Overview

URL www.portalfox.com/articulos/archivos/amby/simplechart.zip
IP81.171.28.43
ASNLeaseWeb Netherlands B.V.
Location Belgium
Report completed2022-10-02 02:02:31 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-02 2 boirbonx-1.com/api/v1/px?xmlid=4lJkLyhTOs6BzG5RtBT2FW0auRuaQsJXtMaXEz2G Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed
2022-10-02 2 girlsdivine.life Sinkholed


Files

No files detected



Passive DNS (18)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-10-01 04:58:47 UTC 142.250.74.3
mnemonic passive DNS data-jsext.com (1) 0 2022-07-27 05:02:20 UTC 2022-10-01 04:56:31 UTC 54.37.5.177 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-01 23:23:54 UTC 18.164.68.6
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-01 05:00:18 UTC 34.117.237.239
mnemonic passive DNS img.sedoparking.com (1) 54200 2013-04-22 22:23:29 UTC 2022-10-02 02:02:21 UTC 205.234.175.175
mnemonic passive DNS boirbonx-1.com (2) 0 2022-09-26 12:59:21 UTC 2022-10-01 21:16:28 UTC 3.33.192.145 Unknown ranking
mnemonic passive DNS go.findservice.xyz (1) 283167 2021-11-22 07:34:17 UTC 2022-10-02 02:02:22 UTC 20.113.187.208
mnemonic passive DNS r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2022-10-01 04:59:16 UTC 23.36.77.32
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-01 19:20:31 UTC 93.184.220.29
mnemonic passive DNS ww1.portalfox.com (4) 0 2021-02-03 21:15:55 UTC 2022-10-02 02:02:20 UTC 64.190.63.136 Unknown ranking
mnemonic passive DNS xml-v4.netload1.com (1) 0 2022-09-26 13:05:57 UTC 2022-10-01 19:20:15 UTC 198.134.116.17 Unknown ranking
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-01 18:38:32 UTC 142.250.74.10
mnemonic passive DNS www.portalfox.com (3) 0 2013-05-25 22:24:59 UTC 2022-10-02 02:02:19 UTC 37.48.65.143 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-01 05:17:12 UTC 108.156.28.51
mnemonic passive DNS xml.sedodna.com (1) 278378 2020-10-22 08:18:03 UTC 2022-10-01 23:07:50 UTC 173.239.53.32
mnemonic passive DNS img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-10-01 14:59:59 UTC 34.120.237.76
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-01 05:28:34 UTC 35.160.97.225
mnemonic passive DNS girlsdivine.life (22) 0 2022-09-20 03:47:07 UTC 2022-10-01 22:19:29 UTC 94.103.188.72 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 81.171.28.43

Date UQ / IDS / BL URL IP
2022-12-01 12:29:33 +0000
0 - 0 - 1 www.groupinsiders.com/ 81.171.28.43
2022-12-01 12:24:06 +0000
0 - 0 - 1 imgtaram.com/rooney2513 81.171.28.43
2022-11-29 02:57:07 +0000
0 - 0 - 1 imgtaram.com/t/me 81.171.28.43
2022-11-20 09:32:36 +0000
0 - 0 - 6 ethical-solutions.org/ 81.171.28.43
2022-11-19 19:08:14 +0000
0 - 0 - 3 speedy.sh/Qgb35/FormatFactory.exe 81.171.28.43

Last 5 reports on ASN: LeaseWeb Netherlands B.V.

Date UQ / IDS / BL URL IP
2022-12-08 08:26:17 +0000
0 - 0 - 1 detroitindustryrocks.com/ 213.227.149.193
2022-12-08 08:15:24 +0000
0 - 0 - 2 adrus.com/ 95.211.189.137
2022-12-08 08:00:24 +0000
0 - 0 - 2 wxsxc.8076b.nv.wy5532.com/ 81.171.22.5
2022-12-08 07:55:06 +0000
0 - 0 - 1 mjurr.1c3c9.fd.wy5532.com/ 37.48.65.152
2022-12-08 07:53:10 +0000
0 - 0 - 1 89ff3.bx.wy5532.com/ 37.48.65.152

Last 1 reports on domain: portalfox.com

Date UQ / IDS / BL URL IP
2022-10-02 02:02:31 +0000
0 - 0 - 23 www.portalfox.com/articulos/archivos/amby/sim (...) 81.171.28.43

