| ads.istngo.com/0310f616-7406-458c-9364-80ee63556217 |  18.195.123.247 | 302 | 0 B |
URL HTTP/1.1ads.istngo.com/0310f616-7406-458c-9364-80ee63556217 IP18.195.123.247:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /0310f616-7406-458c-9364-80ee63556217 HTTP/1.1
Host: ads.istngo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sun, 29 Jan 2023 22:01:54 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Pragma: no-cache
Set-Cookie: 0310f616-7406-458c-9364-80ee63556217-v4=0_0D5A1_4_lA0AKNVTS3VT37pDOoa7jhxMLjxy2fSCM; Max-Age=86400; Expires=Mon, 30-Jan-2023 22:01:54 GMT; Domain=ads.istngo.com; Path=/; HttpOnly
cep-v4=CTCpbZpgHqJHhXEE54KSoxNQGgR-09qeMqw6bJ6IrMuxmQNqhHb9Jb8UZGXcW_V5_LCjrkKS_1YbqFjwoTQsHem8WLKCdRuhou2dEr5h6tii8P9j1dlEt8ORJUomulUNEv0MlLsCMzLvPAoo4_uxMHrOJ1M9h5GmPVkebk5RKYng19ETIQYocFb-ocKwFmVpoiTiFVTp0pC_PtOiDKuRAaZ2au33UGWDDl2Y2WStydGCQ6BgiUD9KVagVB6BktTnuGrpKr_KERUCNr4b0wIlLnrEw3qbc3rYBOPvhtqq16HUor-wt0OpE3GCJs2sqTYXFbic1CHvvM7b_rYNQEvd7C2Bg8TsQH_ejzjy1Mt3TkY; Max-Age=86400; Expires=Mon, 30-Jan-2023 22:01:54 GMT; Domain=ads.istngo.com; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3eb88dea4fe00db1182370e72683c3ab ca520abf1e91bfd2aef40c6a1270a911071e8922 d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14001
Expires: Mon, 30 Jan 2023 01:55:16 GMT
Date: Sun, 29 Jan 2023 22:01:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha2104f935c638b4767ca5ae0d738ef23 85c6af15af749be0ceeae6de17c36925b750f166 5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14230
Expires: Mon, 30 Jan 2023 01:59:05 GMT
Date: Sun, 29 Jan 2023 22:01:55 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 21:43:09 GMT
content-type: application/json
age: 1126
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash03092d1a1bc7ac91ee342a1a7ab2a562 52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a 03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12855
Expires: Mon, 30 Jan 2023 01:36:10 GMT
Date: Sun, 29 Jan 2023 22:01:55 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qJ/SCDrrZpQ0FRT70QM2OaTCKXiNTCz+sA91rN2Hu1JBWZilK4gv4wDQp/cmtTG6szArxNgBigpY8ZWsy5gPBg==
x-amz-request-id: AFQBVCRWB16QE3X0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 21:50:29 GMT
age: 686
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash1abbeea2f25d731f7f147f6882d30f54 87fd9de6c5ae8b19c61ca16c73810c52a808cb0c 063431bfc2f83cfa657e45ce23b76de76060f86ed5625020c3b4fc10c1ae4c11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=140348
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 22:01:55 GMT
Etag: "63d66e0f-117"
Expires: Tue, 31 Jan 2023 13:01:03 GMT
Last-Modified: Sun, 29 Jan 2023 13:01:03 GMT
Server: nginx
Content-Length: 279
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| static.production.almightypush.com/mng/subs_window.css?ver=1626771140 | 54.230.111.2 | 200 OK | 6.9 kB |
URL HTTP/2static.production.almightypush.com/mng/subs_window.css?ver=1626771140 IP54.230.111.2:0
Hashbd7dbae15f904a4e1213439ebfefddbe 9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
GET /mng/subs_window.css?ver=1626771140 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 6945
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 09:12:04 GMT
etag: "bd7dbae15f904a4e1213439ebfefddbe"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eat1be8hS7D7xHL4PyMUS4SKxZ4knVWvyBIMGE7iuXSxFSASNDKxvw==
age: 46202
X-Firefox-Spdy: h2
|
|
| static.production.almightypush.com/mng/channels/init.min.js?ver=1626771140 | 54.230.111.2 | 200 OK | 23 kB |
URL HTTP/2static.production.almightypush.com/mng/channels/init.min.js?ver=1626771140 IP54.230.111.2:0
Hash3b6653c5e8ba364d3a55401890bfcd78 ee999f16f02d41b93d1db2bf3a489fab1034e67a a598ef0100e73e2d81969e0a59374e915ccfe7c312603b4b1375bbd0e75498d5
GET /mng/channels/init.min.js?ver=1626771140 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 22787
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 03:46:14 GMT
etag: "3b6653c5e8ba364d3a55401890bfcd78"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wD2hfQqFyGVSFDK-ipYb8KKHhOvIcEJL-g76yCTA0eh-HJWRp7dpdA==
age: 65769
X-Firefox-Spdy: h2
|
|
| static.production.almightypush.com/mng/subs_window.js?ver=1626771140 | 54.230.111.2 | 200 OK | 20 kB |
