309ef02b09ef2e5d65413ccf7f4
Sha1:   74530c0ee28aef604e6ff04a0b3d0292ba215d61
Sha256: 26fb1774e810b9223c4c6421a57c63d9462036ac17a5c64b457963301f573bf3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /thumbs/AA/ym/2o.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 04:37:34 GMT
ETag: "372d-5d948f4f53dde"
Accept-Ranges: bytes
Content-Length: 14125
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.14.7.71094560 0x0aefab40", baseline, precision 8, 640x480, components 3\012- data
Size:   14125
Md5:    cd0e819968df54a12ac35aa148878b96
Sha1:   0ec2e517f3e9b989d623b4c380d236f06ecad47f
Sha256: ec7655b102685de9216b073c7b255bb72f8fcf0e8b48361f0ca74ed3eecae653
                                        
                                            GET /thumbs/AA/DY/xo.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Wed, 22 Jun 2022 04:50:10 GMT
ETag: "30d8d-5e2021267fa39"
Accept-Ranges: bytes
Content-Length: 200077
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1140x606, components 3\012- data
Size:   200077
Md5:    440d140a38ff0eeecd578367ab54af2e
Sha1:   6e332983fd2a02477b7835cd1a78c852a2b5f87b
Sha256: ff58388669c098a53416de7c21da56d63da864812c1b055fa6ed35df69d276dd
                                        
                                            GET /thumbs/AA/De/Is.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:52:10 GMT
ETag: "336f-5d8cec8fb3fad"
Accept-Ranges: bytes
Content-Length: 13167
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   13167
Md5:    a9766d9ec9aa5e6ce2a06b65586bc35b
Sha1:   aa76103c7e70f5f9bf6dd0f197bd8ea81eb03a79
Sha256: 7c7ed8bac2d6fc5b779441c9e516cfdb9a1d56e8bac16511bd53c0404ee751b6
                                        
                                            GET /thumbs/AA/yM/MC.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 09:22:38 GMT
ETag: "3d1d-5d8fc7919d6aa"
Accept-Ranges: bytes
Content-Length: 15645
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   15645
Md5:    40458b2eccd5592043b97e1db3edecbe
Sha1:   e014f661e8775e6f61157acc1e196496e529f5f4
Sha256: f95f17f1e044258413e734cbe98a4af4fcefb6848c48ac20dbf4a28e22286b22
                                        
                                            GET /thumbs/AA/wv/fv.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 04:30:06 GMT
ETag: "14af5-5d948da495ebb"
Accept-Ranges: bytes
Content-Length: 84725
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Size:   84725
Md5:    abd5e2d276efc5b49d194c7c62ff4dba
Sha1:   b767da24744a74c37487778c65d13573f1080878
Sha256: 4813e5dc0f19e3d2605afa1a7c79e2779bb3d4d73b964cd9e718f6df2d1bece6
                                        
                                            GET /thumbs/AA/ke/TZ.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 01:30:30 GMT
ETag: "3d9e-5d8f5e09fe3bc"
Accept-Ranges: bytes
Content-Length: 15774
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   15774
Md5:    8009bf99e4408e0f1011479b0f77fdfd
Sha1:   bd63c16dbfe1c57426078e06574d8aa2aa4e922d
Sha256: c79e6cb02508cf949af71b6c76d62e268feee29b34462da445ca7e446424db4d
                                        
                                            GET /thumbs/AA/WU/t5.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 28 Apr 2022 03:22:52 GMT
ETag: "4be19-5ddae70ecd520"
Accept-Ranges: bytes
Content-Length: 310809
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x480, components 3\012- data
Size:   310809
Md5:    126c8b3e9daf22da2e0af7d255a3926f
Sha1:   72a17190b15b664507eb4a4f67b5c04f9b25d850
Sha256: ddec1a1119f1d05e7dcd2cf6a73a3422c3cb50be25f321f682a9ce23a5e402b5
                                        
                                            GET /thumbs/AA/yh/BK.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Tue, 24 May 2022 08:13:03 GMT
ETag: "3b86-5dfbd869a1834"
Accept-Ranges: bytes
Content-Length: 15238
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=90
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   15238
Md5:    516eb9927fbd00361958a76ec8aee4a4
Sha1:   578abf59bf6a22226f3f84060738d3699366fda3
Sha256: 46c01c6742c5b6295a557facf85a5d4d6a53eafc190a9449c0c8cffaa9caf0a4
                                        
                                            GET /thumbs/AA/pe/xG.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 03:02:48 GMT
ETag: "33af-5d8ceef030d89"
Accept-Ranges: bytes
Content-Length: 13231
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   13231
Md5:    4cd096a5a1d7b6d924884dc2056d7405
Sha1:   59ad87c2881e17bcae861bcdb972405e1a71ca76
Sha256: aa0a572023429751436401cdef2c130d8512c56a197fcb8d9a87acd8919d9af0
                                        