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-25 08:05:42 +0000
0 - 0 - 14 best-targeted-traffic.com/install.php?unq=25p (...) 103.224.182.247
2022-10-24 03:29:19 +0000
0 - 0 - 14 whoinvented.co/?u=fy082k7&o=mb2kpbt&cid=d1q8m (...) 104.21.55.111
2022-10-23 21:25:45 +0000
0 - 0 - 14 whoinvented.co/?u=fy082k7&o=mb2kpbt&cid=khn7g (...) 104.21.55.111
2022-10-23 21:25:33 +0000
0 - 0 - 1 sijyj.pensacolaairportshuttle.co/ 104.21.53.224
2022-10-23 05:40:38 +0000
0 - 0 - 23 goonlineflowersteam.xyz/ 185.238.169.107


JavaScript

Executed Scripts (14)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (60)


Request Response
                                        
                                            GET /articulos/archivos/amby/simplechart.zip HTTP/1.1 
Host: www.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         37.48.65.143
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 512
date: Sun, 02 Oct 2022 02:02:19 GMT
server: nginx
set-cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb; path=/; domain=.portalfox.com; expires=Fri, 20 Oct 2090 05:16:26 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (512), with no line terminators
Size:   512
Md5:    a5a93abe711b7f8ee2eee24a4570824d
Sha1:   539e88f06e2ed602ee8aef37ead2cd5b7e498586
Sha256: c111222d9aa70d7f3d88f0e574ffc4c7b48fdd5f38a5f92bbe582e0dbd37bb10
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.164.68.6
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 01:02:56 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 49e8093d0b1ec293275e8b264631ad18.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: N_2tAzRhLvjDzM-7njLkXzezgJZDFRedwsYUJ8b5VPBen2kGv2U_Lw==
Age: 3563


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2698
Expires: Sun, 02 Oct 2022 02:47:17 GMT
Date: Sun, 02 Oct 2022 02:02:19 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         108.156.28.51
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 03:39:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f73d71dfa047571774d2c0460e5108ec.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: Z_JYGEHVrTJlT1oWo6d4niVgq6OUkLrIILonJQcoZf0RD9sEpgQV4Q==
age: 80944
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 02 Oct 2022 02:02:20 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.portalfox.com/articulos/archivos/amby/simplechart.zip
Cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb

                                         
                                         37.48.65.143
HTTP/1.1 404 Not Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 02 Oct 2022 02:02:19 GMT
server: nginx


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   9
Md5:    d8f4a1993546cc4b850cde3599e27aec
Sha1:   094b763b4cfcc0b05e5d040581cd513c3ca08067
Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.164.68.6
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 02 Oct 2022 01:10:31 GMT
Expires: Sun, 02 Oct 2022 01:44:27 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 73afe8565c6794e933a665f6672c4b12.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: VrlD_f-TM1nNOC4WVSEViCuSyJ21FnPCknGEYPSgbrK_3UbRPMQVuQ==
Age: 3109


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5598
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 02:02:20 GMT
Last-Modified: Sun, 02 Oct 2022 00:29:02 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /articulos/archivos/amby/simplechart.zip?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDY4MzMzOSwiaWF0IjoxNjY0Njc2MTM5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2Qxczg4bjlkNG9qcGJvZjgyYjU0cWMiLCJuYmYiOjE2NjQ2NzYxMzksInRzIjoxNjY0Njc2MTM5NzQwMzE0fQ.kSQd7Bd66PzwshKIiWbddtfwmSZeD7eocXEJITi1Gco&sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb HTTP/1.1 
Host: www.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.portalfox.com/articulos/archivos/amby/simplechart.zip
Cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Upgrade-Insecure-Requests: 1

                                         
                                         37.48.65.143
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 02 Oct 2022 02:02:20 GMT
location: http://ww1.portalfox.com/?sub1=3f408696-41f6-11ed-a6ee-f7a11340a8bb
server: nginx
set-cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb; path=/; domain=.portalfox.com; expires=Fri, 20 Oct 2090 05:16:27 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: o2uo8m9Mgm4gSInHiOm8cg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.160.97.225
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CEz7BScz+5GVk4HNUvIsvUfhyMI=

                                        
                                            GET /?sub1=3f408696-41f6-11ed-a6ee-f7a11340a8bb HTTP/1.1 
Host: ww1.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.portalfox.com/
Connection: keep-alive
Cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Upgrade-Insecure-Requests: 1

