GET fonts.googleapis.com/css?family=Montserrat&subset=latin-ext
142.250.178.74200 OK 1.9 kB URL GET fonts.googleapis.com/css?family=Montserrat&subset=latin-ext
IP 142.250.178.74:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA
ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File type ASCII text, with very long lines (1906), with no line terminators
Hash f5ec513c09f9bc9d33600746b92585a3
6f145e5d20f222485c705d213a761db377a5ba9e
6c70f2579aaa62453e1492c49507fb9f4dd71b09b27af99e270bb1cba14e1c4f
GET /css?family=Montserrat&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saucybelleak.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 29 Mar 2025 17:45:12 GMT
date: Sat, 29 Mar 2025 17:45:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
142.250.74.35200 OK 19 kB URL GET fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP 142.250.74.35:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 18792, version 1.0
Hash 74795056a2358804684c7e9d0479f484
7030f4f33183b8de843e82eedb9cb6a6cdd107c3
1c9c85d0b73b7321eb8ed22e0b6bcd577478dd5f99d1379a5d4cea10884033ac
GET /s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://saucybelleak.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18792
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:23:29 GMT
expires: Fri, 27 Mar 2026 09:23:29 GMT
cache-control: public, max-age=31536000
age: 202903
last-modified: Wed, 06 Nov 2024 17:30:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET sektfeb.top/click?o=2&a=168
172.67.138.126302 Found 14 kB URL User Request GET sektfeb.top/click?o=2&a=168
IP 172.67.138.126:443
Certificate IssuerGoogle Trust Services
Subjectsektfeb.top
Fingerprint56:35:98:D9:B8:5A:C1:DC:F5:80:5D:68:7D:90:88:6D:47:E4:7A:02
ValidityTue, 11 Feb 2025 03:48:55 GMT - Mon, 12 May 2025 04:47:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /click?o=2&a=168 HTTP/1.1
Host: sektfeb.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 29 Mar 2025 17:45:11 GMT
content-type: text/html; charset=UTF-8
location: https://mb2j264.b2base252.top/click?key=23815cdd29d290f7b533&externalid=a82309449ae2ac72c3f28df5f05d15ba&a=168&landing=&sub_id1=&scGeo=NO
server: cloudflare
x-debug-tag: 67e831a6d45d1
x-debug-duration: 262
x-debug-link: /v-debugger/default/view?tag=67e831a6d45d1
cf-cache-status: DYNAMIC
set-cookie: U-c81e728d9d4c2f636f067f89cc14862c=unique; SameSite=None; Secure; Path=/; Max-Age=2592000; Expires=Mon, 28 Apr 2025 17:45:10 GMT
o_c81e728d9d4c2f636f067f89cc14862c=07961282-0bf9-48ca-92a5-00fc42a63442; SameSite=None; Secure; Path=/; Max-Age=604800; Expires=Sat, 05 Apr 2025 17:45:11 GMT
cf-ray: 92812df2597bbe56-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mb2j264.b2base252.top/click?key=23815cdd29d290f7b533&externalid=a82309449ae2ac72c3f28df5f05d15ba&a=168&landing=&sub_id1=&scGeo=NO
172.67.196.106307 Temporary Redirect 14 kB URL User Request GET mb2j264.b2base252.top/click?key=23815cdd29d290f7b533&externalid=a82309449ae2ac72c3f28df5f05d15ba&a=168&landing=&sub_id1=&scGeo=NO
IP 172.67.196.106:443
Certificate IssuerGoogle Trust Services
Subjectb2base252.top
Fingerprint7E:7C:79:C6:96:42:0B:F6:75:40:B2:0C:DD:81:8A:27:50:FA:C4:95
ValidityWed, 26 Mar 2025 11:15:51 GMT - Tue, 24 Jun 2025 12:14:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /click?key=23815cdd29d290f7b533&externalid=a82309449ae2ac72c3f28df5f05d15ba&a=168&landing=&sub_id1=&scGeo=NO HTTP/1.1
