r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4186
Expires: Fri, 09 Sep 2022 13:53:20 GMT
Date: Fri, 09 Sep 2022 12:43:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 12:11:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ay7JnaRJqng7AdjryxMJEEqOHFc7aHQ78t1_HOxZGN9xf1H_WOLkFg==
Age: 1936
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oVxqK1n3Gn-ZZOj7B7mMIvmlP2XjkI2WVqTqBLO-e_oiurNRjJbPxQ==
age: 32220
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 12:43:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 09 Sep 2022 11:56:07 GMT
Expires: Fri, 09 Sep 2022 12:30:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _bH_PuHc_FX4S86hK6LNxIqEeE3DCF9B-Uv5DvdMzPbYPwlk4R9Ytw==
Age: 2848
ocsp.digicert.com/
200 OK 471 B IP
Hash d0c56e0b2955a5dd7f37ba4bbf5727b4
f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b
99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2307
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 12:43:35 GMT
Last-Modified: Fri, 09 Sep 2022 12:05:08 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rf6a1L56N9b28XzR1r/7Bw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vua2ooJ1li+qK0zT2Ee2AOwvmBI=
www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
200 OK 8.5 kB URL HTTP/1.1 www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (439), with CRLF, LF line terminators
Hash 2440cd5edd11023d03a84a6cc1122c5c
5a73011cce1082dd134fd1063497b963bcfff55b
1ae0058f770dc4867bc7873c35b02d4301d7524446dcbadffe7b6cd524f93fe6
GET /?ref=DBMJ3GAK2-HA.com HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:36 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8455
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
www.sexplayed.com/js/jquery-1.12.0.min.js
200 OK 34 kB URL HTTP/1.1 www.sexplayed.com/js/jquery-1.12.0.min.js
IP
File type ASCII text, with very long lines (32060), with CRLF line terminators
Hash 5bc41199601b915a7dd7750b3a0d7180
af7bd4e370dadf0fbe72fb1211f78a340ac95f0a
8af0e3ef8f2ef480b8d2dc1b01ab71dd00a16760585b13e4e6ed946784beead7
GET /js/jquery-1.12.0.min.js HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:36 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "17c57-5df69215b636b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sun, 09 Oct 2022 12:43:36 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 33856
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3132
Expires: Fri, 09 Sep 2022 13:35:48 GMT
Date: Fri, 09 Sep 2022 12:43:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5fdeb374d4e3669ce5d9ff2cd22cd19
70ede5692526afd351d134a391383461dafdc64f
10c5d8e41aae1a36525a45375966b5067333f0c7edc176a540fd6527ebe1ad8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4532
x-amzn-requestid: e5694699-7f38-4542-8808-54bda7ee7d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIMmGGUmIAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63198e26-1aa6788e24fcfdf0008bee21;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 06:39:34 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: smtzoqnzJiET63xsW_r_-eVNsTK01mGqRbvuwekbqjnzS6Sb1fw9HQ==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:54:58 GMT
etag: "70ede5692526afd351d134a391383461dafdc64f"
content-type: image/jpeg
age: 49718
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7afe346e3b24ea4388913b449d1ffc42
f5348ba99fb8966dded580409108316f4e4e1237
1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: e7ec7e84-0924-4f5f-b289-4c750ea99567
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHHnNIAMFlrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-49565105361ec7f76cb818e0;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: DvCs6zEt1p58iwZaXfuF9YFA-fieE5Y974E07YMNYPiaGbR5iuXK-A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 53865
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F941aee78-aa38-4160-9ace-6710bf30c1ee.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F941aee78-aa38-4160-9ace-6710bf30c1ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91b464f11732e00e4fd02f22a588db95
1ab4fc655948819c42906d19f60c69f399ab221d
d47f87039129d760f53735d65258611eb2debbc58024738bc60e5a0c99ec8cc5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F941aee78-aa38-4160-9ace-6710bf30c1ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7524
x-amzn-requestid: c97e5c90-4fde-400d-b07a-cb7c2f119419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgIGwDIAMFVcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-2dc24fae4af1a68c79dcee95;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: gr9E1e8e64FTEN8FGnRfSCki0wxK-d2DbnJxf_2Vekysz9jwClzRuQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 57bd3a2d9e0e4cbf89d9eb3d7dfb916e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:51 GMT
age: 53865
etag: "1ab4fc655948819c42906d19f60c69f399ab221d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9590b525c8b07a297c8784f02b161a1
cec8428d159a5bde29e89c64cfb04146f759d52b
d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:05:15 GMT
age: 52701
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 15249f3dafdd1690bc87ebb4fa6d518d
f930fcb22325e28592bc39b0b1974f5197c19afd
a0b9e88c78e85a037363e0b0e4e03478718f8715fe69e72bfd159922eca28301
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c7c5434-1873-4130-a7ce-78209ce54bf0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10950
x-amzn-requestid: 435fc2f4-fbcb-4eec-81d8-a23154dcec61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YFUwZEfvIAMFjCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63186802-2348a4000430702d4e9ea132;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 09:44:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ORlM8dFTc_iThvJghFakY86D3ToJ5TCmP8Ip2PcvXCCkSKKHpWQ0Zw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:02:59 GMT
age: 52837
etag: "f930fcb22325e28592bc39b0b1974f5197c19afd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
200 OK 3.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0078c7a407144a1ede33aef6f734eecf
113393e0dbabb3aff949d19ab6517ba1082b622d
42afcaf15e45dfa9aff14f59f69d60a3de127005e35783d2d35a4cfa652b57b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3125
x-amzn-requestid: 5820e798-6469-40f9-8d70-ee71f1a163b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLM5GGQAoAMF8eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ac1d3-3a0e9db848ea7ab145f1cffa;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 04:32:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eZaKpjBYe3Qn7vs3zF52Cxob-xu3LMFs8esQAu6Lp6bzM0aOEHoXVg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 04:32:54 GMT
etag: "113393e0dbabb3aff949d19ab6517ba1082b622d"
content-type: image/jpeg
age: 29442
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.sexplayed.com/css/main.css
200 OK 8.2 kB URL HTTP/1.1 www.sexplayed.com/css/main.css
IP
Hash f1d368dc0683e34579560d8f5f1392b6
c5da52484773bfe6b1fb45732b36f65f86f8ca91
ffe776d8b05e5eaab9c22a4791aa8a24e7e15abde02d4790cfeb65ceca37cf8d
GET /css/main.css HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 04:51:10 GMT