                                         
                                         64.190.63.136
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 02:02:21 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_Wb3EauWDolW/Us+sCF0kaPSXwHIk2BSQkXF4vnQiK9zjrtnTioHlmC95TgqVixH0oBDNcMVSp4XDLeM5YblHJQ==
last-modified: Sun, 02 Oct 2022 02:02:20 GMT
x-cache-miss-from: parking-7f9f948885-lnx78
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (766)
Size:   1374
Md5:    122fd2901e898f3027728858f57bf8a5
Sha1:   7f61d03f1c7f04d5ef40adcff344925bb72888b3
Sha256: 6dac5bc629a470af6c583563136a4ad344ece71ac68496e8d71295c8fe3bc4b7
                                        
                                            GET /search/tsc.php?200=MzMwODA0NTYz&21=OTEuOTAuNDIuMTU0&681=MTY2NDY3NjE0MTljNjAzOGY2ZmFmOWM2OTU1MjMwMzExOTUxYzU0ODYx&crc=8ff2cf3c076317e506b8b616a07aa6973d7b74b3&cv=1 HTTP/1.1 
Host: ww1.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.portalfox.com/?sub1=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb

                                         
                                         64.190.63.136
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 02:02:21 GMT
content-length: 0
x-powered-by: PHP/8.1.9
x-cache-miss-from: parking-7f9f948885-7cxcq
server: NginX

                                        
                                            GET /images/js_preloader.gif HTTP/1.1 
Host: img.sedoparking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.portalfox.com/

                                         
                                         205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 02 Oct 2022 02:02:21 GMT
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sun, 09 Oct 2022 02:02:21 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 9df6e1fa43d4ca18849983acc54a5f01
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   4254
Md5:    90c93102a88c2ab94bff1575b7a6e86e
Sha1:   56d71bf13de464534643db9d127629a0a3bf677a
Sha256: 5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
                                        
                                            GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfipV4uTiqHU_0&v=YWQwOWFiMTE1OTYzM2Y0MDAwN2ViYzBhNWQ5MzRiOTkJMQl3dzEucG9ydGFsZm94LmNvbTYzMzhmMTJjZTIzNjc1Ljg3MTc3Njg5CXd3MS5wb3J0YWxmb3guY29tNjMzOGYxMmNlMjM5MDQuMzM2OTc1MzgJMTY2NDY3NjE0MQlhZF82M18w&l=OAliNjVlOWFmYTc4N2U2MGY5NDE1YjFhMWExNzI4ZTFjYgkwCTM1CTAJNDQ5OTk5ZTI3MzEwNWVlNWUzMWYwZDliZWMwNDMxNjUJMzMwODA0NTYzCXBvcnRhbGZveAkwCTYzCTYJMgkxNjY0Njc2MTQxCTAuMDAwMjU5CU4JMAkwCTAJMTIwNQk5MjIzNDI5Mwk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1 
Host: ww1.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.portalfox.com/?sub1=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Upgrade-Insecure-Requests: 1

                                         
                                         64.190.63.136
HTTP/1.1 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 02:02:21 GMT
content-length: 0
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 02 Oct 2022 02:02:21 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfipV4uTiqHU_0&v=YWQwOWFiMTE1OTYzM2Y0MDAwN2ViYzBhNWQ5MzRiOTkJMQl3dzEucG9ydGFsZm94LmNvbTYzMzhmMTJjZTIzNjc1Ljg3MTc3Njg5CXd3MS5wb3J0YWxmb3guY29tNjMzOGYxMmNlMjM5MDQuMzM2OTc1MzgJMTY2NDY3NjE0MQlhZF82M18w&l=OAliNjVlOWFmYTc4N2U2MGY5NDE1YjFhMWExNzI4ZTFjYgkwCTM1CTAJNDQ5OTk5ZTI3MzEwNWVlNWUzMWYwZDliZWMwNDMxNjUJMzMwODA0NTYzCXBvcnRhbGZveAkwCTYzCTYJMgkxNjY0Njc2MTQxCTAuMDAwMjU5CU4JMAkwCTAJMTIwNQk5MjIzNDI5Mwk5MS45MC40Mi4xNTQJMA%3D%3D
x-cache-miss-from: parking-7f9f948885-4zk47
server: NginX

