dm-design-mania.blogspot.com.br/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
235 B URL dm-design-mania.blogspot.com.br/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
IP
File type HTML document, ASCII text
Hash efd464836919bf3c8573237c5ebfac36
d090a036577fe7741f92efa46231b90c3615907a
e7842e89f81c668926790817003fc19d1e2a0f661dd108d9fea1d49ae13d9a33
GET /http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais' HTTP/1.1
Host: dm-design-mania.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://dm-design-mania.blogspot.com/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 10 May 2024 08:44:44 GMT
expires: Fri, 10 May 2024 08:44:44 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 235
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dm-design-mania.blogspot.com/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
14 kB URL dm-design-mania.blogspot.com/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (4429)
Hash 062eb9f11ecc54f60ac81cff926e4619
26d726d3ae8386986f7704dd58ccecaa0821a13a
038c150cd1558b0a4976c6619baa1ba46cb626df42e45a7ed201c6f3ff3fafa0
GET /http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais' HTTP/1.1
Host: dm-design-mania.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 May 2024 08:44:45 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 14223
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dm-design-mania.blogspot.com/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
13 kB URL dm-design-mania.blogspot.com/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (4422)
Hash 5bb67526f37767873543890548e22431
c4541355b845a2ec13b0c9df4e7a717bdbf2f789
a441950d32f15b12149d471bf16cb83524ca074dcc5d5ace1d19bd3ac05a9c11
GET /http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais' HTTP/1.1
Host: dm-design-mania.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 10 May 2024 08:44:46 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 12768
Server: GSE
dm-design-mania.blogspot.com/js/cookienotice.js
2.0 kB URL dm-design-mania.blogspot.com/js/cookienotice.js
IP
File type JavaScript source, ASCII text
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: dm-design-mania.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/http:/dm-design-mania.blogspot.com.br/search/label/Tutoriais'
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Fri, 10 May 2024 08:44:46 GMT
Expires: Fri, 17 May 2024 08:44:46 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 10 May 2024 07:51:06 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.blogger.com/static/v1/widgets/4290687098-widgets.js
51 kB URL www.blogger.com/static/v1/widgets/4290687098-widgets.js
IP
File type JavaScript source, ASCII text, with very long lines (1941)
Hash 30490c5bf1c9a62c3f7aaf45de530b69
89fdf91f40944a3babf7d9f485cbfbcc32454d50
b7c68fe77654ca4d42928e0a0ea49c642de2887b1ef65e5123105f5359390d49
GET /static/v1/widgets/4290687098-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51402
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:08:26 GMT
expires: Fri, 09 May 2025 02:08:26 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 May 2024 07:54:36 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 110180
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js
32 kB URL ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js
IP
File type JavaScript source, ASCII text, with very long lines (32769)
Hash 219073097031d9c1a95a1291d66f3a10
2b7996b01d90b7f424f2a2e6063947461db4b2b2
232066e3f6f1351afdaee1acb70c409766641fd5669e0b55ce7c77fac0a857ef
GET /ajax/libs/jquery/1.6.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32222
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 16:38:33 GMT
expires: Fri, 09 May 2025 16:38:33 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 57973
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
21 kB URL apis.google.com/js/platform.js
IP
File type JavaScript source, ASCII text, with very long lines (2050)
Hash e66acfdb2f1dfcff8c6dba736dd4ab6d
36026360b6c8d750488ef2c739e04969f8c5bcd7
742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21303
date: Fri, 10 May 2024 08:44:46 GMT
expires: Fri, 10 May 2024 08:44:46 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d8cc7aca923e8ade"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
photoshopscreen.blogspot.com.br/feeds/comments/default?alt=json-in-script&callback=numberOfComments
3.2 kB URL photoshopscreen.blogspot.com.br/feeds/comments/default?alt=json-in-script&callback=numberOfComments
IP
File type HTML document, ASCII text, with very long lines (528)
Hash d309ac028b241c11d1dd799a331ec830
faafbfbc89d7c3026b88eb5b25ba83dbfd05348e
c6db30be58ac27a057058120e8434ef4353e80c86da3ac17ca429138e72a1681
GET /feeds/comments/default?alt=json-in-script&callback=numberOfComments HTTP/1.1
Host: photoshopscreen.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Date: Fri, 10 May 2024 08:44:46 GMT
Server: Blogger Render Server 1.0
Content-Length: 3189
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
photoshopscreen.blogspot.com.br/feeds/posts/default?alt=json-in-script&callback=showpostcount
3.2 kB URL photoshopscreen.blogspot.com.br/feeds/posts/default?alt=json-in-script&callback=showpostcount
IP
File type HTML document, ASCII text, with very long lines (528)
Hash d309ac028b241c11d1dd799a331ec830
faafbfbc89d7c3026b88eb5b25ba83dbfd05348e
c6db30be58ac27a057058120e8434ef4353e80c86da3ac17ca429138e72a1681
GET /feeds/posts/default?alt=json-in-script&callback=showpostcount HTTP/1.1
Host: photoshopscreen.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Date: Fri, 10 May 2024 08:44:46 GMT
Server: Blogger Render Server 1.0
Content-Length: 3189
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
baixerenders.blogspot.com.br/feeds/comments/default?alt=json-in-script&callback=numberOfComments
3.2 kB URL baixerenders.blogspot.com.br/feeds/comments/default?alt=json-in-script&callback=numberOfComments
IP
File type HTML document, ASCII text, with very long lines (528)
Hash ff28ea011534b6f46859a0bf61444e55
fdbb7d9c5215906fe2b1cb24c0f429de395df329
a1ceecd08e5d4877425a5ff98c919bf16b29ee902c7a1bb961bc7e14cedacd80