Host: mb2j264.b2base252.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sat, 29 Mar 2025 17:45:11 GMT
content-length: 0
location: https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
server: cloudflare
x-request-id: 1b563fd6-f641-4742-aaa4-543dfa7d3383
cf-cache-status: DYNAMIC
set-cookie: uclick=n+/ZnA0KPd81hLWgOGCYto+GLVW/c3xFPxa5hgoDQcS+xR8JxzYsBARPwOe8G1c+Y/uc; SameSite=Lax; Max-Age=31536000
uclick=n+/ZnA0KPd81hLWgOGCYto+GLVW/c3xFPxa5hgoDQcS+xR8JxzYtBARPwOe8G1c+rWiOaNuVokg2h4u3; SameSite=Lax; Max-Age=31536000
uclick=n+/ZnA0KPd81hLWgOGCYto+GLVW/c3xFPxa5hgoDQcS+xR8JxzYtBARPwOe8G1c+rWiOaNuVokg2h4vmA99vujcx1GLs; SameSite=Lax; Max-Age=31536000
bcid=cvk339o86g1c73bl2fhg; SameSite=Lax; Max-Age=31536000
cf-ray: 92812df53ed1be42-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.3.1.min.js
151.101.194.137200 OK 87 kB URL GET code.jquery.com/jquery-3.3.1.min.js
IP 151.101.194.137:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saucybelleak.com/
Origin: https://saucybelleak.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1538f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 29 Mar 2025 17:45:12 GMT
age: 2166794
x-served-by: cache-lga13622-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 65, 88226
x-timer: S1743270312.168509,VS0,VE0
vary: Accept-Encoding
content-length: 30288
X-Firefox-Spdy: h2
GET saucybelleak.com/p.js?a=2063076&cr=20952&lid=17993&mh=cHdVTHNWTHBDd3JraFJ3UUZ6WmFvWmVwTXBwWlhpd0tHY3ptLTM0NTI5&mmid=2106&p=0&rf=&rn=zc4YnJiUys4WmdeVBM8&s1=168&s2=cvk339o86g1c73bl2fhg&t=168
188.114.96.1200 OK 434 B URL GET saucybelleak.com/p.js?a=2063076&cr=20952&lid=17993&mh=cHdVTHNWTHBDd3JraFJ3UUZ6WmFvWmVwTXBwWlhpd0tHY3ptLTM0NTI5&mmid=2106&p=0&rf=&rn=zc4YnJiUys4WmdeVBM8&s1=168&s2=cvk339o86g1c73bl2fhg&t=168
IP 188.114.96.1:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerGoogle Trust Services
Subjectsaucybelleak.com
FingerprintEC:49:F8:13:98:42:99:19:4C:47:86:F9:1A:5D:6E:74:18:C5:BB:98
ValidityTue, 11 Feb 2025 16:00:16 GMT - Mon, 12 May 2025 16:58:30 GMT
File type JavaScript source, ASCII text, with very long lines (446), with no line terminators
Hash fa58e3d55707cb8619e651a21e59b807
6b428526b1b246ab679a34cb9c8577ae3fdd960e
04eee3206ca5d285d774569505be87b454dd207b8337c6d80e7c4f2d660c1dec
GET /p.js?a=2063076&cr=20952&lid=17993&mh=cHdVTHNWTHBDd3JraFJ3UUZ6WmFvWmVwTXBwWlhpd0tHY3ptLTM0NTI5&mmid=2106&p=0&rf=&rn=zc4YnJiUys4WmdeVBM8&s1=168&s2=cvk339o86g1c73bl2fhg&t=168 HTTP/1.1
Host: saucybelleak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTEzMDUxbQAAAApSSkxFZ05Ob0FLbQAAAANoaWRtAAAAJHB3VUxzVkxwQ3dya2hSd1FGelphb1plcE1wcFpYaXdLR2N6bW0AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAAAMxNjhtAAAABXN1Yl8ybQAAABRjdmszMzlvODZnMWM3M2JsMmZoZ20AAAAHdHJhY2tlcm0AAAADMTY4bQAAAAN1bnFtAAAADE5BaFltTnFxckJGVg.aCgXNmtYG04R04RhtJ29xbgkm691yde3uq05Wzu7XbU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 29 Mar 2025 17:45:12 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
cf-cache-status: BYPASS
set-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTEzMDUxbQAAAApSSkxFZ05Ob0FLbQAAAANoaWRtAAAAJHB3VUxzVkxwQ3dya2hSd1FGelphb1plcE1wcFpYaXdLR2N6bW0AAAACaGxhAW0AAAAFc3ViXzFtAAAAAzE2OG0AAAAFc3ViXzJtAAAAFGN2azMzOW84NmcxYzczYmwyZmhnbQAAAAd0cmFja2VybQAAAAMxNjhtAAAAA3VucW0AAAAMTkFoWW1OcXFyQkZW.T9vzJ07e0j_AmRvVSIld8iP-bI_hjg5-nsF1vMWVed0; path=/; expires=Sun, 29 Mar 2026 17:45:12 GMT; max-age=31536000