                                        
                                            GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfipV4uTiqHU_0&v=YWQwOWFiMTE1OTYzM2Y0MDAwN2ViYzBhNWQ5MzRiOTkJMQl3dzEucG9ydGFsZm94LmNvbTYzMzhmMTJjZTIzNjc1Ljg3MTc3Njg5CXd3MS5wb3J0YWxmb3guY29tNjMzOGYxMmNlMjM5MDQuMzM2OTc1MzgJMTY2NDY3NjE0MQlhZF82M18w&l=OAliNjVlOWFmYTc4N2U2MGY5NDE1YjFhMWExNzI4ZTFjYgkwCTM1CTAJNDQ5OTk5ZTI3MzEwNWVlNWUzMWYwZDliZWMwNDMxNjUJMzMwODA0NTYzCXBvcnRhbGZveAkwCTYzCTYJMgkxNjY0Njc2MTQxCTAuMDAwMjU5CU4JMAkwCTAJMTIwNQk5MjIzNDI5Mwk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1 
Host: ww1.portalfox.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.portalfox.com/?sub1=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Connection: keep-alive
Cookie: sid=3f408696-41f6-11ed-a6ee-f7a11340a8bb
Upgrade-Insecure-Requests: 1

                                         
                                         64.190.63.136
HTTP/1.1 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 02:02:21 GMT
transfer-encoding: chunked
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 02 Oct 2022 02:02:21 GMT
location: http://xml.sedodna.com/click?i=fipV4uTiqHU_0
x-cache-miss-from: parking-7f9f948885-lnx78
server: NginX


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   311
Md5:    22bbeac239704e7ae0afaa34c75c66bc
Sha1:   8169df6bcc57fc51deb3c2550c0a529223cd5031
Sha256: db93e2480c4ff7194d74f0aadb70d8beb518c5d1cac844805e0ede1d7cb64907
                                        
                                            GET /click?i=fipV4uTiqHU_0 HTTP/1.1 
Host: xml.sedodna.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.portalfox.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         173.239.53.32
HTTP/1.1 302 Found
                                        
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://boirbonx-1.com/api/v1/px?xmlid=4lJkLyhTOs6BzG5RtBT2FW0auRuaQsJXtMaXEz2G
Pragma: no-cache

                                        
                                            GET /api/v1/px?xmlid=4lJkLyhTOs6BzG5RtBT2FW0auRuaQsJXtMaXEz2G HTTP/1.1 
Host: boirbonx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.portalfox.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         3.33.192.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 02 Oct 2022 02:02:21 GMT
Content-Length: 5238
Connection: keep-alive
Access-Control-Allow-Origin: *
ETag: W/"1476-z4RyP3lDrl4OcNYaOqH1LEUGbb0"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   5238
Md5:    1602458a3a533b71da82c7e8b8f5ebd8
Sha1:   cf84723f7943ae5e0e70d61a3aa1f52c45066dbd
Sha256: 203a860541ca3ef2000b360b5b28d2f1ca3c888cf6976c5e4332138da2e27158

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /api/v1/pxcheck?impId=4lJkLyhTOs6BzG5RtBT2FW0auRuaQsJXtMaXEz2G&minfo=eyJjb29raWVEaXNhYmxlZCI6ZmFsc2UsInVhIjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjAiLCJpZnJhbWUiOmZhbHNlLCJkZXZpY2VQaXhlbFJhdGlvIjoxLCJ3bmRMb2NIcmVmIjoiaHR0cDovL2JvaXJib254LTEuY29tL2FwaS92MS9weD94bWxpZD00bEprTHloVE9zNkJ6RzVSdEJUMkZXMGF1UnVhUXNKWHRNYVhFejJHIiwiZGV2aWNlU3JlZW5TaXplIjoiMTAwMngxMjgwIiwiZGV2aWNlV2luZG93U2l6ZSI6IjkzOXgxMjgwIiwid25kMnNyY1JhdGlvTHdyMDYiOmZhbHNlLCJpc0JvdCI6Im9mZiJ9 HTTP/1.1 
Host: boirbonx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://boirbonx-1.com/api/v1/px?xmlid=4lJkLyhTOs6BzG5RtBT2FW0auRuaQsJXtMaXEz2G
Upgrade-Insecure-Requests: 1

                                         
                                         3.33.192.145
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 02 Oct 2022 02:02:22 GMT
Content-Length: 174
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: http://xml-v4.netload1.com/click?seat=2114927&i=jp-25RFOxQg_0
Vary: Accept