GET /feeds/comments/default?alt=json-in-script&callback=numberOfComments HTTP/1.1
Host: baixerenders.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Date: Fri, 10 May 2024 08:44:46 GMT
Server: Blogger Render Server 1.0
Content-Length: 3186
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
imemovaz.googlecode.com/files/tripleflap.js
1.6 kB URL imemovaz.googlecode.com/files/tripleflap.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 55176fd2f511abcf194e1c0b34f77f58
a23b61ceeafdfa15ed54c38f77e4259bca4daa3a
856ff3b8342a9607227a279a967045620c7b61dce0c46c8b5334322290d96bb3
GET /files/tripleflap.js HTTP/1.1
Host: imemovaz.googlecode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1580
Date: Fri, 10 May 2024 08:44:46 GMT
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
6.6 kB URL www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 18:17:50 GMT
expires: Fri, 09 May 2025 18:17:50 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 09 May 2024 14:53:06 GMT
content-type: text/css
vary: Accept-Encoding
age: 52016
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
61 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
IP
File type JavaScript source, ASCII text, with very long lines (2124)
Hash 575e42a695a782c950bd57d1cd413c7e
8549b65a7e35bd251ac277315a063c07ea288a2e
c3f62bbfcc26082d78406d7f36866969da709db71ef269081374aee5a5b2cf21
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61025
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 00:37:58 GMT
expires: Sat, 10 May 2025 00:37:58 GMT
cache-control: public, max-age=31536000
age: 29208
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
21 kB URL apis.google.com/js/platform.js
IP
File type JavaScript source, ASCII text, with very long lines (2050)
Hash e66acfdb2f1dfcff8c6dba736dd4ab6d
36026360b6c8d750488ef2c739e04969f8c5bcd7
742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21303
date: Fri, 10 May 2024 08:44:46 GMT
expires: Fri, 10 May 2024 08:44:46 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d8cc7aca923e8ade"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
67 B URL pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 09 May 2024 14:18:06 GMT
Expires: Thu, 23 May 2024 14:18:06 GMT
Cache-Control: public, max-age=1209600
Age: 66400
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
2.bp.blogspot.com/-kcWNNMki2OM/UDgjuSGqZkI/AAAAAAAASSg/AyH5TxzBl_M/s1600/Banner+01.png
915 B URL 2.bp.blogspot.com/-kcWNNMki2OM/UDgjuSGqZkI/AAAAAAAASSg/AyH5TxzBl_M/s1600/Banner+01.png
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced
Hash 4a4d7295fa71a6ee7e6ca30510250de2
177043c0d76e8f3eaeb979bc371261b9fbfa7004
a3bf8c4539fd46465ea5ca107488cf4c7453d86b7e63d13d560fe3f7e8fd6b40
GET /-kcWNNMki2OM/UDgjuSGqZkI/AAAAAAAASSg/AyH5TxzBl_M/s1600/Banner+01.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:46 GMT
Server: fife
Content-Length: 915
X-XSS-Protection: 0
3.bp.blogspot.com/-7bSSpxI79pY/UHd61W3EL9I/AAAAAAAAHJo/tm_FIr4xqro/w72-h72-p-k-no-nu/Ryback+Design+Mania.png
9.3 kB URL 3.bp.blogspot.com/-7bSSpxI79pY/UHd61W3EL9I/AAAAAAAAHJo/tm_FIr4xqro/w72-h72-p-k-no-nu/Ryback+Design+Mania.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Hash 1eab88357753bf4bc562c000abd3d67b
ad3d75b4c18f71b7eb203dc7dcc1c54a69cad15d
7f0fb4e9ff4ba24767ccc3540be48187641d05d5f39bc04e00162933cb8e2d47
GET /-7bSSpxI79pY/UHd61W3EL9I/AAAAAAAAHJo/tm_FIr4xqro/w72-h72-p-k-no-nu/Ryback+Design+Mania.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v1c9a"
Expires: Sat, 11 May 2024 08:44:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Ryback Design Mania.png"
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:47 GMT
Server: fife
Content-Length: 9271
X-XSS-Protection: 0
1.bp.blogspot.com/-KyLZoznKKUk/UEAgkxgMsrI/AAAAAAAAFv8/Qf7NEnGnn4o/w72-h72-p-k-no-nu/Render+-+Moto+Design+Mania.png
11 kB URL 1.bp.blogspot.com/-KyLZoznKKUk/UEAgkxgMsrI/AAAAAAAAFv8/Qf7NEnGnn4o/w72-h72-p-k-no-nu/Render+-+Moto+Design+Mania.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Hash a4c64b989b9309f9b088d83e392d7f37
a62d04338a7a77b6b58fa9144da4098fefacde5c
dd57ea20e5ca0543cbeba25e941aa6bab5c455b4f9942e6a425787ca8e27dedb
GET /-KyLZoznKKUk/UEAgkxgMsrI/AAAAAAAAFv8/Qf7NEnGnn4o/w72-h72-p-k-no-nu/Render+-+Moto+Design+Mania.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v16ff"
Expires: Sat, 11 May 2024 08:44:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Render - Moto Design Mania.png"
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:47 GMT
Server: fife
Content-Length: 10876
X-XSS-Protection: 0
1.bp.blogspot.com/-b3JmzQCF3C4/UCviL1WK2NI/AAAAAAAADJ4/_rN5xCDBqS8/w72-h72-p-k-no-nu/Render+-+Efeito+Verde.png
2.2 kB URL 1.bp.blogspot.com/-b3JmzQCF3C4/UCviL1WK2NI/AAAAAAAADJ4/_rN5xCDBqS8/w72-h72-p-k-no-nu/Render+-+Efeito+Verde.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Hash 57c4ae1b431b0231ba53a466040ef8af
9e5187f76a8ae15e408ffedc118ab579f256c28c
6aa7ef1ce1548a0df3ce0913588fce2a72113181b9963145411cf686dafa4ca0
GET /-b3JmzQCF3C4/UCviL1WK2NI/AAAAAAAADJ4/_rN5xCDBqS8/w72-h72-p-k-no-nu/Render+-+Efeito+Verde.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "vc9e"
Expires: Sat, 11 May 2024 08:44:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Render - Efeito Verde.png"
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:47 GMT
Server: fife
Content-Length: 2194
X-XSS-Protection: 0
1.bp.blogspot.com/-s3yTz5ectio/UEAf6MIMDVI/AAAAAAAAFvs/oi5_QxDia7E/w72-h72-p-k-no-nu/Render+-+Honda+CBR+Design+Mania.png
11 kB URL 1.bp.blogspot.com/-s3yTz5ectio/UEAf6MIMDVI/AAAAAAAAFvs/oi5_QxDia7E/w72-h72-p-k-no-nu/Render+-+Honda+CBR+Design+Mania.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Hash 11eb2351838a828d7ca8f185b47bcb2d
b919f353b9c78e2d202c3c95ec9e1ac5da46694c
8a82b805c005296f214b0d98501e9a86f03fce8274b08d1410dc112ad60a7b9b
GET /-s3yTz5ectio/UEAf6MIMDVI/AAAAAAAAFvs/oi5_QxDia7E/w72-h72-p-k-no-nu/Render+-+Honda+CBR+Design+Mania.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v16fb"
Expires: Sat, 11 May 2024 08:44:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Render - Honda CBR Design Mania.png"
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:47 GMT
Server: fife
Content-Length: 10719
X-XSS-Protection: 0