ETag: "9353-5df6a3d3b2d32-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sun, 09 Oct 2022 12:43:37 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8179
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 55362bc853c99806e54641de1e0fdb0c
1c84425554ce994c84fd4d3b95833fed9bf16023
936a1c711aea3c55e6e270aec23f72818b7bbfed28b1c9859697050ebe9aaf4e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 55362bc853c99806e54641de1e0fdb0c
1c84425554ce994c84fd4d3b95833fed9bf16023
936a1c711aea3c55e6e270aec23f72818b7bbfed28b1c9859697050ebe9aaf4e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.sexplayed.com/js/main.js?v=1.2
200 OK 2.6 kB URL HTTP/1.1 www.sexplayed.com/js/main.js?v=1.2
IP
File type ASCII text, with very long lines (328)
Hash a06c21fb880f08755566d8d0ac2d7849
d9ce89923d1144b66a1fc8bacb6814d5fb0b1630
acf7431dc77b4eb9cb8b51f1341baa2ca06c3e4dc466360d3855e2b8a90ccde5
GET /js/main.js?v=1.2 HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "2244-5df69215b636b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Sun, 09 Oct 2022 12:43:37 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2612
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.sexplayed.com/images/logo.gif
200 OK 22 kB URL HTTP/1.1 www.sexplayed.com/images/logo.gif
IP
File type GIF image data, version 89a, 329 x 92\012- data
Hash 320716c5f057ef806baa364ad8b7dfd1
4c1c4abf9740529b0743dcfe2464041ba28c3b58
cd7e25e8cb44e7acc90e9dd937fc73b3bcb28ad4c3079e90bfbc5d811b8718bc
GET /images/logo.gif HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Thu, 02 Sep 2021 05:00:31 GMT
ETag: "53dd-5cafc0fec82fa"
Accept-Ranges: bytes
Content-Length: 21469
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:37 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/gif
fonts.googleapis.com/icon?family=Material+Icons
200 OK 813 B URL HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
Hash 7689243b14844626800f25e526d0a2d7
299d1a44dae583b96d6b6b3f39553f898619e0e7
dbe68dbade4f3e941dd03e34bda1c8b75bb3490c65f8d18e1daa764fa91214b6
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 12:43:37 GMT
date: Fri, 09 Sep 2022 12:43:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 148169
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.sexplayed.com/t.png
200 OK 1.4 kB IP
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ab263e09423e03bb4f1053892dd94b2c
7408088e606af655e98cf026c01005134267f227
cd0d4f54deb180b21f4c761802c322c1bc8bcfe66da829b9be9571c86e29c2b3
GET /t.png HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:37 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "56d-5df69215b5f83"
Accept-Ranges: bytes
Content-Length: 1389
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:37 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 148169
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15168, version 1.0\012- data
Hash 1598ebfa232c5514a99a8af0405cc9a6
d81db409924496627326925cffa27d465c24de3d
45a8badf06824c87461905a8b1871fc3ca3eb5934cee490deadad743ebf99661
GET /s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15168
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 21:14:17 GMT
expires: Wed, 06 Sep 2023 21:14:17 GMT
cache-control: public, max-age=31536000
age: 228560
last-modified: Fri, 24 Jun 2022 18:41:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cabin:700|Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext
200 OK 6.4 kB URL HTTP/2 fonts.googleapis.com/css?family=Cabin:700|Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext
IP
Hash 12d3376d48f4dccfe99c77a3cee05226
dd9086b9d6ec92a79022984d6cfdab136c90a7aa
ba5d67ebbb74f86aa8e9b02f0826f09eda667c1ce0735ad1a5251059e391cf08
GET /css?family=Cabin:700|Roboto:300,400,500,700,900&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 12:43:37 GMT
date: Fri, 09 Sep 2022 12:43:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 12:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js
200 OK 9.8 kB URL HTTP/1.1 honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26978), with no line terminators
Hash fd248ce33b79997bb6665118621dc3c3
197ac248966b7598ff2b35da544045d6ae6a11e2
8c11f39f20d0ef6cdf1130cda2ac41358ff225c28c3054a5b03d78e6f7749638
Analyzer Verdict Alert quad9 Sinkholed
GET /cd5bb673e36b29cd88b94c39310d0fe4/invoke.js HTTP/1.1
Host: honestlydeploy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5579e6854f872f5a7565a767d7ec712d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js
200 OK 9.8 kB URL HTTP/1.1 honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26972), with no line terminators
Hash cb1373106ddbdfdb7245ce2900d74d65
d3c09b2ba375e331fed9ab0bfdcfdece61af6617
6428c3ee6c0651e0b22ae1af7ee74b2c9a95289e27735c78306de95ea4a72124
Analyzer Verdict Alert quad9 Sinkholed
GET /cd5bb673e36b29cd88b94c39310d0fe4/invoke.js HTTP/1.1
Host: honestlydeploy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ebe66c3746b32cf9847e2595af7a486a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0eaa482920c47bd42030d69b28e5e08c
a59d707d2339350a0d681acf3d1e7bcb5e67bfae
0dae39030f55d48f02b69ee4d1d4b728128b8559a8bd8a0ea43abac1c42e7a70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 12:43:38 GMT
Last-Modified: Fri, 09 Sep 2022 11:39:15 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HS26q8hm5Pl5F267IyOTZ0BCqrS0nsId5gz_YqXVuPaTe86nHfpxpg==
Age: 3863
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash c1511cd259e12bba0a9df19dedbde239
e1fa03f307581442b810a30c2c00c48c0c67be43
89dcceac1b29ab49d3d3ab2b91122d3c79bedc8de1eb02ee6c03983e0ad066db
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 12:43:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.sexplayed.com
access-control-allow-credentials: true
set-cookie: uid_id2=7c85eada-9c31-44f8-816f-f8865ad18313:1:1; expires=Mon, 06 Sep 2032 12:43:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash dc3c2eb93d72524b9cc841a322495718
ad79cbfd3c175cc5ef886cd787697e75c372806a
8c7aee532a8b7a4f23c04d639621eb5a3a7035be9ae973d82e63ee3900e3d926
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 12:43:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.sexplayed.com
access-control-allow-credentials: true
set-cookie: uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1; expires=Mon, 06 Sep 2032 12:43:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js
200 OK 9.8 kB URL HTTP/1.1 honestlydeploy.com/cd5bb673e36b29cd88b94c39310d0fe4/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26968), with no line terminators
Hash b76c637bfb28b0a9863f362a589cac82
4cb75e83ea92783dfbc03af457abab93b8a47c62
31979a7f51325c59d1d78aecbc85f0bfc7b3636f59397ddbe2ee0ae351aee2ca
Analyzer Verdict Alert quad9 Sinkholed
GET /cd5bb673e36b29cd88b94c39310d0fe4/invoke.js HTTP/1.1
Host: honestlydeploy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 660cd949553c52d4c28bdb0712e99666
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.sexplayed.com/thumbs/AA/aj/sc.jpg
200 OK 16 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/aj/sc.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 3b0f99fdce44ab4f19672a586fe7789a