                                            GET /thumbs/AA/x3/7a.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 08:31:03 GMT
ETag: "3821-5e4b11efc1215"
Accept-Ranges: bytes
Content-Length: 14369
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   14369
Md5:    59179ab7cc7c86ea929fe12507cf5ec8
Sha1:   0f449562ef2bdcf6b8ed246e70cbd2f3141c9d0e
Sha256: ef2316ce6292785a9428182dc855ead412d589500ea897fbfb1fcab0957391eb
                                        
                                            GET /thumbs/AA/Wz/d2.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 06:09:12 GMT
ETag: "69ca-5d8d189a9acaa"
Accept-Ranges: bytes
Content-Length: 27082
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Size:   27082
Md5:    40f57f8236f64b6a7a81d65411de6d97
Sha1:   05dd892f130a86d83a3f6061de0988360d453408
Sha256: 7394a50af5be7da51c5d5667fad38b72ab7d155e9303b37ffc9e52c7a7a23b6e
                                        
                                            GET /thumbs/AA/a1/oL.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 11:09:02 GMT
ETag: "3f0a-5d8e9d7bfcb89"
Accept-Ranges: bytes
Content-Length: 16138
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   16138
Md5:    1b4e8290ce515ab7f035da1fc2b810a7
Sha1:   e51674dc4f915428a92798f1e847952d3887bd32
Sha256: f80151f058cee62d06bdd08eac22f4dff85f1aee22a816a16c7c1a2b72117cb4
                                        
                                            GET /thumbs/AA/xt/5y.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:53:48 GMT
ETag: "2b48-5d8cecece6409"
Accept-Ranges: bytes
Content-Length: 11080
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=89
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   11080
Md5:    0b0f7aee65ba2e0d0cb549b1bfd15531
Sha1:   e6e9ed39dca7744aa189b7b981531f3d8b96c10a
Sha256: 617a1c0dad5273d08cd1265ffeb796159e2ea4921981b33cb015d416ee067179
                                        
                                            GET /thumbs/AA/bl/mD.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 04:50:11 GMT
ETag: "14ebf-5e1d9d6d1c690"
Accept-Ranges: bytes
Content-Length: 85695
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x540, components 3\012- data
Size:   85695
Md5:    8a4c9714afca37af5734d597356d8845
Sha1:   b31657f655899ac5bda7169534c6abbc1d227a3f
Sha256: 05589f5b2d78550a9bc07ffb3b577de28b6219448b8b2470dd193197331f5ee4
                                        
                                            GET /thumbs/AA/MH/wA.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 03:02:31 GMT
ETag: "58b7-5d8ceee03c650"
Accept-Ranges: bytes
Content-Length: 22711
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   22711
Md5:    45a81ca2db752475fd74770b9a7a0226
Sha1:   45df30832ff49251c68487ded58aba831505fa89
Sha256: ba422f0f4a1fd42a2490bd3b9920877ef8db735fc969b3d979a84a3f8a324dc6
                                        
                                            GET /thumbs/AA/dq/nh.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 08:36:06 GMT
ETag: "2f09-5d8e7b4d0dcba"
Accept-Ranges: bytes
Content-Length: 12041
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   12041
Md5:    1b26c07b059624cc4a921a58a8471005
Sha1:   e6c6366b100ae6d323d7fd5ada50333272c3ccbc
Sha256: c396102829c2a47f09719e4251f85823055a1258a8d9146c4243c354766965dd
                                        
                                            GET /thumbs/AA/WH/IQ.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 11 Aug 2022 09:22:54 GMT
ETag: "b400-5e5f3b5da172b"
Accept-Ranges: bytes
Content-Length: 46080
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Size:   46080
Md5:    96bb1b5250e89fc531c37dd7e4d00cfb
Sha1:   0846049cd61ea784fa06d7b9aac69deb4a42b83d
Sha256: 1794941ad810c856627ffcc59d4272688f8ed4a5ff2e14c7eb1223b26d2d05e2
                                        
                                            GET /thumbs/AA/Tb/38.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 01 May 2022 04:32:14 GMT
ETag: "3845e-5ddebc28b48b8"
Accept-Ranges: bytes
Content-Length: 230494
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1500x1000, components 3\012- data
Size:   230494
Md5:    2aa0dc6e825b04d37f39486cdda9d012
Sha1:   108d9ab524695bf2f725c3fe6b713d0e15d8e274
Sha256: db7899864cbd541baecd1214be547fbfd9fb94bb5eaf422500b97cfb34a47b16
                                        
                                            GET /thumbs/AA/9j/Qf.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Wed, 06 Jul 2022 05:35:10 GMT
ETag: "3755-5e31c551dea47"
Accept-Ranges: bytes
Content-Length: 14165
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=88
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   14165
Md5:    a0ee6e3de20b6b8878c78b9bf15ebef2
Sha1:   f11491569b954133f5c9e00ff353b8f581347a7d
Sha256: 5ab0ced916149a37a6cd23a9decede7164f9c346a29e852e191b449b65f9d29a
                                        
                                            GET /thumbs/AA/FI/UR.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 28 Apr 2022 03:20:41 GMT
ETag: "21f6-5ddae69285c95"
Accept-Ranges: bytes
Content-Length: 8694
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Size:   8694
Md5:    d8fa08c6afaa970155ef1d4bcd9ed41a
Sha1:   358f3f3e91889cb253148307d7c13a6dcfcccb14
Sha256: 33456096a0c62a4f95bb6be8ef6907bfddd8d98774811d64928cc9ca9d50b60c
                                        