4.bp.blogspot.com/-tJWGxitgjs4/UEDbB5IK8lI/AAAAAAAAF4M/mw_F7yI3YPY/w72-h72-p-k-no-nu/Render+-+Render+Futebol+by+Design+Mania.png
12 kB URL 4.bp.blogspot.com/-tJWGxitgjs4/UEDbB5IK8lI/AAAAAAAAF4M/mw_F7yI3YPY/w72-h72-p-k-no-nu/Render+-+Render+Futebol+by+Design+Mania.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Hash 581682d329642f2ce8ad604ccd5df5b5
3791f0130a7e8f9a84752704d49b0bf365da916b
5a87685da03b4ccb511311dec4b483c95953be2ef188a79d67e8d7baebe5e854
GET /-tJWGxitgjs4/UEDbB5IK8lI/AAAAAAAAF4M/mw_F7yI3YPY/w72-h72-p-k-no-nu/Render+-+Render+Futebol+by+Design+Mania.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v1783"
Expires: Sat, 11 May 2024 08:44:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Render - Render Futebol by Design Mania.png"
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:47 GMT
Server: fife
Content-Length: 11516
X-XSS-Protection: 0
baixerenders.blogspot.com.br/feeds/posts/default?alt=json-in-script&callback=showpostcount
3.2 kB URL baixerenders.blogspot.com.br/feeds/posts/default?alt=json-in-script&callback=showpostcount
IP
File type HTML document, ASCII text, with very long lines (528)
Hash ff28ea011534b6f46859a0bf61444e55
fdbb7d9c5215906fe2b1cb24c0f429de395df329
a1ceecd08e5d4877425a5ff98c919bf16b29ee902c7a1bb961bc7e14cedacd80
GET /feeds/posts/default?alt=json-in-script&callback=showpostcount HTTP/1.1
Host: baixerenders.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Date: Fri, 10 May 2024 08:44:47 GMT
Server: Blogger Render Server 1.0
Content-Length: 3186
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
usuarionovo.com/
224 B IP
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 60ad0e3f1d067dcad1bf3e8daf818ef7
29c096461a8fead70e1605f3f46d00d838795360
18a6e6585d6e06af7934ab6d08ef02be450ebb342efb01bdaccdcb5d4eb9f646
GET / HTTP/1.1
Host: usuarionovo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: http://www.usuarionovo.com/
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 224
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dm-design-mania.blogspot.com.br/feeds/posts/default?alt=json-in-script&callback=showpostcount
9.3 kB URL dm-design-mania.blogspot.com.br/feeds/posts/default?alt=json-in-script&callback=showpostcount
IP
File type Unicode text, UTF-8 text, with very long lines (65497)
Hash 930d167a13b8809068be97d7f7c33e7d
f03f792cb951a14fa93321ca20cb0854e7bbf187
b35efbb2fa1f862a8ca9bca6679c65b83c52597376738901394fc18907df0841
GET /feeds/posts/default?alt=json-in-script&callback=showpostcount HTTP/1.1
Host: dm-design-mania.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"bede2de7a3deb565e76a04a0ae74c543c79c4ab51a579f98f46d90fa6f673fd5"
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Fri, 10 May 2024 08:44:48 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Wed, 13 Mar 2024 16:34:59 GMT
Content-Encoding: gzip
Content-Length: 9317
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-nm9rIjg2u-I/UAV0G9H5CNI/AAAAAAAAPyw/GgQSVeppHvc/s1600/www.reisvip.blogspot.com.png
915 B URL 2.bp.blogspot.com/-nm9rIjg2u-I/UAV0G9H5CNI/AAAAAAAAPyw/GgQSVeppHvc/s1600/www.reisvip.blogspot.com.png
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced
Hash 4a4d7295fa71a6ee7e6ca30510250de2
177043c0d76e8f3eaeb979bc371261b9fbfa7004
a3bf8c4539fd46465ea5ca107488cf4c7453d86b7e63d13d560fe3f7e8fd6b40
GET /-nm9rIjg2u-I/UAV0G9H5CNI/AAAAAAAAPyw/GgQSVeppHvc/s1600/www.reisvip.blogspot.com.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Fri, 10 May 2024 08:44:47 GMT
Server: fife
Content-Length: 915
X-XSS-Protection: 0
www.blogger.com/followers.g?blogID=139818256738633128&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://dm-design-mania.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
541 B URL www.blogger.com/followers.g?blogID=139818256738633128&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://dm-design-mania.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
IP
File type HTML document, ASCII text, with very long lines (1050)
Hash 35ebc20ca818bc2f8239c3a1a52b81dd
b32775373dbd306b277de24e7c6a1919a3189fd5
ce56d6f616eca1a2ef4e31109fbc69e59ca5aa7726ce0e97f581452174505ba5
GET /followers.g?blogID=139818256738633128&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://dm-design-mania.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 10 May 2024 08:44:47 GMT
expires: Fri, 10 May 2024 08:44:47 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 541
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.usuarionovo.com/
195 B IP
File type HTML document, ASCII text
Hash e336f230098823117cde91f3e6d9f130
98654d1c993dbf4be5f90b96eaf99e749e0f9ce9
e6ed94497a6da8c302f3176f2dde6811e178f02608d16f2d259b4ddc7f88d1e2
GET / HTTP/1.1
Host: www.usuarionovo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://www.usuarionovo.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 10 May 2024 08:44:47 GMT
Expires: Fri, 10 May 2024 08:44:47 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 195
Server: GSE
dm-design-mania.blogspot.com.br/feeds/comments/default?alt=json-in-script&callback=numberOfComments
5.3 kB URL dm-design-mania.blogspot.com.br/feeds/comments/default?alt=json-in-script&callback=numberOfComments
IP
File type Unicode text, UTF-8 text, with very long lines (46829)
Hash ba38a7381d4e59bf8652e39c93dd8bb1
0cfab3edf7b16499fddaf1d7bb5b318f77f4556b
06a30927be1a46e176366014f8dd0f916a9467ab836f156319d68d225903525b
GET /feeds/comments/default?alt=json-in-script&callback=numberOfComments HTTP/1.1
Host: dm-design-mania.blogspot.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"00bc14bd44bd787bc3b7108762a08cb3b5fc06c7e1072ef45ec0814875f9cd19"
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Fri, 10 May 2024 08:44:48 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sun, 04 Jun 2017 02:33:22 GMT
Content-Encoding: gzip
Content-Length: 5325
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
471 B IP
Hash 9a42e37278e1480da7ec417eb8b7285e
2ebb273a9d30622c0371647e60d4323937a9d5bc
0c3686dcbc184d61e8fd14b50520a7d83880a655fa38a7f14443a275130a446e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 10 May 2024 08:44:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cur.cursors-4u.net/cursors/cur-2/cur116.cur