URL HTTP/2static.production.almightypush.com/mng/subs_window.js?ver=1626771140 IP54.230.111.2:0
Hashae593f4be1dd1f0710123918b49c4933 66fbe30bb873e0a47d3d72e737d68aa4b6916c26 fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
GET /mng/subs_window.js?ver=1626771140 HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 19491
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 08:15:54 GMT
etag: "ae593f4be1dd1f0710123918b49c4933"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m76XcXDpNCpg6AhKYG4yyxS9hoHvyh3ePMcJPiU1D-o_GM_O58KQfg==
age: 49581
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash75bf326700e29b1b06e57fb96ee2b064 4f979f28905b65637a058cd44be6c25bb51a42e4 385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 22:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash1abbeea2f25d731f7f147f6882d30f54 87fd9de6c5ae8b19c61ca16c73810c52a808cb0c 063431bfc2f83cfa657e45ce23b76de76060f86ed5625020c3b4fc10c1ae4c11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 22:01:55 GMT
Server: ECS (amb/6B72)
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash75bf326700e29b1b06e57fb96ee2b064 4f979f28905b65637a058cd44be6c25bb51a42e4 385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 22:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb82a9bb1f8f2163334c95012e62b26a7 ce92aa57951865e97903ef2dc0a0d6faa501c255 c58d50d3507d98c3b3b01cafc4248c20a292fc29ed012bf6362280baba4ce872
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C58D50D3507D98C3B3B01CAFC4248C20A292FC29ED012BF6362280BABA4CE872"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14768
Expires: Mon, 30 Jan 2023 02:08:03 GMT
Date: Sun, 29 Jan 2023 22:01:55 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 21:41:41 GMT
age: 1214
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/css/normalize.css |  104.21.87.253 | 200 OK | 2.6 kB |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/css/normalize.css IP104.21.87.253:0
Hash945486431b62d7046a5cedb2c7dc205d 7908c99ea7e966b46f1020e6734c1ecc7824ab98 cff000d01e52f0dabdb86bc1dd578b7cee46ce647fb0d1fd992cd8229aefa2c5
GET /es/multi/ms/7-216324/css/normalize.css HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: text/css
last-modified: Tue, 27 Jul 2021 08:07:07 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ygt1KOur%2Bar%2FQGZbelR0QtlR6Zl%2BodH9XiPI5dOzbYBZ90nhZOGoCx0MPyyzxSa3w%2FN1%2FgzMvB5Wgit9IZSOUFdkMzCK4rYne%2FKUhJozWidQ15uavyCmCa5VDySs367G6Jp9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc95ff40afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.production.almightypush.com/mng/channels/sw.min.js | 54.230.111.2 | 200 OK | 6.5 kB |
URL HTTP/2static.production.almightypush.com/mng/channels/sw.min.js IP54.230.111.2:0
Hash3c59aaab0e1ae86c5e5d857cb8c7918d df214d7817dc6116524c78c2d02f85faa8e1df6e c774dd1e1e83a6c08ef321e9864f1a40c338f527dafbdf93e2e28263240590bc
GET /mng/channels/sw.min.js HTTP/1.1
Host: static.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 6277
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 08:50:01 GMT
etag: "03b71607d0eb65df0c65a3d5fece3706"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hs9zivo2lUAQRQjukfQx3prfd2VSuvP-mDRF-YfcXy9i3B_6YQ5QiQ==
age: 47533
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/js/inline_video.js | 104.21.87.253 | 200 OK | 1.2 kB |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/js/inline_video.js IP104.21.87.253:0
File typeASCII text, with very long lines (3011) Hasha035faa97353ebde624b605d2f4658b1 42fc496344f180e4e76097151db82639032d3db0 2deaeeb743eedbc7cbd7f92f6a32ee725783fe9e941f9bd2b0a1bdbbe429920e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /es/multi/ms/7-216324/js/inline_video.js HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: application/javascript
last-modified: Tue, 27 Jul 2021 08:07:07 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eaeRqB52ETPWD2Tf4MQjpwydC6CZkrntl5zyzNu%2FSZDKioDwSMQgBMFDQ1TT1wRLy0%2FhKiYj5yuAYSRmOA597oTB6gt9jT%2Fqb1dRpwmBz5AmnoWb%2FimZ7QG2wl2gevKgyCKI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc968090afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.187.220.96 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.187.220.96:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 33UEvdZo/XDMV9b7/fNr+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lDT5Vzm+QXQGMVXIxjN1iwZYQyw=