3f1935f0fadc56f5225e50cfdd4703b3853f2435
c2d57c25b4e75edf0c77d8b0142000a9f4ae01c65a182089ac69ec948bfc0573
GET /thumbs/AA/aj/sc.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:59:11 GMT
ETag: "3cb2-5d8cee218fe7b"
Accept-Ranges: bytes
Content-Length: 15538
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d0f7ae0dd17be004f04c27e40575a094
eb6000a7ce527edb7c7541e7e77386268f181646
80003f4ba4335297c8a5774ab12e4e8e7bb178a2c3584c1ab9d241bd01e06182
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80003F4BA4335297C8A5774AB12E4E8E7BB178A2C3584C1AB9D241BD01E06182"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2831
Expires: Fri, 09 Sep 2022 13:30:49 GMT
Date: Fri, 09 Sep 2022 12:43:38 GMT
Connection: keep-alive
obituaryfuneral.com/ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js
200 OK 20 kB URL HTTP/1.1 obituaryfuneral.com/ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59405), with no line terminators
Hash 7f93e13d79bd21ed017a3928d472ea7c
5b8a59a00dcdd0bb7df6ddb93351445ca1c67986
c1aa9c7e6cbba729724f29ff8ec070599d11b67c13b8b037f35e354da4f5c48a
Analyzer Verdict Alert quad9 Sinkholed
GET /ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js HTTP/1.1
Host: obituaryfuneral.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75a8a4df1a8e5d129acc897f093ff256
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.sexplayed.com/images/topbg.gif
200 OK 8.6 kB URL HTTP/1.1 www.sexplayed.com/images/topbg.gif
IP
File type GIF image data, version 89a, 110 x 92\012- data
Hash cddc6fe4cef20e347f43377078c648bb
a74f2db04efe2674d84486b49d1b037c3cb89c82
0dadfc55c73c2e7c5c12e8ee391380569fdcf1459e85d2be5302da0bbc74a585
GET /images/topbg.gif HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/css/main.css
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Thu, 02 Sep 2021 05:00:31 GMT
ETag: "21b2-5cafc0ff4b0b7"
Accept-Ranges: bytes
Content-Length: 8626
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: image/gif
www.sexplayed.com/ain.php
200 OK 0 B URL HTTP/1.1 www.sexplayed.com/ain.php
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ain.php HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 67
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Set-Cookie: 0bb94c16=MXwwfDE2NjI3Mjc0MTh8MTY2MjcyNzQxOHwwO25vdHJhZGVzO2RibWozZ2FrMi1oYS5jb20%3D; expires=Sat, 10-Sep-2022 12:43:38 GMT; Max-Age=86400; path=/
0bb94c16f=hXi0yY%7C1662727418; expires=Sat, 09-Sep-2023 12:43:38 GMT; Max-Age=31536000; path=/
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
www.sexplayed.com/icons/icons.woff2?79366695
200 OK 5.1 kB URL HTTP/1.1 www.sexplayed.com/icons/icons.woff2?79366695
IP
File type Web Open Font Format (Version 2), TrueType, length 5148, version 1.0\012- data
Hash 83c2dc984cfbfbc0df5aba9aa2381e5e
d360eda208d4076c5e044e73dfcd248a55cd4693
a4571fbdea1888d44446da2c4ecd4e0d2c4333c2f52ac0f556a48ad2db408648
GET /icons/icons.woff2?79366695 HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.sexplayed.com/css/main.css
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Fri, 20 May 2022 03:31:47 GMT
ETag: "141c-5df69215b6753"
Accept-Ranges: bytes
Content-Length: 5148
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: font/woff2
www.sexplayed.com/thumbs/AA/R8/HM.jpg
200 OK 11 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/R8/HM.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash e1baff283096a2a545fc266be4af0461
d0ca84852b36a28a4e245fe0d75f8ce78acda5ab
e269079f80536271fae2a3af49ab4201d8d9ea3d09ba93dff588cf9ae3557d25
GET /thumbs/AA/R8/HM.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 01:30:44 GMT
ETag: "2ba2-5d8f5e1792c74"
Accept-Ranges: bytes
Content-Length: 11170
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/Tp/Az.jpg
200 OK 15 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/Tp/Az.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 10784676eab4f8e50b95cb60b6481cc6
caec5069c3419b0d8af285ac349087120e419dc1
08b37c344fa28273b3fa4d571fc6a56084f619534f6bfa19d44d9f098c2bc7a9
GET /thumbs/AA/Tp/Az.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:41:31 GMT
ETag: "3a74-5d8cea2e1458b"
Accept-Ranges: bytes
Content-Length: 14964
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
forgerylimit.com/ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js
200 OK 20 kB URL HTTP/1.1 forgerylimit.com/ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59390), with no line terminators
Hash caa124f1fe4440cde91a51e3729d7cea
091e997c997ae93522db37f7ce1f8bb7f1615474
98a27f243e4b6ab1b50aa8f2995bd35e19d0400af9c827a9423ca4ec2d81fc33
Analyzer Verdict Alert quad9 Sinkholed
GET /ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js HTTP/1.1
Host: forgerylimit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ae03ad5adb59b9378508f357cf3abe2a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
obituaryfuneral.com/watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 obituaryfuneral.com/watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1 HTTP/1.1
Host: obituaryfuneral.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com
Access-Control-Allow-Origin: http://www.sexplayed.com
Access-Control-Allow-Credentials: true
Location: https://obituaryfuneral.com/watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=190e17d8b4c2b6066befa7ebee2f8d9996fb12fc3902fa1cfdd7817223ffe6c3d5e90fa58345ed8a3d9ebe357ca94df0934984556ba38ed2d4944fc4a7feb1c7c0f377456340a4c734d75bd53f23cf9757d049a4&pst=1662727478&rmtc=t
Set-Cookie: u_pl=17206326; expires=Sat, 10 Sep 2022 12:43:38 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; expires=Fri, 09 Sep 2022 12:44:38 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c4f2be04ccadbea879fa97775e116b5f
Strict-Transport-Security: max-age=0; includeSubdomains
addresseepaper.com/sfp.js
200 OK 23 kB URL HTTP/1.1 addresseepaper.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 487ad2b48cd98e36abf708a3b60f4a36
ccf7b110523d50bb619becd48c3f013cc5fdce87
768eff747f795e1232d182eb859170e32d4f06ed29da872c09af5363c459668f
Analyzer Verdict Alert quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 386d0834b07ed6c38f138775dd63ac3c
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Fri, 09 Sep 2022 12:43:38 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qQVFMrXM9%2BaAaswu55a8zE9yHAT%2FP597KZjeue7W%2Bzs03vdF2Gfjg6s4FHKLX0pG%2BwiQBnoACvtlh9zGphckk3FRDPUaqrVXQthMxsnGuTkjhPiUmYob0m9XmBd58%2FeUSA3vnLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748002bffe417771-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4d81b6fc3f4437ff79d5b979b1b9cf80
cc2b2575a0723022be11ef01a8807e2e845ec668
37e8404d71d98b26bb61b23c97984e5f674f9006f260b1607d6f5876ed4b2277
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37E8404D71D98B26BB61B23C97984E5F674F9006F260B1607D6F5876ED4B2277"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8219
Expires: Fri, 09 Sep 2022 15:00:38 GMT
Date: Fri, 09 Sep 2022 12:43:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2db764001243d13c739384fdf698f185