169 B URL cur.cursors-4u.net/cursors/cur-2/cur116.cur
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash bd6987d71fad7058a993a9028dc40454
3ed872fa3a00837bb008ad9d201850e2ea57a79f
f0e759f444eb3a324b621f0548919424455e81441d42ea6bc6bcd2b24fce1b92
GET /cursors/cur-2/cur116.cur HTTP/1.1
Host: cur.cursors-4u.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.16.1
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://cur.cursors-4u.net/cursors/cur-2/cur116.cur
img140.imageshack.us/img140/60/botoinicio.png
168 B URL img140.imageshack.us/img140/60/botoinicio.png
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img140/60/botoinicio.png HTTP/1.1
Host: img140.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img402.imageshack.us/img402/3871/menu04n.png
168 B URL img402.imageshack.us/img402/3871/menu04n.png
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img402/3871/menu04n.png HTTP/1.1
Host: img402.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&go=true
0 B URL accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&go=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D139818256738633128%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://dm-design-mania.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.JisoxTPHVRs.O/am%253DAAAC/d%253D1/rs%253DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dm-design-mania.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:FzdqlRBeHOSYXzbvb77q_i7YAGgc6A:nTGltcSElj-A_pDB; Expires=Sun, 10-May-2026 08:44:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 May 2024 08:44:47 GMT
location: https://www.blogger.com/followers.g?blogID=139818256738633128&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNGRkZGRkYyByMwMDAwMDA6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://dm-design-mania.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.JisoxTPHVRs.O/am%3DAAAC/d%3D1/rs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-wxoxx9L740B3i7E2sBVSPA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img402.imageshack.us/img402/8976/a0i33d.png
168 B URL img402.imageshack.us/img402/8976/a0i33d.png
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img402/8976/a0i33d.png HTTP/1.1
Host: img402.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img411.imageshack.us/img411/543/destaquem.png
168 B URL img411.imageshack.us/img411/543/destaquem.png
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img411/543/destaquem.png HTTP/1.1
Host: img411.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img580.imageshack.us/img580/9751/menu03u.png
168 B URL img580.imageshack.us/img580/9751/menu03u.png
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img580/9751/menu03u.png HTTP/1.1
Host: img580.imageshack.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
www.blogger.com/dyn-css/authorization.css?targetBlogID=139818256738633128&zx=b8420b47-d814-4860-867a-742ac27c7c13
21 B URL www.blogger.com/dyn-css/authorization.css?targetBlogID=139818256738633128&zx=b8420b47-d814-4860-867a-742ac27c7c13
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=139818256738633128&zx=b8420b47-d814-4860-867a-742ac27c7c13 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 May 2024 08:44:47 GMT
last-modified: Fri, 10 May 2024 08:44:47 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.usuarionovo.com/
195 B IP
File type HTML document, ASCII text
Hash e336f230098823117cde91f3e6d9f130
98654d1c993dbf4be5f90b96eaf99e749e0f9ce9
e6ed94497a6da8c302f3176f2dde6811e178f02608d16f2d259b4ddc7f88d1e2
GET / HTTP/1.1
Host: www.usuarionovo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dm-design-mania.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://www.usuarionovo.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 10 May 2024 08:44:47 GMT
Expires: Fri, 10 May 2024 08:44:47 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 195
Server: GSE
o.pki.goog/wr2
471 B IP
Hash 4addd78a1ebbfbfd98f962bee30de93e
113326456169ddeb584e9bc96365d93c913e40be
5aabd865e6cf2769f401a6bb4b0059dcf57bc7b5e0cc8e015a2fe0e0d85d9717
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 10 May 2024 08:44:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
acessoriosparablogs.com.br/scripts/postagem.js
176 B URL acessoriosparablogs.com.br/scripts/postagem.js
IP
Hash c4d18f69455956fcc1ced938f6f3c52d
f9d76c345d5d7aab2bc02cfc5ed9edbab78eff50
f9dfe8d5677070fb2d11a5514f5b8ffc605f954210854fcb67fbe7c24af61d89
GET /scripts/postagem.js HTTP/1.1
Host: acessoriosparablogs.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Length: 176
acessoriosparablogs.com.br/scripts/comentario.js
176 B URL acessoriosparablogs.com.br/scripts/comentario.js
IP
Hash 42bf61639dda76c46bbe8e70e798d22e
9fef2ac32a7301f31136681d09ba2c15ddd65c8a
0b32543d20a2ed83eb9363b84f8211de442a6bfcee6153644f5cff625cc0a7b3
GET /scripts/comentario.js HTTP/1.1
Host: acessoriosparablogs.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Length: 176
cur.cursors-4u.net/cursors/cur-2/cur116.cur
4.3 kB URL cur.cursors-4u.net/cursors/cur-2/cur116.cur
IP
File type MS Windows cursor resource - 1 icon, 32x32, hotspot @4x3
Hash f20404aa540015ab306db5f8a6bfcd8f
576b02b8b346ca913024605ccf95266aff174455
f98fce389db32e6e29c6739dbfdf0296dbf664181f4156e35d36ad8876c89081
GET /cursors/cur-2/cur116.cur HTTP/1.1
Host: cur.cursors-4u.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dm-design-mania.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Fri, 10 May 2024 08:44:47 GMT
Content-Type: application/octet-stream
Content-Length: 4286
Last-Modified: Wed, 27 Feb 2013 17:42:42 GMT
Connection: keep-alive
ETag: "512e4592-10be"
Accept-Ranges: bytes
menel-cim.info/zclkvisitor/8e2647b2-0ea9-11ef-9dc0-12ee63580043/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
2.7 kB URL menel-cim.info/zclkvisitor/8e2647b2-0ea9-11ef-9dc0-12ee63580043/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
IP
File type HTML document, ASCII text, with very long lines (402)
Hash b6f7d67b6f108eec06a09ee805220b0e
c3e7a557688c70717ee62939006f0f8efa29cc3a
8de1ed8af96b3364be5c5817de8c998ad79a94dea118d45cf12f6cf09f1c1227
GET /zclkvisitor/8e2647b2-0ea9-11ef-9dc0-12ee63580043/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51 HTTP/1.1