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f9PhJZ%2BxBPxofWUMkaT62VX%2B8hoc509JXwPpfctMkW5eidTbwLp4aIxo7heZWf%2B7JLFRqa5Pso5FcyLdm1PvA5p4WPKsPJ8H4C13d30cD%2B8xa4q08dMuw%2BhDTT1TVOQYe4pE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92812dfacd5c92d3-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25589&min_rtt=23071&rtt_var=10450&sent=11&recv=6&lost=0&retrans=0&sent_bytes=4058&recv_bytes=1515&delivery_rate=25746&cwnd=12000&unsent_bytes=0&cid=a83866db52a16d43&ts=637&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdn.jsdelivr.net/npm/lazyload@2.0.0-rc.2/lazyload.js
104.18.187.31200 OK 5.7 kB URL GET cdn.jsdelivr.net/npm/lazyload@2.0.0-rc.2/lazyload.js
IP 104.18.187.31:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5890), with no line terminators
Hash b1992e390a9c0db68df8c9c021bb1108
e8aaa15df9670a3242251d565c5a6bf9650af735
fe0670010eea3eb8dfb0e6d994e0eed43a7e3256fc753a41b6d81ea10b00f6e0
GET /npm/lazyload@2.0.0-rc.2/lazyload.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saucybelleak.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 29 Mar 2025 17:45:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 1734
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.0.0-rc.2
x-jsd-version-type: version
etag: W/"162a-+bHVRc9Mhd3adT/5YJ7eVp2Ssx8"
content-encoding: br
x-served-by: cache-fra-etou8220104-FRA, cache-lga21963-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1423162
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mhlwe40BW7aZeYyPmXnvuU3bNs0S8RGf0JPKH%2FqdSzFSyfKavG%2Bw1B3Yr2nVsayEr%2FFT2Tq03dbhTpuqt4zDBp%2BLfZgCn3Mf7jzlQ%2FSr%2FxKh3DRahXav%2B%2Ba0tWv%2BZ5KBMek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92812dfacaf4b51b-OSL
X-Firefox-Spdy: h2
GET adultgirll.com/assets/63fc5f3a111ed2a2b2e6efc066153792/images/d1.jpg
45.76.38.70200 OK 29 kB URL GET adultgirll.com/assets/63fc5f3a111ed2a2b2e6efc066153792/images/d1.jpg
IP 45.76.38.70:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerLet's Encrypt
Subjectadultgirll.com
Fingerprint3D:FD:97:D6:1D:D6:73:8E:C4:3B:2C:40:CF:C1:A5:45:5B:A4:75:DC
ValiditySat, 22 Feb 2025 19:33:55 GMT - Fri, 23 May 2025 19:33:54 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=404, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=620], progressive, precision 8, 620x378, components 3
Hash 9b124e4f909b2e1f68ab98754027694b
042d5584651e092226a40c3d61cd74a57fb578da
41dd3e7d4d36de20e0ba45917caa4c8816b9d11d74275b7c282bd34ab23b7ab7
GET /assets/63fc5f3a111ed2a2b2e6efc066153792/images/d1.jpg HTTP/1.1
Host: adultgirll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saucybelleak.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 17:45:12 GMT
content-type: image/jpeg
content-length: 28583
last-modified: Tue, 20 Feb 2024 13:29:12 GMT
etag: "65d4a928-6fa7"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET saucybelleak.com/favicon.ico
188.114.96.1200 OK 1.2 kB URL GET saucybelleak.com/favicon.ico
IP 188.114.96.1:443
Requested by https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
Certificate IssuerGoogle Trust Services
Subjectsaucybelleak.com
FingerprintEC:49:F8:13:98:42:99:19:4C:47:86:F9:1A:5D:6E:74:18:C5:BB:98
ValidityTue, 11 Feb 2025 16:00:16 GMT - Mon, 12 May 2025 16:58:30 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 0bd144b01176b6562a34d83a40bce2c6
898cec59d7b5b22d2ad4dac94d11d0a7ce658ec8