54f6f0f91c266c7a7bcf2458509b672d784dec7d
1e5b508cc623ef3d5e35713e70846bbb1aa272a5294c2aeda8f53609740da663
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1E5B508CC623EF3D5E35713E70846BBB1AA272A5294C2AEDA8F53609740DA663"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Fri, 09 Sep 2022 13:38:45 GMT
Date: Fri, 09 Sep 2022 12:43:39 GMT
Connection: keep-alive
reapinject.com/ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js
200 OK 20 kB URL HTTP/1.1 reapinject.com/ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js
IP
File type ASCII text, with very long lines (59381), with no line terminators
Hash 6356110cec95b13dc2644ccac806788c
edb843fe096de32b0e7e5914291b3c3b980b7593
fc04f687507dabeccbf385e792871f090a7c83928c7f299a4adf989ee450bb54
Analyzer Verdict Alert quad9 Sinkholed
GET /ce/91/50/ce915066ffeac4bae3c644f0c0520fda.js HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3fe92eff3b4c46c68c7b3ed53e8157fe
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.sexplayed.com/thumbs/AA/iJ/uO.jpg
200 OK 11 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/iJ/uO.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash e1aae275691520dd865f20115c3234d8
1bea3a13e6f5ad6ac675652f3234835be604ba56
c1c407bea9ceefa826ccc372d827a2ea6b98afe64c5a99edd3d6ae7ad699dbcf
GET /thumbs/AA/iJ/uO.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:47:10 GMT
ETag: "2c5c-5d8ceb717ed6e"
Accept-Ranges: bytes
Content-Length: 11356
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/eC/LP.jpg
200 OK 14 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/eC/LP.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash cc82ca0030bc9581f6a3a5f936f2326f
af128bbf5cdce9a48d2a654e73875ac70cd93c11
c21083058d5aa2dc201d6c41d85dda6145c1a8e378d202e6ff823c68876f40a5
GET /thumbs/AA/eC/LP.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 10 Jul 2022 08:28:02 GMT
ETag: "36c7-5e36f36be3f05"
Accept-Ranges: bytes
Content-Length: 14023
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
obituaryfuneral.com/watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=190e17d8b4c2b6066befa7ebee2f8d9996fb12fc3902fa1cfdd7817223ffe6c3d5e90fa58345ed8a3d9ebe357ca94df0934984556ba38ed2d4944fc4a7feb1c7c0f377456340a4c734d75bd53f23cf9757d049a4&pst=1662727478&rmtc=t
200 OK 0 B URL HTTP/1.1 obituaryfuneral.com/watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=190e17d8b4c2b6066befa7ebee2f8d9996fb12fc3902fa1cfdd7817223ffe6c3d5e90fa58345ed8a3d9ebe357ca94df0934984556ba38ed2d4944fc4a7feb1c7c0f377456340a4c734d75bd53f23cf9757d049a4&pst=1662727478&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.992221919460.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=190e17d8b4c2b6066befa7ebee2f8d9996fb12fc3902fa1cfdd7817223ffe6c3d5e90fa58345ed8a3d9ebe357ca94df0934984556ba38ed2d4944fc4a7feb1c7c0f377456340a4c734d75bd53f23cf9757d049a4&pst=1662727478&rmtc=t HTTP/1.1
Host: obituaryfuneral.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Referer: http://www.sexplayed.com/
Connection: keep-alive
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ccb88e5160b9d15a7083e38d912132c3
Strict-Transport-Security: max-age=0; includeSubdomains
forgerylimit.com/watch.1540212936797.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
200 OK 0 B URL HTTP/1.1 forgerylimit.com/watch.1540212936797.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1540212936797.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1 HTTP/1.1
Host: forgerylimit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c2ba863d71fd692d99a6db3d63c845b8
Strict-Transport-Security: max-age=0; includeSubdomains
reapinject.com/watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 reapinject.com/watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1 HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Connection: keep-alive
Referer: http://www.sexplayed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com
Access-Control-Allow-Origin: http://www.sexplayed.com
Access-Control-Allow-Credentials: true
Location: https://reapinject.com/watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=8e4a8a1765b8b0f8feb4a54590d3d576ff3bb2e73180eb377ea74762b0ad9501288b61fc636ad26ceeca6b91daaf84e7c78b923e840e46ebaf9260ed2fb71e1a8b476976190a25552e0bd7dffb100b1bd20c01016260b8fb829070cbaa6c8f&pst=1662727479&rmtc=t
Set-Cookie: u_pl=17206326; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzIwNjMyNiwiayI6ImNkNWJiNjczZTM2YjI5Y2Q4OGI5NGMzOTMxMGQwZmU0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODQ1OTkzLCJwaWQiOjgyNTUxLCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjE2LCJhaWQiOjUsInB0Ijo0LCJwayI6ImQ5bXljMXNrNiIsImNwa3MiOnsgIjI4IjoiY2U5MTUwNjZmZmVhYzRiYWUzYzY0NGYwYzA1MjBmZGEifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwOi8vd3d3LnNleHBsYXllZC5jb20vP3JlZj1EQk1KM0dBSzItSEEuY29tIn19.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; expires=Fri, 09 Sep 2022 12:44:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2e20e103956f872c4d19469ba79f20d2
Strict-Transport-Security: max-age=0; includeSubdomains
www.sexplayed.com/thumbs/AA/IS/F5.jpg
200 OK 240 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/IS/F5.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 240 kB (239684 bytes)
Hash ee0ad22b3bd1e3efa857aa7546738b61
ab0f4c87958074e30fb111f0f0506e79007d4cd1
219f26b1a8382fbc471d2917dda0840b540f015e1fb950cff47dfab2fd5fc307
GET /thumbs/AA/IS/F5.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 09:02:13 GMT
ETag: "3a844-5e66c1ef3853a"
Accept-Ranges: bytes
Content-Length: 239684
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/2Y/lA.jpg
200 OK 18 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/2Y/lA.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 9bd0610a96f1be779d1325bf54da82b7
e6f0c1ac159d4cda38e9edab09df84f8bc45f3be
b19d7c5af7d461afae5f9bba114cc7256e4fefe121c55570f16677d3ba07478d
GET /thumbs/AA/2Y/lA.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:38 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 23:41:03 GMT
ETag: "4875-5d8f45936dfd2"
Accept-Ranges: bytes
Content-Length: 18549
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:38 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/HC/1H.jpg
200 OK 11 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/HC/1H.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 609d05ea319e42241af12df270f927c3
f93a7a05166e40bc452f67ecae0125d6c0470efa
e7ee822eab22da006c1bfd5b08f88be89c44908e58f5802a43990b2d5246d3ce
GET /thumbs/AA/HC/1H.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 08:23:03 GMT
ETag: "2993-5e1dcd00e2392"
Accept-Ranges: bytes
Content-Length: 10643
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/bg/93.jpg
200 OK 17 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/bg/93.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 33d17ee57d2acb8fc4e14289aef2e82e
ae782491365f4a68d37b599716fa0c0c19df8e22
0d0899d2ce04bf7ab17e95e5dd8523ff89d5b3531ede6fa7859f604727dd9816