Host: menel-cim.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dm-design-mania.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 08:44:48 GMT
content-type: text/html;charset=UTF-8
content-length: 2734
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
X-Firefox-Spdy: h2
menel-cim.info/zclkredirect?visitid=8e2647b2-0ea9-11ef-9dc0-12ee63580043&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
410 B URL menel-cim.info/zclkredirect?visitid=8e2647b2-0ea9-11ef-9dc0-12ee63580043&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
IP
File type HTML document, ASCII text
Hash d283e9d6dbdb3d972a945319ecef66b1
51ae2290cd2b743f0daf86d9d758ed3c57599a42
d18b2ce5a0e9b164faac595af3a651c5ca9e9c1ab4e06ec18052702f0d8d8ff0
GET /zclkredirect?visitid=8e2647b2-0ea9-11ef-9dc0-12ee63580043&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC HTTP/1.1
Host: menel-cim.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://menel-cim.info/zclkvisitor/8e2647b2-0ea9-11ef-9dc0-12ee63580043/b71e37a0-18cb-11ea-9f38-0a157bfa6bfc?campaignid=f841d760-8df2-11ed-b4b7-128084d1ce51
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 08:44:48 GMT
content-type: text/html;charset=UTF-8
content-length: 410
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
redirected: JS
X-Firefox-Spdy: h2
menel-cim.info/favicon.ico
653 B URL menel-cim.info/favicon.ico
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: menel-cim.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://menel-cim.info/zclkredirect?visitid=8e2647b2-0ea9-11ef-9dc0-12ee63580043&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=undefined&timezone=UTC%2B00%3A00&timezoneName=UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 10 May 2024 08:44:48 GMT
content-type: text/html;charset=utf-8
content-length: 653
content-language: en
X-Firefox-Spdy: h2
go.proffering.xyz/15GRtg?zoneid=griseous-trout&campaignid=2020224&target=victor-hub-5ef2amxd&cost=0.001200
302 Found 252 B URL User Request GET HTTP/1.1 go.proffering.xyz/15GRtg?zoneid=griseous-trout&campaignid=2020224&target=victor-hub-5ef2amxd&cost=0.001200
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectgo.proffering.xyz
Fingerprint72:AF:D3:5A:0F:1F:E6:66:87:42:85:43:67:9D:90:A2:B8:E5:26:B5
ValidityTue, 19 Mar 2024 07:19:09 GMT - Mon, 17 Jun 2024 07:19:08 GMT
File type HTML document, ASCII text, with no line terminators
Hash a845aec99d8f463a3edbfc9c0b757b84
ed9422daf36b4635e30c5c4da97abe092e9295ea
5fc05b7eb3004b1f6ddfac802d3ce1f92a4ddfc5e804f05ff57fb5426276f9e0
GET /15GRtg?zoneid=griseous-trout&campaignid=2020224&target=victor-hub-5ef2amxd&cost=0.001200 HTTP/1.1
Host: go.proffering.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://menel-cim.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.25.2
Date: Fri, 10 May 2024 08:44:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 252
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15GRtgo=20240510111715331196058; domain=.go.proffering.xyz; path=/;expires=Sat, 11 May 2024 08:44:48 GMT; httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15GRtg; domain=.go.proffering.xyz; path=/;expires=Sat, 11 May 2024 08:44:48 GMT; httpOnly=true;SameSite=None; Secure;
peerclickcid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510; domain=.go.proffering.xyz; path=/;expires=Sat, 11 May 2024 08:44:48 GMT; httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.go.proffering.xyz; path=/;expires=Sat, 11 May 2024 08:44:48 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Vary: Accept
girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
200 OK 6.6 kB URL User Request GET HTTP/1.1 girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
IP
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (533), with CRLF line terminators
Hash 2c65e68b39574d73c6fa6be2c39c9dd6
265f263477759059ea0e4b5897cc1b6f95a4ad96
a6ec621ca527ecb7cc2b1c97e6f74986e42b15cdd96e7788fc3141717bd6dbab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://menel-cim.info/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/html
Content-Length: 6642
Connection: keep-alive
set-cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv; path=/
cache-control: private, no-transform
girlsflirthere.life/media/dating/sinderv2/css/bootstrap.min.css
200 OK 110 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/bootstrap.min.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with very long lines (65367), with CRLF line terminators
Size 110 kB (109540 bytes)
Hash 03d06426a30f77095d7511e1ca74d225
d1a349294f6fe94ffb17a50097b37bd81e9ba56a
3f7e6f3cb6ba8e2effbdd260131ce0d2f332fb00ba3feca1a5bc9c3ee7f9e2a6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/bootstrap.min.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/css
Content-Length: 109540
Connection: keep-alive
ETag: "03d06426a30f77095d7511e1ca74d225"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE138FD8E46583
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/vegas.js
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/vegas.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text
Hash 85310f0fc6d54ab6c4aa2a2efa1e8514
dbd124ed40a22170b23709711d4572ff93c9fe6f
17d0a5e4e45104aec83860cf51f19bb232747a586a74fc841b9771a9aa9e42b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/vegas.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/javascript
Content-Length: 21792
Connection: keep-alive
ETag: "85310f0fc6d54ab6c4aa2a2efa1e8514"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13CA8E362A3B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223364#571659210/gid:0/gname:root/mode:33188/mtime:1659086506#637908000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.637908Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/css/style.css
200 OK 20 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/style.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with CRLF line terminators
Hash 7157a53ffb9afb73513901e9cb9b8b91
9e2049684cd1a83e699b11dfae35214acae2cc09
dac025579246852dcb348c61372b66879a24b28ff78c43220c4655a1c7a62671
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/style.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/css
Content-Length: 20007