                                            GET /thumbs/AA/3B/6G.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 03:04:19 GMT
ETag: "4e06-5d8cef46f7d17"
Accept-Ranges: bytes
Content-Length: 19974
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   19974
Md5:    c3293d99b6211d7e6160a65268a61add
Sha1:   9f1004e15828a68dbc7c4f1381494984fb6a6c9f
Sha256: 649192cd79ece7f2dcca63104957543c59c79adb7213d2691285a6a895bff223
                                        
                                            GET /thumbs/AA/VL/SJ.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 14:01:37 GMT
ETag: "3b18-5d8d82326f470"
Accept-Ranges: bytes
Content-Length: 15128
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x361, components 3\012- data
Size:   15128
Md5:    794c9863fac793945b180d4750064c08
Sha1:   abf8cc3d1d05a957a1aca8717c861e90726b0f24
Sha256: 8f2ce632e8d4d6d4b5af761df7b19b67a28b2c9a873b6e6ce124f0f5d667a2f1
                                        
                                            GET /thumbs/AA/QJ/gu.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 03:24:50 GMT
ETag: "d559-5d8e35bac78b2"
Accept-Ranges: bytes
Content-Length: 54617
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=90
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Size:   54617
Md5:    ec4ce14488a1feb90de2c0369992463f
Sha1:   2703ef12f233059e9e679272752b51d9004a5d4e
Sha256: 6af609d302b663692bc27d30423b5ca700b2619cadaac8c70b3a44fa06cc18b7
                                        
                                            GET /thumbs/AA/CE/Lz.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Tue, 01 Mar 2022 09:50:45 GMT
ETag: "459e-5d9251958c4de"
Accept-Ranges: bytes
Content-Length: 17822
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   17822
Md5:    ac6b37c1cd3a0097663d853d7563c0c8
Sha1:   e3d6690ab57bcb30ee9d7159805ca2f098577d6d
Sha256: 8415584ea6108887e824f8368e393510c8578f78d8fd56c98dc62ee9ef0a47a3
                                        
                                            GET /thumbs/AA/Ev/pk.jpg HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 07:50:11 GMT
ETag: "42e3-5d94ba5d19e6f"
Accept-Ranges: bytes
Content-Length: 17123
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=87
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   17123
Md5:    609c02abd6ef06046a43ea2423b342ee
Sha1:   a9c07ca0ac948d6441bdaad466173062250c9a50
Sha256: 235de117c6c3e41933e463e70e98b9593b428d3c8545b244682b920ba15ce750
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1; 0bb94c16=MXwwfDE2NjI3Mjc0MTh8MTY2MjcyNzQxOHwwO25vdHJhZGVzO2RibWozZ2FrMi1oYS5jb20%3D; 0bb94c16f=hXi0yY%7C1662727418; ppu_main_ce915066ffeac4bae3c644f0c0520fda=1

                                         
                                         74.206.189.118
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Location: /
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=1, max=90
Connection: Keep-Alive

                                        
                                            GET / HTTP/1.1 
Host: www.sexplayed.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1; 0bb94c16=MXwwfDE2NjI3Mjc0MTh8MTY2MjcyNzQxOHwwO25vdHJhZGVzO2RibWozZ2FrMi1oYS5jb20%3D; 0bb94c16f=hXi0yY%7C1662727418; ppu_main_ce915066ffeac4bae3c644f0c0520fda=1

                                         
                                         74.206.189.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8455
Keep-Alive: timeout=1, max=89
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (439), with CRLF, LF line terminators
Size:   8455
Md5:    2440cd5edd11023d03a84a6cc1122c5c
Sha1:   5a73011cce1082dd134fd1063497b963bcfff55b
Sha256: 1ae0058f770dc4867bc7873c35b02d4301d7524446dcbadffe7b6cd524f93fe6
                                        
                                            GET /pxf.gif?uuid=97047ece-c1f7-4be0-bf62-444994d95a8a&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=ce915066ffeac4bae3c644f0c0520fda&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12 HTTP/1.1 
Host: unseenreport.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/

                                         
                                         192.243.61.225
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:40 GMT
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 485ac584b9bc3924f0931eab6f50c9fd
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6365
x-amzn-requestid: dc414175-8174-4fa8-812b-1f72de48d5f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKRBYEt8oAMFmyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6208-1c2417b120725a9a0642620a;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:43:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: lvOUBfECM7qlwpj9suDt1A4TRrvdYTsqOQGCNkf3pYYrIHHqZczRcg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:12:19 GMT
age: 52284
etag: "ff2c27cf141c68259e6e85020b01efc5d41730a6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6365
Md5:    cf8614d876156699bdf11897c45e9ae8
Sha1:   ff2c27cf141c68259e6e85020b01efc5d41730a6
Sha256: c89d6a2fdc789fc725e8bac99774f9f9f0b22000f57d32f5611525bca30002d9