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.110 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.110:0
Hashc0ed37bbb7230865013546121249199e 1b16351efa7315cc1f5c2831e550bc13a6e29b0a 7e53764a61d9e3da4073991ad656d78f50209157b9c0d5435b49b58723e9d22a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 29 Jan 2023 22:01:56 GMT
Last-Modified: Sun, 29 Jan 2023 20:13:35 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: q6h-LRB6S2ojkhuQt4_jt49ZmE7YA-uyHlb9x4l4vHWsDnYQidj2bg==
Age: 6501
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.110 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.110:0
Hashc0ed37bbb7230865013546121249199e 1b16351efa7315cc1f5c2831e550bc13a6e29b0a 7e53764a61d9e3da4073991ad656d78f50209157b9c0d5435b49b58723e9d22a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125698
Date: Sun, 29 Jan 2023 22:01:56 GMT
Etag: "63d62d47-1d7"
Expires: Tue, 31 Jan 2023 08:56:54 GMT
Last-Modified: Sun, 29 Jan 2023 08:24:39 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TowTlnjHE7CbON8sTaLrOtuTZWVAnVTjly2i-dzswuwoL3Z9FiwnNA==
Age: 1935
|
|
| manager.production.almightypush.com/api/v1/code-snippet/ | 3.23.150.142 | 200 OK | 0 B |
URL HTTP/2manager.production.almightypush.com/api/v1/code-snippet/ IP3.23.150.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/code-snippet/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token
Referer: https://fuckthisgirl.net/
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:56 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2
|
|
| manager.production.almightypush.com/api/v1/code-snippet/ | 3.23.150.142 | 200 OK | 1.7 kB |
URL HTTP/2manager.production.almightypush.com/api/v1/code-snippet/ IP3.23.150.142:0
File typeJSON data\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1675), with no line terminators Hashadc1b2f36af289cee439a153e085ec55 57913a379eae7f9d7f9155e8ffe6a9fae2b62452 bec9f23dac52db7a18948868ceb95694089bfeef70e9fc0c3ad69a61c2c34618
GET /api/v1/code-snippet/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuckthisgirl.net/
Channel-Token: OTI2Yjc3ZDUzZmRkMWQ2MmE2NmExZWE3ZTA0NGVlNjg9Mjk5Mj0v
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:56 GMT
content-type: application/json
content-length: 1681
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
x-content-type-options: nosniff
referrer-policy: same-origin
set-cookie: attached-subscription-window-id-2992=1222; Path=/
X-Firefox-Spdy: h2
|
|
| manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1222 | 3.23.150.142 | 200 OK | 0 B |
URL HTTP/2manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1222 IP3.23.150.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/window-session-rules/?name=allow_notifications&value=0&window=1222 HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token,content-type
Referer: https://fuckthisgirl.net/
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:56 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8703
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 22:01:57 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8703
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 22:01:57 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8703
Expires: Mon, 30 Jan 2023 00:27:00 GMT
Date: Sun, 29 Jan 2023 22:01:57 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc62816c-5ae0-4a32-ad19-0aa70ed552c5.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc62816c-5ae0-4a32-ad19-0aa70ed552c5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1133381d25a3804d01148f332e4cdd7e d0d0e9d7e8afbf5a4926c44d9fc9ff94bc276f5a 7dd9a03052e733f3418991f237cae7b9aa5d20c34dd661078199bd85d26a4d1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc62816c-5ae0-4a32-ad19-0aa70ed552c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8751
x-amzn-requestid: 28610adf-7206-4dff-9e34-c9441fdaf4b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkGHFixIAMF1jg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6f3-1de169331c105c35519fd34c;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vpkET9Ym44JpkXbIxIW7hH5afDO2COTnP4_l-65mJeIavP17a2w3FA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 870