Connection: keep-alive
ETag: "7157a53ffb9afb73513901e9cb9b8b91"
Last-Modified: Thu, 30 Nov 2023 15:24:54 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE1383B5432F16
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1701357885#739948373/gid:0/gname:root/mode:33279/mtime:1701357894#743961887/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-11-30T15:24:54.798Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/css/vegas.css
200 OK 20 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/vegas.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with CRLF line terminators
Hash 357c7befa8bdef911f02f48f49e10628
47972e3c4591058dce82dd3b08bed8e0b8ae5c8f
47f3bef4746b798892c7beff212618616b0950f33f416f03db243578f89135e3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/vegas.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/css
Content-Length: 19822
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "357c7befa8bdef911f02f48f49e10628"
Last-Modified: Mon, 20 Feb 2023 09:32:03 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CE13CA904AA320
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843335#347665198/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/flag-icon/css/flag-icon.css
200 OK 41 kB URL GET HTTP/1.1 girlsflirthere.life/util/flag-icon/css/flag-icon.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with CRLF line terminators
Hash 0a47b937981e7389e3ebe63e4a503066
01b395ad016a1d9d15016d765f7d2c51a6e2809b
d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/flag-icon/css/flag-icon.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/css
Content-Length: 40627
Connection: keep-alive
ETag: "0a47b937981e7389e3ebe63e4a503066"
Last-Modified: Wed, 20 Sep 2023 15:26:15 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE128B8FBB752A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#296037122/gid:0/gname:root/mode:33188/mtime:1655386274#684017000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:31:14.684017Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/cookie/js.cookie.js
200 OK 4.3 kB URL GET HTTP/1.1 girlsflirthere.life/cookie/js.cookie.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (1709), with CRLF line terminators
Hash a7e9883924072f15259de6888d5ef515
7f4f6e5938e68f55aef81e0cd0145f008cd28382
985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cookie/js.cookie.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: application/javascript
Content-Length: 4264
Connection: keep-alive
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Wed, 20 Sep 2023 15:19:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13198F442E36
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134513#248036972/gid:0/gname:root/mode:33188/mtime:1658397637#354375000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-21T10:00:37.354375Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/utils.js
200 OK 7.5 kB URL GET HTTP/1.1 girlsflirthere.life/util/utils.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators
Hash 01816d15ca03032751161a746e2fb7c3
dcc72ea5fa1356490ba473288159df9786b4a3c3
8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/utils.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/javascript
Content-Length: 7512
Connection: keep-alive
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE128B6F3E1337
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223579#380129542/gid:0/gname:root/mode:33188/mtime:1659085489#684136000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:04:49.684136Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/css/animate.css
200 OK 61 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/css/animate.css
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with very long lines (460), with CRLF line terminators
Hash 1cbfbb2c4ef85880799a74ab2f290f2a
9b6366d6c7ad05010f7070db70fba10754be6e9c
bfdad6766b12a3826bf32024f0fc13fffbcee84f102034b9270da7e538451031
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/css/animate.css HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: text/css
Content-Length: 61188
Connection: keep-alive
ETag: "1cbfbb2c4ef85880799a74ab2f290f2a"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE12D5AA0BB54F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#430591588/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.430591588Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/timer.js
200 OK 621 B URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/timer.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text
Hash 40fe503eb84093a37b15e39365ffc587
911128043c901314d283fe478477d26e2b3d821a
60b0f0de4c72c1ce9c05b36ba776f12538b1d9b80858b7099068a3e7e0415bc1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/timer.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: application/javascript
Content-Length: 621
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "40fe503eb84093a37b15e39365ffc587"
Last-Modified: Mon, 20 Feb 2023 09:32:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CE12D5B1F9470E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676801713#1186412/gid:0/gname:root/mode:33188/mtime:1659086506#89907000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.089907Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/trls.js
200 OK 17 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/trls.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
Hash eb1b6bc6776b3e1f520ad0d6c03a92ad
5adcdd94fd541e5ff347cb317418f77ebcd7a714
d87b9de60e8a4d614e0f4e34da021c835852d802f8b6de2aee6a3fa034e3b2b5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/trls.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: application/javascript
Content-Length: 17300
Connection: keep-alive
ETag: "eb1b6bc6776b3e1f520ad0d6c03a92ad"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13556D8E86AC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#328018459/gid:0/gname:root/mode:33188/mtime:1659086506#449908000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:46.449908Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/bb.js
200 OK 639 B URL GET HTTP/1.1 girlsflirthere.life/media/bb.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type ASCII text, with very long lines (639), with no line terminators