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   174
Md5:    c48398d59c9a71d39f082810e7d7cf6a
Sha1:   976d4f6433aa021a2dec8345847f5acb116d8d96
Sha256: a9e074793f2b69d3e917613618d3583f3f71b16979e36de3828bab602b0d6f43
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10566
Expires: Sun, 02 Oct 2022 04:58:28 GMT
Date: Sun, 02 Oct 2022 02:02:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10566
Expires: Sun, 02 Oct 2022 04:58:28 GMT
Date: Sun, 02 Oct 2022 02:02:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10566
Expires: Sun, 02 Oct 2022 04:58:28 GMT
Date: Sun, 02 Oct 2022 02:02:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10566
Expires: Sun, 02 Oct 2022 04:58:28 GMT
Date: Sun, 02 Oct 2022 02:02:22 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8602
x-amzn-requestid: 89329169-bc7a-46b1-85fc-20383a85cae8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf9GxzoAMFg0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-27952f8357fa25c956b1cd72;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDfn3Xd8m6jaBrj_M9hs4dePku_eEhJbYv3NJSHjCdAWifhBkiKUhw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 22:21:15 GMT
age: 13267
etag: "5d3389a965cfa45dab2202d89b40264368674e8a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8602
Md5:    94d82ad8d70761f6ee1384b4183335f3
Sha1:   5d3389a965cfa45dab2202d89b40264368674e8a
Sha256: ad495dc0ede3bfcbaebfd3bf2eb55fc5596cd7643a539e030ccce0b8a3bcf8dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3739433a-586b-4806-9e89-5a2f86fcfa94.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9608
x-amzn-requestid: 48e458f4-06b9-4860-9b5d-f029d1980d0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHnFCNIAMFTsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-0f75015e046622da1c785ce9;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ORd8X5LMwzSwE3J3nGk_CL3T-8CIvktiZ0yGJIsDDaK3g93LXPx1ZQ==
via: 1.1 9c335c5f85533b11cbfd38dc7cc60c16.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 22:21:35 GMT
etag: "501fbebf706d5cf59e396af4f256f72afbd943d9"
age: 13247
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9608
Md5:    d43dc29ff0419bb1930b15f5e8a875ba
Sha1:   501fbebf706d5cf59e396af4f256f72afbd943d9
Sha256: 734bc62139fee1b31c84f56de3d5e95c6d6982170db376dab09ef9b65f816d54
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4987
x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHpFs4oAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:37 GMT
etag: "2e533332ee5c49143e58dad32ee3717a39179532"
age: 15225
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4987
Md5:    463bdcfbec5426e18ecef83b1c373b71
Sha1:   2e533332ee5c49143e58dad32ee3717a39179532
Sha256: 2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:36 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
age: 15226
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11083
Md5:    edded48f558f739287a040151349ef67
Sha1:   d63b6ba630736d32c364b0e6a369274b2389b7ff
Sha256: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: f0791b53-3c5f-4d94-954d-992a529ebb60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPnunF35oAMFYbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361ff6-2adb303349153ced73ccecf6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 22:45:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RGS_T9Cwl5Vjs_bxngHRomiYppE5fLe0SnH19VEfc5-PCT5tb5ku1A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 04:40:52 GMT
age: 76890
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6871
x-amzn-requestid: e1fdb2ee-c0e7-4a0c-ae26-d968aef00503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEIOGp2IAMFxSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ce-24b26a8048ffd84071a2ad57;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -svKnYBuiMSdWObzJyNah9TDIi6IuPP6VMzEJWmn0zxoZbFmwpzkJw==
via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:33 GMT
age: 15229
etag: "087521979efd5936416fd7f030779fa5725f0a8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6871
Md5:    9dddb9d84a16a3004821d89836b83dc3
Sha1:   087521979efd5936416fd7f030779fa5725f0a8f
Sha256: a6251ac43958031d765b5743d43e14bc04b1e465bed81f757c3609ee6f2bea66
                                        
                                            GET /click?seat=2114927&i=jp-25RFOxQg_0 HTTP/1.1 
Host: xml-v4.netload1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://boirbonx-1.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         198.134.116.17
HTTP/1.1 302 Found
                                        
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://go.findservice.xyz/15Gu5p?zoneid=21a76fc04dee6409e348274a0&pubfeed=295724/295724.21a76fc04dee6409e348274a0&campaign=671642&cost=0.00055
Pragma: no-cache

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E3B259D04BCA9512544376096151493B4E61E1766CD29821A6222A48612DE77F"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7725
Expires: Sun, 02 Oct 2022 04:11:07 GMT
Date: Sun, 02 Oct 2022 02:02:22 GMT
Connection: keep-alive