etag: "d0d0e9d7e8afbf5a4926c44d9fc9ff94bc276f5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/js/ip_api.js | 104.21.87.253 | 200 OK | 8.0 kB |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/js/ip_api.js IP104.21.87.253:0
Hashc603e49251921641d4bbf0562512c35e fe0be12dd28233cfbf3ea82af4720fefe6b0911e 5b4d05004c643209712e55793ed52748ec6af3f8bfe3fb5447e49e5291cfac03
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /es/multi/ms/7-216324/js/ip_api.js HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: application/javascript
last-modified: Tue, 27 Jul 2021 08:07:07 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uZZcAAvNZC8dLlJI2YANp1Ou8O2glEV26oEiENgtZSj%2FEDyqp%2FW7EbVQuzzkvSrQKPnC490CLK%2BcYYLYxrEV3e1%2BK6L8fYtNhTMn5LETdbTV1Qzeb0uzPZOvd8o6OmROtMW2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc968070afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9169e1aa-278a-45ac-a3cb-92421681099d.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9169e1aa-278a-45ac-a3cb-92421681099d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash01f406ed5d9b17a7aa00015301bddf94 d78e18830fc6cf231f66f95cc0e01520cfeebddf 33245ea764fb634a01ee9657e529a30567588ecbb10fc0e6499aac14cd21fe81
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9169e1aa-278a-45ac-a3cb-92421681099d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7333
x-amzn-requestid: 7563c72f-e40d-4e96-a73f-8aa404ae0b25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFK8IAMFzMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-7eb009311701187873f05b20;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -npeyE-5ETAaI6cs7oewWxVe4ZUrtmhvCNC4tMWT_3ab3hZ3tw060w==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 668
etag: "d78e18830fc6cf231f66f95cc0e01520cfeebddf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash435598df0723ba8070784ee6a8d6de8b 0dab67801b42d738a5074ec3f0489f04c5e6552c 05339073fff5fe4213a38505242c577f579aba68d5c249e8bac10b03d379a2dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10616
x-amzn-requestid: 809aadb4-f948-41a5-82bc-84a520a5689a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEZIIAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-2c659eae4d513b433aa749e3;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4v4fldiJ0EsLGeNNodBg_GPY8hiq1Yyr5kzBIYyZXuf8bcTZ4CmsHQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 696
etag: "0dab67801b42d738a5074ec3f0489f04c5e6552c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbe179e9-ed5b-474f-b131-5b5a63a84dfb.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbe179e9-ed5b-474f-b131-5b5a63a84dfb.jpeg IP34.120.237.76:0
Hash84a44f904ef5605eb0fdd4197ce42c38 bba3b8d8be680b790128d34d7c22fbcac8db6b7b 16aab8bc52582424df34656bcaeeee716636d946020ef6559b78ddbd1febd53f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbe179e9-ed5b-474f-b131-5b5a63a84dfb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8414
x-amzn-requestid: 3ca84a59-6dce-45f8-919e-bd551d553a99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj5EGvAIAMFtPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6a0-446d1dff705f17853e7d0a77;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hUnafsPNiSpfZcu0hzwVC3VOHbVjqwIHo2vuJuZUKT1Lj93l9NkVrQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 762
etag: "53d3da3cdf647e619abe96c6af42f2374112f334"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3be81f83687ddb6c93d3ff3c09a9dba2 50a48e737310d3f31840db4301b25927fbcc12c5 e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF9YEBmIAMF0kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 17:35:56 GMT
age: 15961
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1222 | 3.23.150.142 | 204 No Content | 0 B |
URL HTTP/2manager.production.almightypush.com/api/v1/window-session-rules/?name=allow_notifications&value=0&window=1222 IP3.23.150.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/window-session-rules/?name=allow_notifications&value=0&window=1222 HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Channel-Token: OTI2Yjc3ZDUzZmRkMWQ2MmE2NmExZWE3ZTA0NGVlNjg9Mjk5Mj0v