Hash 0d553e4bac91c74bfee2dbabba61e99e
5af71e2377c9c012a7826a695f2724901941b19b
1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/bb.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: application/javascript
Content-Length: 639
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Mon, 20 Feb 2023 09:29:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CE134DEE4924E9
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676832256#258761277/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/js/jquery.js
200 OK 93 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/js/jquery.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (32072)
Hash df6173bad69801a82b84701789ab16c5
94908755cae039762ad53086b858eac553e3f56e
cd8f413e39247d48ea354b8fb11c227e72f641403bd8d4dd81cd7473d60daafb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/js/jquery.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: application/javascript
Content-Length: 93064
Connection: keep-alive
ETag: "df6173bad69801a82b84701789ab16c5"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13CA8D4A4F01
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#328018459/gid:0/gname:root/mode:33188/mtime:1659086505#825907000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-29T09:21:45.825907Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/exit-new/exit1.js
200 OK 3.5 kB URL GET HTTP/1.1 girlsflirthere.life/media/exit-new/exit1.js
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators
Hash 625e5e2950612f771e246beb33c9ea61
e4fc251c6c000496c285f8dc3fa097040b031681
618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/exit-new/exit1.js HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: application/javascript
Content-Length: 3473
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Mon, 20 Feb 2023 09:32:43 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17CE131694EF4E39
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843279#623580037/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/logo-loveme_white1.svg
200 OK 4.6 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/logo-loveme_white1.svg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type SVG Scalable Vector Graphics image
Hash 896592d7f2fa3d761c0b767e9399b010
ed1c0502263392938f4cbdd72afb1a8704bf840e
3417f549b6a1018ee687dd84aec136cb7fba2bb5b4c83cf269f9f8e958cc48de
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/logo-loveme_white1.svg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: image/svg+xml
Content-Length: 4564
Connection: keep-alive
ETag: "896592d7f2fa3d761c0b767e9399b010"
Last-Modified: Wed, 20 Sep 2023 15:22:43 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE1383B55EB5D4
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#328018459/gid:0/gname:root/mode:33188/mtime:1655387527#38754000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:52:07.038754Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic
200 OK 23 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type gzip compressed data, max compression
Hash c554879d57470f81045b1a8c2aac187f
fbd09666e3ca5e13e1cd79dc4815fe27d9e3e6b4
26e23eb1991586cc000e1e7d9d70fc6245cbd48702a71bd43a4705ad464d04ef
GET /css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 08:44:49 GMT
date: Fri, 10 May 2024 08:44:49 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
girlsflirthere.life/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2
200 OK 15 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 14772, version 3.327
Hash bcf3bb1b7f7a3436181788e748bae013
8ee24d38f618f070a43619f1d471d90f17d666f1
42e50c76c1bf569cb8b597ffc8cdd18a6f4a311832f46fdc1489145027550781
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: font/woff2
Content-Length: 14772
Connection: keep-alive
ETag: "bcf3bb1b7f7a3436181788e748bae013"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE1327DBA78FA2
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223362#795655457/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 21908, version 3.786
Hash 2e5fca371696cab9fb5a9fe214c1319c
4bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a
f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: font/woff2
Content-Length: 21908
Connection: keep-alive
ETag: "2e5fca371696cab9fb5a9fe214c1319c"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE12B68B28514E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223362#783655432/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 21796, version 3.786
Hash b796339b324ec08006ca04dca90284cf
4283d779705f09e68939572df76c52cb41a3ec68
d65bbca022f8953936d6e60b9a59fc27f9bfd74ba96257ffe14df83b3d8eb0e3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: font/woff2
Content-Length: 21796
Connection: keep-alive
ETag: "b796339b324ec08006ca04dca90284cf"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE12B68B5115D7
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/util/flag-icon/flags/4x3/no.svg
200 OK 331 B URL GET HTTP/1.1 girlsflirthere.life/util/flag-icon/flags/4x3/no.svg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type SVG Scalable Vector Graphics image
Hash c7ecfe59439b5fd23924fd206cf2fded
056fbd2b17c7f08bfb480d21973a96bf86fbd72a
4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/util/flag-icon/css/flag-icon.css
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
ETag: "c7ecfe59439b5fd23924fd206cf2fded"
Last-Modified: Tue, 21 Nov 2023 12:30:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE138FEE56B1C0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223577#340125150/gid:0/gname:root/mode:33188/mtime:1655386305#848080000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:31:45.84808Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/scandinavia16.jpg
200 OK 208 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia16.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 12:28:26], baseline, precision 8, 1980x1080, components 3
Size 208 kB (207498 bytes)
Hash fd9c73b2d026f59cec868b6ddd4e6e45
3a4d08aedd8de3bb84b45e835bd01576da486abf