GET /thumbs/AA/bg/93.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 09:22:06 GMT
ETag: "4235-5e83b146a909e"
Accept-Ranges: bytes
Content-Length: 16949
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
reapinject.com/watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=8e4a8a1765b8b0f8feb4a54590d3d576ff3bb2e73180eb377ea74762b0ad9501288b61fc636ad26ceeca6b91daaf84e7c78b923e840e46ebaf9260ed2fb71e1a8b476976190a25552e0bd7dffb100b1bd20c01016260b8fb829070cbaa6c8f&pst=1662727479&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 reapinject.com/watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=8e4a8a1765b8b0f8feb4a54590d3d576ff3bb2e73180eb377ea74762b0ad9501288b61fc636ad26ceeca6b91daaf84e7c78b923e840e46ebaf9260ed2fb71e1a8b476976190a25552e0bd7dffb100b1bd20c01016260b8fb829070cbaa6c8f&pst=1662727479&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2447)
Hash 65551aca236acad5035ab9c859ef0a48
e4ddcb716090fbbd4018f84e98a7ff68914c3ebb
000743b0f51ca518306d62725e89e5d4f22f33779ac75f85fcbe9cfafa56edea
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.694703083495.js?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1&shu=8e4a8a1765b8b0f8feb4a54590d3d576ff3bb2e73180eb377ea74762b0ad9501288b61fc636ad26ceeca6b91daaf84e7c78b923e840e46ebaf9260ed2fb71e1a8b476976190a25552e0bd7dffb100b1bd20c01016260b8fb829070cbaa6c8f&pst=1662727479&rmtc=t HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.sexplayed.com
Referer: http://www.sexplayed.com/
Connection: keep-alive
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com
Access-Control-Allow-Origin: http://www.sexplayed.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=7c85eada-9c31-44f8-816f-f8865ad18313:1:1; expires=Fri, 16 Sep 2022 12:43:39 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
uncs=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7118ae18b5c756d5c049e2c76c3a0d09
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
graduatewonderentreaty.com/pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70
502 Bad Gateway 157 B URL HTTP/1.1 graduatewonderentreaty.com/pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d41a93f6d3a61aa8e32d7a0afcfbb2d0
77718bef53accc9fd03bea992dc25e4086a17d50
3f72ba697c379550b6005be4ed325a33b228eea31e056a4dfa1150c6ace3f6cd
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: graduatewonderentreaty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 502 Bad Gateway
Server: nginx/1.19.5
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Type: text/html
Content-Length: 157
Connection: keep-alive
www.sexplayed.com/thumbs/AA/VX/uA.jpg
200 OK 16 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/VX/uA.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 5b91b9f38560d57f196f65a46e2b153b
2d92882643e9e0e857f5094c1d0e5e3c22ea8c1d
0630800899eb7180bf0ab9f1295573ec1b85d1b436c0d525a00e13955a65734a
GET /thumbs/AA/VX/uA.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 18 Aug 2022 09:02:35 GMT
ETag: "3cc0-5e6803e1e61fb"
Accept-Ranges: bytes
Content-Length: 15552
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/El/C2.jpg
200 OK 12 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/El/C2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 88e788f3fc444841d5be50e7ce22827c
418fd94973c92eff78a5ae06149291c5755a814c
8865aaa9b2553d1a4d4ce4c5baff5b7a7b749cc23e3e221fa776bcb9481e82fe
GET /thumbs/AA/El/C2.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 20 Aug 2022 09:04:11 GMT
ETag: "3036-5e6a87f7da86c"
Accept-Ranges: bytes
Content-Length: 12342
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/pX/wv.jpg
200 OK 20 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/pX/wv.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x361, components 3\012- data
Hash 370b7afa733dd44a1f710c2da45a25d9
64b4fdbcd31acd45f8b1d42b26c314d749b9f2f6
b3a8fd01b2be6d0bacf436d23bc3d427c66536c0fe1325e91124e0564fe3b69b
GET /thumbs/AA/pX/wv.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Mon, 27 Jun 2022 04:52:04 GMT
ETag: "4cff-5e266ae6c4ae5"
Accept-Ranges: bytes
Content-Length: 19711
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
forgerylimit.com/watch.1540212936797?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 forgerylimit.com/watch.1540212936797?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (638)
Hash 292949f15b319ea22c4b7057365c5c1a
8dad9250a10d21e3a614ca8602fd46904cc6e44d
02d4c701d2ae22e0e93c5f7a1074016fa6fe9722cba9e6fe707c99912a502725
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1540212936797?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1 HTTP/1.1
Host: forgerylimit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17206326; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzIwNjMyNiwiayI6ImNkNWJiNjczZTM2YjI5Y2Q4OGI5NGMzOTMxMGQwZmU0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODQ1OTkzLCJwaWQiOjgyNTUxLCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjE2LCJhaWQiOjUsInB0Ijo0LCJwayI6ImQ5bXljMXNrNiIsImNwa3MiOnsgIjI4IjoiY2U5MTUwNjZmZmVhYzRiYWUzYzY0NGYwYzA1MjBmZGEifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwOi8vd3d3LnNleHBsYXllZC5jb20vP3JlZj1EQk1KM0dBSzItSEEuY29tIn19.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; expires=Fri, 09 Sep 2022 12:44:39 GMT; secure; SameSite=None
uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1; expires=Fri, 16 Sep 2022 12:43:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8f1fb077d6e145b799cb9f125c4bc8e2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
obituaryfuneral.com/watch.992221919460?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
200 OK 0 B URL HTTP/1.1 obituaryfuneral.com/watch.992221919460?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.992221919460?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1 HTTP/1.1
Host: obituaryfuneral.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.sexplayed.com/
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 99d3ec70b831355f4af63803110b0e42
Strict-Transport-Security: max-age=0; includeSubdomains
phosphatepossible.com/pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 phosphatepossible.com/pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: phosphatepossible.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.sexplayed.com/thumbs/AA/vA/60.jpg
200 OK 14 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/vA/60.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash d5c82d12b3d58fd8e87f3f947b5395f9
88c4a11e0728261b62dc652365cd4e1e758cf51f
cf201388cbe8320da67b4cbafb9c7bf4bfbe290ac402352c11ba96a378938974
GET /thumbs/AA/vA/60.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 02:27:46 GMT
ETag: "3508-5d8f6ad67698d"
Accept-Ranges: bytes
Content-Length: 13576
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/kH/zt.jpg
200 OK 14 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/kH/zt.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 0ccbcd4e7ff83a5fb4d7a222064272cd
35f7e49b644473e586d44fbdb166a51e6f3d913d
48f17cc234cff9b75acc771f3592e36264521e454d3a3274c3cf25a4e0471fac