                                        
                                            GET /15Gu5p?zoneid=21a76fc04dee6409e348274a0&pubfeed=295724/295724.21a76fc04dee6409e348274a0&campaign=671642&cost=0.00055 HTTP/1.1 
Host: go.findservice.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://boirbonx-1.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         20.113.187.208
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.23.0
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 320
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15Gu5po=20221002051664676616243; domain=.go.findservice.xyz; path=/;expires=Mon, 03 Oct 2022 02:02:22 GMT; httpOnly=true;SameSite=None; Secure; _pc_lc_id=15Gu5p; domain=.go.findservice.xyz; path=/;expires=Mon, 03 Oct 2022 02:02:22 GMT; httpOnly=true;SameSite=None; Secure; peerclickcid=20a91895f43df10a2137210fb30de37a-11246-1002; domain=.go.findservice.xyz; path=/;expires=Mon, 03 Oct 2022 02:02:24 GMT; httpOnly=true;SameSite=None; Secure; _norg=1; domain=.go.findservice.xyz; path=/;expires=Mon, 03 Oct 2022 02:02:24 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Vary: Accept


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (320), with no line terminators
Size:   320
Md5:    4b5b345adc86935ab2d703c3108a8595
Sha1:   907bf676fe24463e530d61b68ae931dc37c5500a
Sha256: b33d01fc3b5313ae23737da636623f666eb780500e84874fa60a0d88f401d009
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D9FAB32BFD327890A13A4B823F1600543EC80B4E91D20F7345A0D158F40FD2FB"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15890
Expires: Sun, 02 Oct 2022 06:27:14 GMT
Date: Sun, 02 Oct 2022 02:02:24 GMT
Connection: keep-alive

                                        
                                            GET /?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002 HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://boirbonx-1.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 6637
Connection: keep-alive
set-cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s; path=/
cache-control: private, no-transform


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (528), with CRLF line terminators
Size:   6637
Md5:    d6e321d3db641eeee53019546fc4345e
Sha1:   8643f410e97e0ea1339d733a5a25be3d828db689
Sha256: ba84a58b7a52d931120ce30c0400ab33217871f4c8c8f0bfa39c1e527abd2ee3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 02:02:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 02:02:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /media/dating/sinderv2/css/bootstrap.min.css HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 109540
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "03d06426a30f77095d7511e1ca74d225"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DD278260E13
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (65367), with CRLF line terminators
Size:   109540
Md5:    03d06426a30f77095d7511e1ca74d225
Sha1:   d1a349294f6fe94ffb17a50097b37bd81e9ba56a
Sha256: 3f7e6f3cb6ba8e2effbdd260131ce0d2f332fb00ba3feca1a5bc9c3ee7f9e2a6

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/js/vegas.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 21792
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "85310f0fc6d54ab6c4aa2a2efa1e8514"
Last-Modified: Wed, 31 Aug 2022 09:34:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DDF2BA79F06
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   21792
Md5:    85310f0fc6d54ab6c4aa2a2efa1e8514
Sha1:   dbd124ed40a22170b23709711d4572ff93c9fe6f
Sha256: 17d0a5e4e45104aec83860cf51f19bb232747a586a74fc841b9771a9aa9e42b2

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/css/style.css HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 19825
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "481d04e228d83633ad28310d09905526"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1C873280CC4A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   19825
Md5:    481d04e228d83633ad28310d09905526
Sha1:   f5c81ac5514271f64001c41f5b03e92df55c1a02
Sha256: 25fc219b42657e82593f2b07e3d4ae7d615031234f9b2732f5457338d779cf30

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /cookie/js.cookie.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 4264
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a7e9883924072f15259de6888d5ef515"
Last-Modified: Wed, 31 Aug 2022 09:31:17 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DA8E4B3E163
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (1709), with CRLF line terminators
Size:   4264
Md5:    a7e9883924072f15259de6888d5ef515
Sha1:   7f4f6e5938e68f55aef81e0cd0145f008cd28382
Sha256: 985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/css/vegas.css HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 19822
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "357c7befa8bdef911f02f48f49e10628"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DDF2B317871
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   19822
Md5:    357c7befa8bdef911f02f48f49e10628
Sha1:   47972e3c4591058dce82dd3b08bed8e0b8ae5c8f
Sha256: 47f3bef4746b798892c7beff212618616b0950f33f416f03db243578f89135e3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /util/flag-icon/css/flag-icon.css HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 40627
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0a47b937981e7389e3ebe63e4a503066"
Last-Modified: Wed, 31 Aug 2022 09:38:16 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DB06C961577
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   40627
Md5:    0a47b937981e7389e3ebe63e4a503066
Sha1:   01b395ad016a1d9d15016d765f7d2c51a6e2809b
Sha256: d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /util/utils.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 7512
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "01816d15ca03032751161a746e2fb7c3"
Last-Modified: Wed, 31 Aug 2022 09:38:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DA8E5C4B415
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (641), with CRLF line terminators
Size:   7512
Md5:    01816d15ca03032751161a746e2fb7c3
Sha1:   dcc72ea5fa1356490ba473288159df9786b4a3c3
Sha256: 8b3c83a330bf1120a13eff6ef60c1e268b827b7bc49b42a7a1f5d8ad6941f2ea