2f46eaf4f9c0cb9050085134147da3a09ead46de5b60b71df8785b4602e13390
GET /favicon.ico HTTP/1.1
Host: saucybelleak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
DNT: 1
Connection: keep-alive
Cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTEzMDUxbQAAAApSSkxFZ05Ob0FLbQAAAANoaWRtAAAAJHB3VUxzVkxwQ3dya2hSd1FGelphb1plcE1wcFpYaXdLR2N6bW0AAAACaGxhAW0AAAAFc3ViXzFtAAAAAzE2OG0AAAAFc3ViXzJtAAAAFGN2azMzOW84NmcxYzczYmwyZmhnbQAAAAd0cmFja2VybQAAAAMxNjhtAAAAA3VucW0AAAAMTkFoWW1OcXFyQkZW.T9vzJ07e0j_AmRvVSIld8iP-bI_hjg5-nsF1vMWVed0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 29 Mar 2025 17:45:12 GMT
content-type: image/x-icon
cache-control: max-age=1800
cf-cache-status: HIT
age: 4943
last-modified: Sat, 29 Mar 2025 16:22:49 GMT
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KmTldiejr%2BmHEsz3Bqjqa2%2By3S9xP8T4%2BT0S40ig1nJZ4KapVL6EtBgxpAuawp%2BsQbOSSgkLCxypil9daefRZMYR2d17Ick4MxoNOyR4umUuObzJNIN%2FoiK8AdfMMvgh%2BADP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92812dfd681e92d3-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25297&min_rtt=23071&rtt_var=8421&sent=14&recv=8&lost=0&retrans=0&sent_bytes=5461&recv_bytes=2156&delivery_rate=2303&cwnd=12000&unsent_bytes=0&cid=a83866db52a16d43&ts=798&x=1", cfExtPri, cfHdrFlush;dur=0
188.114.96.1301 Moved Permanently 14 kB IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services
Subjectfindmer.online
Fingerprint96:61:82:14:F4:74:5A:72:54:E5:38:EE:D0:66:A0:AD:10:71:0E:81
ValidityWed, 19 Feb 2025 04:59:18 GMT - Tue, 20 May 2025 05:57:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: findmer.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 29 Mar 2025 17:45:10 GMT
location: https://sektfeb.top/click?o=2&a=168
server: cloudflare
cf-ray: 92812df1a8860983-AMS
X-Firefox-Spdy: h2
GET saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
188.114.96.1200 OK 14 kB URL User Request GET saucybelleak.com/?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services
Subjectsaucybelleak.com
FingerprintEC:49:F8:13:98:42:99:19:4C:47:86:F9:1A:5D:6E:74:18:C5:BB:98
ValidityTue, 11 Feb 2025 16:00:16 GMT - Mon, 12 May 2025 16:58:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?utm_source=2qEh6yosYLyfN&s2=cvk339o86g1c73bl2fhg&utm_term=168&utm_campaign=168 HTTP/1.1
Host: saucybelleak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 29 Mar 2025 17:45:11 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=0, private, must-revalidate
referrer-policy: strict-origin-when-cross-origin
set-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTEzMDUxbQAAAApSSkxFZ05Ob0FLbQAAAANoaWRtAAAAJHB3VUxzVkxwQ3dya2hSd1FGelphb1plcE1wcFpYaXdLR2N6bW0AAAACaGxkAANuaWxtAAAABXN1Yl8xbQAAAAMxNjhtAAAABXN1Yl8ybQAAABRjdmszMzlvODZnMWM3M2JsMmZoZ20AAAAHdHJhY2tlcm0AAAADMTY4bQAAAAN1bnFtAAAADE5BaFltTnFxckJGVg.aCgXNmtYG04R04RhtJ29xbgkm691yde3uq05Wzu7XbU; path=/; expires=Sun, 29 Mar 2026 17:45:11 GMT; max-age=31536000
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cxLXdOtz7mLAwgPfLRYDXO1R%2B9TQV8i99EqTdyFFWrG5AqVj9SGXcDJ%2BzyC355gcvHmTnKa%2BS6gunwwqz6CIBiF4HBxMCHiyCq9qsSc83YpEkvs6oBrmFOY%2BnMj1mZlnds%2BT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92812df64a55abc2-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=27250&min_rtt=22000&rtt_var=13036&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3216&recv_bytes=1185&delivery_rate=196944&cwnd=254&unsent_bytes=0&cid=8734eb9742b0daab&ts=366&x=0"
X-Firefox-Spdy: h2