GET /thumbs/AA/kH/zt.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Tue, 01 Mar 2022 09:47:40 GMT
ETag: "37b1-5d9250e48cc45"
Accept-Ranges: bytes
Content-Length: 14257
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c34afdb543f36633ccaa1856798ce9b
568d09d760f3b498376e86a26b13345bd53cd217
54daf99f14294bd52d5f516aa5cec0584b8a43daae4525fabb7692f9f114af5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54DAF99F14294BD52D5F516AA5CEC0584B8A43DAAE4525FABB7692F9F114AF5B"
Last-Modified: Wed, 07 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11778
Expires: Fri, 09 Sep 2022 15:59:57 GMT
Date: Fri, 09 Sep 2022 12:43:39 GMT
Connection: keep-alive
www.sexplayed.com/thumbs/AA/PC/hu.jpg
200 OK 17 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/PC/hu.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 6cbf48fa93d1bc93b341493ce6fd8290
9920f91a7048a4f2b1d027d08be0dd0ec85d6199
69573a37a757b2ed535346e912d606a8c2582d77e2c79688a4592d3c302e6305
GET /thumbs/AA/PC/hu.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 03:24:23 GMT
ETag: "40fe-5d8e35a07684e"
Accept-Ranges: bytes
Content-Length: 16638
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
siegepolitical.com/pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 siegepolitical.com/pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=4220&rd=4220&fd=519&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: siegepolitical.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/f20/419/c5c/ad_02.jpg
200 OK 39 kB URL HTTP/2 cdn.cloudimagesb.com/f20/419/c5c/ad_02.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:08:08 12:59:32], progressive, precision 8, 300x250, components 3\012- data
Hash 7e23781e0c4955d97957ef96aafab7b9
5355e43d60cfd1e3a6c9d0d81ba245e0c4cb8b17
c22f0e91b903e6cd4c0d50c42b125e3183d6876c1e5183c9fcc79fd2105bf670
GET /f20/419/c5c/ad_02.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 12:43:39 GMT
content-type: image/jpeg
content-length: 39096
server: nginx/1.17.6
last-modified: Wed, 14 Aug 2019 17:06:55 GMT
etag: "5d543faf-98b8"
expires: Sun, 11 Sep 2022 12:43:39 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
forgerylimit.com/watch.1540212936797?shu=71a6fcedf084bc4ddc4e67d2ed255cb8ef8e7ca130f6d85c2294781076758561d6925eba4413a59ff17295242c1ac82ccf96f023a8dad45620e69b074eafe63637f59249eabde087c2c07b0a65faabdbda56de78&pst=1662727479&rmtc=t&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1&pii=&in=false&key=cd5bb673e36b29cd88b94c39310d0fe4&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&dev=r&res=12.29&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&tz=0
200 OK 1.7 kB URL HTTP/1.1 forgerylimit.com/watch.1540212936797?shu=71a6fcedf084bc4ddc4e67d2ed255cb8ef8e7ca130f6d85c2294781076758561d6925eba4413a59ff17295242c1ac82ccf96f023a8dad45620e69b074eafe63637f59249eabde087c2c07b0a65faabdbda56de78&pst=1662727479&rmtc=t&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1&pii=&in=false&key=cd5bb673e36b29cd88b94c39310d0fe4&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&dev=r&res=12.29&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&tz=0
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2372)
Hash 19623309ef02b09ef2e5d65413ccf7f4
74530c0ee28aef604e6ff04a0b3d0292ba215d61
26fb1774e810b9223c4c6421a57c63d9462036ac17a5c64b457963301f573bf3
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1540212936797?shu=71a6fcedf084bc4ddc4e67d2ed255cb8ef8e7ca130f6d85c2294781076758561d6925eba4413a59ff17295242c1ac82ccf96f023a8dad45620e69b074eafe63637f59249eabde087c2c07b0a65faabdbda56de78&pst=1662727479&rmtc=t&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1&pii=&in=false&key=cd5bb673e36b29cd88b94c39310d0fe4&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&dev=r&res=12.29&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&tz=0 HTTP/1.1
Host: forgerylimit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forgerylimit.com/watch.1540212936797?key=cd5bb673e36b29cd88b94c39310d0fe4&kw=%5B%22sexplayed%22%2C%22com%22%2C%22the%22%2C%22most%22%2C%22playful%22%2C%22sexy%22%2C%22time%22%2C%22you%22%2C%22will%22%2C%22find%22%2C%22on%22%2C%22any%22%2C%22porn%22%2C%22tube%22%5D&refer=http%3A%2F%2Fwww.sexplayed.com%2F%3Fref%3DDBMJ3GAK2-HA.com&tz=0&dev=r&res=12.29&uuid=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
Cookie: u_pl=17206326; ain=eyJhbGciOiJIUzI1NiJ9.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.34HN8wCsdvAa9JznP30RvV9il2mrRwIHh7P9Vp7pZrQ; uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Access-Control-Allow-Origin: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=97047ece-c1f7-4be0-bf62-444994d95a8a:3:1; expires=Fri, 16 Sep 2022 12:43:39 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
uncs=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 10 Sep 2022 12:43:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 15e7afe22bbd19c67fd04c83733d0948
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.sexplayed.com/thumbs/AA/ym/2o.jpg
200 OK 14 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/ym/2o.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.14.7.71094560 0x0aefab40", baseline, precision 8, 640x480, components 3\012- data
Hash cd0e819968df54a12ac35aa148878b96
0ec2e517f3e9b989d623b4c380d236f06ecad47f
ec7655b102685de9216b073c7b255bb72f8fcf0e8b48361f0ca74ed3eecae653
GET /thumbs/AA/ym/2o.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 04:37:34 GMT
ETag: "372d-5d948f4f53dde"
Accept-Ranges: bytes
Content-Length: 14125
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/DY/xo.jpg
200 OK 200 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/DY/xo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1140x606, components 3\012- data
Size 200 kB (200077 bytes)
Hash 440d140a38ff0eeecd578367ab54af2e
6e332983fd2a02477b7835cd1a78c852a2b5f87b
ff58388669c098a53416de7c21da56d63da864812c1b055fa6ed35df69d276dd
GET /thumbs/AA/DY/xo.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Wed, 22 Jun 2022 04:50:10 GMT
ETag: "30d8d-5e2021267fa39"
Accept-Ranges: bytes
Content-Length: 200077
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/De/Is.jpg
200 OK 13 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/De/Is.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash a9766d9ec9aa5e6ce2a06b65586bc35b
aa76103c7e70f5f9bf6dd0f197bd8ea81eb03a79
7c7ed8bac2d6fc5b779441c9e516cfdb9a1d56e8bac16511bd53c0404ee751b6
GET /thumbs/AA/De/Is.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:52:10 GMT
ETag: "336f-5d8cec8fb3fad"
Accept-Ranges: bytes
Content-Length: 13167
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/yM/MC.jpg
200 OK 16 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/yM/MC.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 40458b2eccd5592043b97e1db3edecbe
e014f661e8775e6f61157acc1e196496e529f5f4
f95f17f1e044258413e734cbe98a4af4fcefb6848c48ac20dbf4a28e22286b22
GET /thumbs/AA/yM/MC.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 09:22:38 GMT
ETag: "3d1d-5d8fc7919d6aa"
Accept-Ranges: bytes
Content-Length: 15645