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/js/timer.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 621
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "40fe503eb84093a37b15e39365ffc587"
Last-Modified: Wed, 31 Aug 2022 09:34:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DD3C3825174
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   621
Md5:    40fe503eb84093a37b15e39365ffc587
Sha1:   911128043c901314d283fe478477d26e2b3d821a
Sha256: 60b0f0de4c72c1ce9c05b36ba776f12538b1d9b80858b7099068a3e7e0415bc1

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/css/animate.css HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 61188
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "1cbfbb2c4ef85880799a74ab2f290f2a"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DD3759F1F04
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (460), with CRLF line terminators
Size:   61188
Md5:    1cbfbb2c4ef85880799a74ab2f290f2a
Sha1:   9b6366d6c7ad05010f7070db70fba10754be6e9c
Sha256: bfdad6766b12a3826bf32024f0fc13fffbcee84f102034b9270da7e538451031

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/js/trls.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 17300
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "eb1b6bc6776b3e1f520ad0d6c03a92ad"
Last-Modified: Wed, 31 Aug 2022 09:34:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DE833B6D951
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   17300
Md5:    eb1b6bc6776b3e1f520ad0d6c03a92ad
Sha1:   5adcdd94fd541e5ff347cb317418f77ebcd7a714
Sha256: d87b9de60e8a4d614e0f4e34da021c835852d802f8b6de2aee6a3fa034e3b2b5

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/bb.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 639
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "0d553e4bac91c74bfee2dbabba61e99e"
Last-Modified: Wed, 31 Aug 2022 09:32:33 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DA8FB9F46D2
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (639), with no line terminators
Size:   639
Md5:    0d553e4bac91c74bfee2dbabba61e99e
Sha1:   5af71e2377c9c012a7826a695f2724901941b19b
Sha256: 1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/js/jquery.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:24 GMT
Content-Length: 93064
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "df6173bad69801a82b84701789ab16c5"
Last-Modified: Wed, 31 Aug 2022 09:34:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DDF2BB2A74C
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:24 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (32072)
Size:   93064
Md5:    df6173bad69801a82b84701789ab16c5
Sha1:   94908755cae039762ad53086b858eac553e3f56e
Sha256: cd8f413e39247d48ea354b8fb11c227e72f641403bd8d4dd81cd7473d60daafb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/exit-new/exit1.js HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 3473
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "625e5e2950612f771e246beb33c9ea61"
Last-Modified: Wed, 31 Aug 2022 09:34:51 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1DA8FBDF4EF6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (641), with CRLF line terminators
Size:   3473
Md5:    625e5e2950612f771e246beb33c9ea61
Sha1:   e4fc251c6c000496c285f8dc3fa097040b031681
Sha256: 618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/images/logo-loveme_white1.svg HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 4564
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "896592d7f2fa3d761c0b767e9399b010"
Last-Modified: Wed, 31 Aug 2022 09:34:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1CCF6F8A4EC6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   4564
Md5:    896592d7f2fa3d761c0b767e9399b010
Sha1:   ed1c0502263392938f4cbdd72afb1a8704bf840e
Sha256: 3417f549b6a1018ee687dd84aec136cb7fba2bb5b4c83cf269f9f8e958cc48de

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7A07D3C19B04BEFAC842BF3609CBA62A20FCD1BD5E469B185099B5CEE0007C64"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7551
Expires: Sun, 02 Oct 2022 04:08:16 GMT
Date: Sun, 02 Oct 2022 02:02:25 GMT
Connection: keep-alive