9e950992b30a448d423ebb65a190dafa78eadf3aadd23dc9c2768ad273b948a0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia16.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: image/jpeg
Content-Length: 207498
Connection: keep-alive
ETag: "fd9c73b2d026f59cec868b6ddd4e6e45"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13824E2B897F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#296018359/gid:0/gname:root/mode:33279/mtime:1655387456#214591091/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.214591091Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/favicon.ico
204 No Content 0 B URL GET HTTP/1.1 girlsflirthere.life/favicon.ico
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 10 May 2024 08:44:50 GMT
Connection: keep-alive
Cache-Control: no-transform
girlsflirthere.life/media/dating/sinderv2/images/scandinavia26.jpg
200 OK 186 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia26.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 12:41:54], baseline, precision 8, 1980x1080, components 3
Size 186 kB (185677 bytes)
Hash a63692d7d5d04522b973b3f2f32b1a82
368df18ecd96ecaa3b41dbc1095ce4f9c36c8f19
1451e4b066eec2455703b8fd8b1d4364929773d91435b067b407257291fc3f65
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia26.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:55 GMT
Content-Type: image/jpeg
Content-Length: 185677
Connection: keep-alive
ETag: "a63692d7d5d04522b973b3f2f32b1a82"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13B61240190A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#300018371/gid:0/gname:root/mode:33279/mtime:1655387456#282591248/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.282591248Z
Expires: Sat, 10 May 2025 08:44:55 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/scandinavia25.jpg
200 OK 131 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia25.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 12:41:02], baseline, precision 8, 1980x1080, components 3
Size 131 kB (130919 bytes)
Hash b43a0c525444d73171788f59be0179ac
ae4bc4daef2fcf28286a139ee5f40f7965c85ee3
cedab3477ba5b9dbdd7dcccb3209185508470f466bfd18d3a8c499052b312e38
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia25.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:45:00 GMT
Content-Type: image/jpeg
Content-Length: 130919
Connection: keep-alive
ETag: "b43a0c525444d73171788f59be0179ac"
Last-Modified: Wed, 20 Sep 2023 15:22:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE138559805F63
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#300018371/gid:0/gname:root/mode:33279/mtime:1655387456#282591248/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.282591248Z
Expires: Sat, 10 May 2025 08:45:00 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
girlsflirthere.life/media/dating/sinderv2/images/scandinavia1.jpg
200 OK 113 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/images/scandinavia1.jpg
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 15:45:49], baseline, precision 8, 1980x1080, components 3
Size 113 kB (112943 bytes)
Hash 0f9a4527dedf00f0c0a990615b2519df
0a630419869a18bfb73c3d62c28f2f38cde507ba
bb2af625a058610ae2f7f96ee82469238a9c389ca76373217593f508fba11918
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/images/scandinavia1.jpg HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:45:05 GMT
Content-Type: image/jpeg
Content-Length: 112943
Connection: keep-alive
ETag: "0f9a4527dedf00f0c0a990615b2519df"
Last-Modified: Tue, 21 Nov 2023 12:29:57 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE13846CC79203
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1695223364#43658078/gid:0/gname:root/mode:33279/mtime:1655387456#206591073/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.206591073Z
Expires: Sat, 10 May 2025 08:45:05 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
data-jsext.com/ExtService.svc/getextparams
200 OK 537 B URL GET HTTP/2 data-jsext.com/ExtService.svc/getextparams
IP
ASN #24940 Hetzner Online GmbH
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectdata-jsext.com
FingerprintC1:16:89:38:64:89:7A:27:73:30:A1:1D:1B:A0:78:99:8D:61:2F:69
ValidityMon, 25 Mar 2024 00:20:03 GMT - Sun, 23 Jun 2024 00:20:02 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (628), with no line terminators
Hash f0ff9519ad22b8b518b843ffb173ccc7
2a756d59ca73ebca175cfe427486b7c2b7c18b2f
bfc8dedb9d5109a40b1efa76f59438c1e54993399d2a8a01aff0c1a46d7574a5
GET /ExtService.svc/getextparams HTTP/1.1
Host: data-jsext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://girlsflirthere.life
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 08:44:49 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
girlsflirthere.life/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2
200 OK 22 kB URL GET HTTP/1.1 girlsflirthere.life/media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2
IP
Requested by https://girlsflirthere.life/?u=7pfk605&o=e9ym176&cid=5e5a7f3d30a3e229e96f05fea307b205-11246-0510
Certificate IssuerLet's Encrypt
Subjectgirlsflirthere.life
FingerprintC4:C7:80:95:F2:FF:6F:6C:9C:DE:BB:0C:06:8F:45:87:5F:EB:94:10
ValidityMon, 08 Apr 2024 23:39:43 GMT - Sun, 07 Jul 2024 23:39:42 GMT
File type Web Open Font Format (Version 2), TrueType, length 22284, version 3.786
Hash 5c92d5d3e39a260d5dd06ced7eca070d
64df09fd462e6bb76890b7782578777b901f2003
2a99c11dd137ef8b515b3a95d2bdb38ec99bf745b2865196aa910628bcb144b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 HTTP/1.1
Host: girlsflirthere.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://girlsflirthere.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~d0a3kiujpbx2fylptuczmqxv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 08:44:49 GMT
Content-Type: font/woff2
Content-Length: 22284
Connection: keep-alive
ETag: "5c92d5d3e39a260d5dd06ced7eca070d"
Last-Modified: Wed, 20 Sep 2023 15:22:42 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 17CE1327DC6DF0EE
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1693134507#212018096/gid:0/gname:root/mode:33279/mtime:1655387456#426591579/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:56.426591579Z
Expires: Sat, 10 May 2025 08:44:49 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
216.58.207.193
185.155.184.85
46.8.8.100
136.243.216.252