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/wv/fv.jpg
200 OK 85 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/wv/fv.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash abd5e2d276efc5b49d194c7c62ff4dba
b767da24744a74c37487778c65d13573f1080878
4813e5dc0f19e3d2605afa1a7c79e2779bb3d4d73b964cd9e718f6df2d1bece6
GET /thumbs/AA/wv/fv.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 04:30:06 GMT
ETag: "14af5-5d948da495ebb"
Accept-Ranges: bytes
Content-Length: 84725
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/ke/TZ.jpg
200 OK 16 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/ke/TZ.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 8009bf99e4408e0f1011479b0f77fdfd
bd63c16dbfe1c57426078e06574d8aa2aa4e922d
c79e6cb02508cf949af71b6c76d62e268feee29b34462da445ca7e446424db4d
GET /thumbs/AA/ke/TZ.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 27 Feb 2022 01:30:30 GMT
ETag: "3d9e-5d8f5e09fe3bc"
Accept-Ranges: bytes
Content-Length: 15774
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/WU/t5.jpg
200 OK 311 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/WU/t5.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x480, components 3\012- data
Size 311 kB (310809 bytes)
Hash 126c8b3e9daf22da2e0af7d255a3926f
72a17190b15b664507eb4a4f67b5c04f9b25d850
ddec1a1119f1d05e7dcd2cf6a73a3422c3cb50be25f321f682a9ce23a5e402b5
GET /thumbs/AA/WU/t5.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 28 Apr 2022 03:22:52 GMT
ETag: "4be19-5ddae70ecd520"
Accept-Ranges: bytes
Content-Length: 310809
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/yh/BK.jpg
200 OK 15 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/yh/BK.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 516eb9927fbd00361958a76ec8aee4a4
578abf59bf6a22226f3f84060738d3699366fda3
46c01c6742c5b6295a557facf85a5d4d6a53eafc190a9449c0c8cffaa9caf0a4
GET /thumbs/AA/yh/BK.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Tue, 24 May 2022 08:13:03 GMT
ETag: "3b86-5dfbd869a1834"
Accept-Ranges: bytes
Content-Length: 15238
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/pe/xG.jpg
200 OK 13 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/pe/xG.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 4cd096a5a1d7b6d924884dc2056d7405
59ad87c2881e17bcae861bcdb972405e1a71ca76
aa0a572023429751436401cdef2c130d8512c56a197fcb8d9a87acd8919d9af0
GET /thumbs/AA/pe/xG.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 03:02:48 GMT
ETag: "33af-5d8ceef030d89"
Accept-Ranges: bytes
Content-Length: 13231
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/x3/7a.jpg
200 OK 14 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/x3/7a.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 59179ab7cc7c86ea929fe12507cf5ec8
0f449562ef2bdcf6b8ed246e70cbd2f3141c9d0e
ef2316ce6292785a9428182dc855ead412d589500ea897fbfb1fcab0957391eb
GET /thumbs/AA/x3/7a.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 08:31:03 GMT
ETag: "3821-5e4b11efc1215"
Accept-Ranges: bytes
Content-Length: 14369
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/Wz/d2.jpg
200 OK 27 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/Wz/d2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 40f57f8236f64b6a7a81d65411de6d97
05dd892f130a86d83a3f6061de0988360d453408
7394a50af5be7da51c5d5667fad38b72ab7d155e9303b37ffc9e52c7a7a23b6e
GET /thumbs/AA/Wz/d2.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 06:09:12 GMT
ETag: "69ca-5d8d189a9acaa"
Accept-Ranges: bytes
Content-Length: 27082
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/a1/oL.jpg
200 OK 16 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/a1/oL.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 1b4e8290ce515ab7f035da1fc2b810a7
e51674dc4f915428a92798f1e847952d3887bd32
f80151f058cee62d06bdd08eac22f4dff85f1aee22a816a16c7c1a2b72117cb4
GET /thumbs/AA/a1/oL.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 11:09:02 GMT
ETag: "3f0a-5d8e9d7bfcb89"
Accept-Ranges: bytes
Content-Length: 16138
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/xt/5y.jpg
200 OK 11 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/xt/5y.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 0b0f7aee65ba2e0d0cb549b1bfd15531
e6e9ed39dca7744aa189b7b981531f3d8b96c10a
617a1c0dad5273d08cd1265ffeb796159e2ea4921981b33cb015d416ee067179
GET /thumbs/AA/xt/5y.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 02:53:48 GMT
ETag: "2b48-5d8cecece6409"
Accept-Ranges: bytes
Content-Length: 11080
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/bl/mD.jpg
200 OK 86 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/bl/mD.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x540, components 3\012- data
Hash 8a4c9714afca37af5734d597356d8845
b31657f655899ac5bda7169534c6abbc1d227a3f
05589f5b2d78550a9bc07ffb3b577de28b6219448b8b2470dd193197331f5ee4
GET /thumbs/AA/bl/mD.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=7c85eada-9c31-44f8-816f-f8865ad18313%3A1%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 04:50:11 GMT
ETag: "14ebf-5e1d9d6d1c690"
Accept-Ranges: bytes
Content-Length: 85695
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/MH/wA.jpg
200 OK 23 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/MH/wA.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 45a81ca2db752475fd74770b9a7a0226
45df30832ff49251c68487ded58aba831505fa89
ba422f0f4a1fd42a2490bd3b9920877ef8db735fc969b3d979a84a3f8a324dc6
GET /thumbs/AA/MH/wA.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 03:02:31 GMT
ETag: "58b7-5d8ceee03c650"
Accept-Ranges: bytes
Content-Length: 22711
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/dq/nh.jpg
200 OK 12 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/dq/nh.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 1b26c07b059624cc4a921a58a8471005
e6c6366b100ae6d323d7fd5ada50333272c3ccbc
c396102829c2a47f09719e4251f85823055a1258a8d9146c4243c354766965dd
GET /thumbs/AA/dq/nh.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 08:36:06 GMT
ETag: "2f09-5d8e7b4d0dcba"
Accept-Ranges: bytes
Content-Length: 12041
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/WH/IQ.jpg
200 OK 46 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/WH/IQ.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash 96bb1b5250e89fc531c37dd7e4d00cfb
0846049cd61ea784fa06d7b9aac69deb4a42b83d
1794941ad810c856627ffcc59d4272688f8ed4a5ff2e14c7eb1223b26d2d05e2
GET /thumbs/AA/WH/IQ.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 11 Aug 2022 09:22:54 GMT
ETag: "b400-5e5f3b5da172b"
Accept-Ranges: bytes
Content-Length: 46080
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/Tb/38.jpg
200 OK 230 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/Tb/38.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1500x1000, components 3\012- data
Size 230 kB (230494 bytes)
Hash 2aa0dc6e825b04d37f39486cdda9d012
108d9ab524695bf2f725c3fe6b713d0e15d8e274
db7899864cbd541baecd1214be547fbfd9fb94bb5eaf422500b97cfb34a47b16
GET /thumbs/AA/Tb/38.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Sun, 01 May 2022 04:32:14 GMT