                                        
                                            GET /media/dating/sinderv2/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://girlsdivine.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 22284
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "5c92d5d3e39a260d5dd06ced7eca070d"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1CED4AD01DCF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22284, version 3.786\012- data
Size:   22284
Md5:    5c92d5d3e39a260d5dd06ced7eca070d
Sha1:   64df09fd462e6bb76890b7782578777b901f2003
Sha256: 2a99c11dd137ef8b515b3a95d2bdb38ec99bf745b2865196aa910628bcb144b9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/fonts/b796339b324ec08006ca04dca90284cf.woff2 HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://girlsdivine.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 21796
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "b796339b324ec08006ca04dca90284cf"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1D528F604667
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21796, version 3.786\012- data
Size:   21796
Md5:    b796339b324ec08006ca04dca90284cf
Sha1:   4283d779705f09e68939572df76c52cb41a3ec68
Sha256: d65bbca022f8953936d6e60b9a59fc27f9bfd74ba96257ffe14df83b3d8eb0e3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://girlsdivine.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 14772
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "bcf3bb1b7f7a3436181788e748bae013"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1CED4AC6DD77
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 14772, version 3.327\012- data
Size:   14772
Md5:    bcf3bb1b7f7a3436181788e748bae013
Sha1:   8ee24d38f618f070a43619f1d471d90f17d666f1
Sha256: 42e50c76c1bf569cb8b597ffc8cdd18a6f4a311832f46fdc1489145027550781

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://girlsdivine.life/media/dating/sinderv2/css/style.css
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 21908
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2e5fca371696cab9fb5a9fe214c1319c"
Last-Modified: Wed, 31 Aug 2022 09:34:21 GMT
No-Gzip-Compression: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1D73CB4A20D1
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21908, version 3.786\012- data
Size:   21908
Md5:    2e5fca371696cab9fb5a9fe214c1319c
Sha1:   4bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a
Sha256: f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ExtService.svc/getextparams HTTP/1.1 
Host: data-jsext.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://girlsdivine.life
Connection: keep-alive
Referer: https://girlsdivine.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.37.5.177
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 515
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (472), with no line terminators
Size:   515
Md5:    2e2a7f61ae1efa530bbcebf1693ac292
Sha1:   37767c8aa04a870dd713da7cb45e451b4b24d3b9
Sha256: f41890a855fd526c0e7d9702328729cea951b676eec1056e0cdc7250a49e9646
                                        
                                            GET /media/dating/sinderv2/images/scandinavia16.jpg HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 207498
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "fd9c73b2d026f59cec868b6ddd4e6e45"
Last-Modified: Wed, 31 Aug 2022 09:34:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1E14CD4D7414
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:12:04 12:28:26], baseline, precision 8, 1980x1080, components 3\012- data
Size:   207498
Md5:    fd9c73b2d026f59cec868b6ddd4e6e45
Sha1:   3a4d08aedd8de3bb84b45e835bd01576da486abf
Sha256: 9e950992b30a448d423ebb65a190dafa78eadf3aadd23dc9c2768ad273b948a0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/util/flag-icon/css/flag-icon.css
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Content-Length: 331
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "c7ecfe59439b5fd23924fd206cf2fded"
Last-Modified: Wed, 31 Aug 2022 09:38:18 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 171A1E226307F3EC
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 02 Oct 2023 02:02:25 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Size:   331
Md5:    c7ecfe59439b5fd23924fd206cf2fded
Sha1:   056fbd2b17c7f08bfb480d21973a96bf86fbd72a
Sha256: 4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: girlsdivine.life
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/?u=7pfk605&o=e9ym176&t=21a76fc04dee6409e348274a0_laxy&cid=20a91895f43df10a2137210fb30de37a-11246-1002
Cookie: sid=t2~s5n0ekottskkpjgr3zkbip1s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         94.103.188.72
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 02 Oct 2022 02:02:25 GMT
Connection: keep-alive
Cache-Control: no-transform


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9073
x-amzn-requestid: 6337e85e-904c-4346-b11d-1cf213eba1a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf8EyIIAMF_Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-05c231ba25850508201eda0d;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2WCasBR9fFvqGZ61uURK1W4vhzCBO81FTvpSCs6eKH8HBClVUFybpQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "377251ce16059a304e1ada7e7bdade2eee86bfdb"
age: 15243
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9073
Md5:    91c43e8f8caa27091b10fc006c309e96
Sha1:   377251ce16059a304e1ada7e7bdade2eee86bfdb
Sha256: 81d98f635686a13e149a86149db28f794097b35fc0b7af82beb0199edfc82a38
                                        
                                            GET /css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://girlsdivine.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Oct 2022 02:02:24 GMT
date: Sun, 02 Oct 2022 02:02:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---