ETag: "3845e-5ddebc28b48b8"
Accept-Ranges: bytes
Content-Length: 230494
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/9j/Qf.jpg
200 OK 14 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/9j/Qf.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash a0ee6e3de20b6b8878c78b9bf15ebef2
f11491569b954133f5c9e00ff353b8f581347a7d
5ab0ced916149a37a6cd23a9decede7164f9c346a29e852e191b449b65f9d29a
GET /thumbs/AA/9j/Qf.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Wed, 06 Jul 2022 05:35:10 GMT
ETag: "3755-5e31c551dea47"
Accept-Ranges: bytes
Content-Length: 14165
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/FI/UR.jpg
200 OK 8.7 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/FI/UR.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash d8fa08c6afaa970155ef1d4bcd9ed41a
358f3f3e91889cb253148307d7c13a6dcfcccb14
33456096a0c62a4f95bb6be8ef6907bfddd8d98774811d64928cc9ca9d50b60c
GET /thumbs/AA/FI/UR.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:39 GMT
Server: Apache
Last-Modified: Thu, 28 Apr 2022 03:20:41 GMT
ETag: "21f6-5ddae69285c95"
Accept-Ranges: bytes
Content-Length: 8694
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:39 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/3B/6G.jpg
200 OK 20 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/3B/6G.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash c3293d99b6211d7e6160a65268a61add
9f1004e15828a68dbc7c4f1381494984fb6a6c9f
649192cd79ece7f2dcca63104957543c59c79adb7213d2691285a6a895bff223
GET /thumbs/AA/3B/6G.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 03:04:19 GMT
ETag: "4e06-5d8cef46f7d17"
Accept-Ranges: bytes
Content-Length: 19974
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/VL/SJ.jpg
200 OK 15 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/VL/SJ.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x361, components 3\012- data
Hash 794c9863fac793945b180d4750064c08
abf8cc3d1d05a957a1aca8717c861e90726b0f24
8f2ce632e8d4d6d4b5af761df7b19b67a28b2c9a873b6e6ce124f0f5d667a2f1
GET /thumbs/AA/VL/SJ.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Fri, 25 Feb 2022 14:01:37 GMT
ETag: "3b18-5d8d82326f470"
Accept-Ranges: bytes
Content-Length: 15128
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/QJ/gu.jpg
200 OK 55 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/QJ/gu.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash ec4ce14488a1feb90de2c0369992463f
2703ef12f233059e9e679272752b51d9004a5d4e
6af609d302b663692bc27d30423b5ca700b2619cadaac8c70b3a44fa06cc18b7
GET /thumbs/AA/QJ/gu.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Sat, 26 Feb 2022 03:24:50 GMT
ETag: "d559-5d8e35bac78b2"
Accept-Ranges: bytes
Content-Length: 54617
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/CE/Lz.jpg
200 OK 18 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/CE/Lz.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash ac6b37c1cd3a0097663d853d7563c0c8
e3d6690ab57bcb30ee9d7159805ca2f098577d6d
8415584ea6108887e824f8368e393510c8578f78d8fd56c98dc62ee9ef0a47a3
GET /thumbs/AA/CE/Lz.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Tue, 01 Mar 2022 09:50:45 GMT
ETag: "459e-5d9251958c4de"
Accept-Ranges: bytes
Content-Length: 17822
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/thumbs/AA/Ev/pk.jpg
200 OK 17 kB URL HTTP/1.1 www.sexplayed.com/thumbs/AA/Ev/pk.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash 609c02abd6ef06046a43ea2423b342ee
a9c07ca0ac948d6441bdaad466173062250c9a50
235de117c6c3e41933e463e70e98b9593b428d3c8545b244682b920ba15ce750
GET /thumbs/AA/Ev/pk.jpg HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Last-Modified: Thu, 03 Mar 2022 07:50:11 GMT
ETag: "42e3-5d94ba5d19e6f"
Accept-Ranges: bytes
Content-Length: 17123
Cache-Control: max-age=31536000
Expires: Sat, 09 Sep 2023 12:43:40 GMT
Vary: User-Agent
Keep-Alive: timeout=1, max=87
Connection: Keep-Alive
Content-Type: image/jpeg
www.sexplayed.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/1.1 www.sexplayed.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1; 0bb94c16=MXwwfDE2NjI3Mjc0MTh8MTY2MjcyNzQxOHwwO25vdHJhZGVzO2RibWozZ2FrMi1oYS5jb20%3D; 0bb94c16f=hXi0yY%7C1662727418; ppu_main_ce915066ffeac4bae3c644f0c0520fda=1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Location: /
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=1, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
www.sexplayed.com/
200 OK 8.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (439), with CRLF, LF line terminators
Hash 2440cd5edd11023d03a84a6cc1122c5c
5a73011cce1082dd134fd1063497b963bcfff55b
1ae0058f770dc4867bc7873c35b02d4301d7524446dcbadffe7b6cd524f93fe6
GET / HTTP/1.1
Host: www.sexplayed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.sexplayed.com/?ref=DBMJ3GAK2-HA.com
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=97047ece-c1f7-4be0-bf62-444994d95a8a%3A3%3A1; 0bb94c16=MXwwfDE2NjI3Mjc0MTh8MTY2MjcyNzQxOHwwO25vdHJhZGVzO2RibWozZ2FrMi1oYS5jb20%3D; 0bb94c16f=hXi0yY%7C1662727418; ppu_main_ce915066ffeac4bae3c644f0c0520fda=1
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 12:43:40 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8455
Keep-Alive: timeout=1, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
unseenreport.com/pxf.gif?uuid=97047ece-c1f7-4be0-bf62-444994d95a8a&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=ce915066ffeac4bae3c644f0c0520fda&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=97047ece-c1f7-4be0-bf62-444994d95a8a&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=ce915066ffeac4bae3c644f0c0520fda&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=97047ece-c1f7-4be0-bf62-444994d95a8a&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=ce915066ffeac4bae3c644f0c0520fda&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.sexplayed.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 09 Sep 2022 12:43:40 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 485ac584b9bc3924f0931eab6f50c9fd
Strict-Transport-Security: max-age=0; includeSubdomains
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf8614d876156699bdf11897c45e9ae8
ff2c27cf141c68259e6e85020b01efc5d41730a6
c89d6a2fdc789fc725e8bac99774f9f9f0b22000f57d32f5611525bca30002d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F734c0779-c033-4fb9-aef7-ec81416744c3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6365
x-amzn-requestid: dc414175-8174-4fa8-812b-1f72de48d5f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKRBYEt8oAMFmyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6208-1c2417b120725a9a0642620a;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:43:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: lvOUBfECM7qlwpj9suDt1A4TRrvdYTsqOQGCNkf3pYYrIHHqZczRcg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:12:19 GMT
age: 52284
etag: "ff2c27cf141c68259e6e85020b01efc5d41730a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
74.206.189.118
104.21.235.2
23.36.76.226
93.184.220.29
52.59.153.168