Origin: https://fuckthisgirl.net
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 22:01:57 GMT
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash7c170817e02057b68a731a220931583e 4b016fceffdfc459928f6b8df32cdea1beb778f8 7651271ceb6eec1f2288c6e1e5a9167e415b7e5718454abc03a55cd513d9d203
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=116599
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 22:01:57 GMT
Etag: "63d6114c-118"
Expires: Tue, 31 Jan 2023 06:25:16 GMT
Last-Modified: Sun, 29 Jan 2023 06:25:16 GMT
Server: nginx
Content-Length: 280
|
|
| img.almightypush.com/image/e3b1b857c6b748b0b0511ec01688cd37/image.jpg | 104.21.234.131 | 200 OK | 93 kB |
URL HTTP/2img.almightypush.com/image/e3b1b857c6b748b0b0511ec01688cd37/image.jpg IP104.21.234.131:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3\012- data Hash476cdda39ef8ab396888c1817a62a726 5330bbcfd752b6b66468ed245a28b4b3ed425a4e 91902b6e343eae4011bfd0075710def9ba6a86946e7aa72055c5c3f6ad8ff03d
GET /image/e3b1b857c6b748b0b0511ec01688cd37/image.jpg HTTP/1.1
Host: img.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:57 GMT
content-type: image/jpeg
content-length: 93400
expires: Mon, 30 Jan 2023 07:53:05 GMT
etag: "5330bbcfd752b6b66468ed245a28b4b3ed425a4e"
cache-control: public, max-age=86400
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, PATCH
access-control-allow-headers: Origin, Authorization, X-Requested-With, X-Push-Channel-Id, Content-Type, Accept, Channel-Token
access-control-allow-credentials: true
cf-cache-status: HIT
age: 50932
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eMO30vNG5sgrVZAlYB6%2FFcSiQN%2FmID3qn1Q%2B0h%2Bo9vscbCTvru%2BD7sjsIWYlQvplW6ds%2FjDs%2FPjq3poQnTWF7mxFyMEsMSnIrqtHNWL6JuXHWTkDf%2BtYD%2BlNGJbVFVInXTMVVpGkdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fd8ec987791-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash7c170817e02057b68a731a220931583e 4b016fceffdfc459928f6b8df32cdea1beb778f8 7651271ceb6eec1f2288c6e1e5a9167e415b7e5718454abc03a55cd513d9d203
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 683
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 22:01:57 GMT
Etag: "63d36e4b-117"
Last-Modified: Sun, 29 Jan 2023 21:50:34 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 280
|
|
| manager.production.almightypush.com/api/v1/session-events/ | 3.23.150.142 | 200 OK | 0 B |
URL HTTP/2manager.production.almightypush.com/api/v1/session-events/ IP3.23.150.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/session-events/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: channel-token,content-type
Referer: https://fuckthisgirl.net/
Origin: https://fuckthisgirl.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:58 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2
|
|
| manager.production.almightypush.com/api/v1/session-events/ | 3.23.150.142 | 201 Created | 0 B |
URL HTTP/2manager.production.almightypush.com/api/v1/session-events/ IP3.23.150.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/session-events/ HTTP/1.1
Host: manager.production.almightypush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Channel-Token: OTI2Yjc3ZDUzZmRkMWQ2MmE2NmExZWE3ZTA0NGVlNjg9Mjk5Mj0v
Content-Length: 46
Origin: https://fuckthisgirl.net
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
date: Sun, 29 Jan 2023 22:01:58 GMT
content-length: 0
server: gunicorn/19.9.0
vary: Accept, Origin
allow: POST, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://fuckthisgirl.net
x-content-type-options: nosniff
referrer-policy: same-origin
set-cookie: session_uuid=4845c9c0-1ba0-4e2e-8501-e02bd3d29536; expires=Mon, 29 Jan 2024 22:01:58 GMT; Max-Age=31536000; Path=/
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/js/backoffer.js | 104.21.87.253 | 200 OK | 0 B |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/js/backoffer.js IP104.21.87.253:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /es/multi/ms/7-216324/js/backoffer.js HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: application/javascript
last-modified: Tue, 27 Jul 2021 08:07:07 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rbV0y4jqAwX1YD8nDNU39KzqS9bNOu8NNoZA003zzpavpLAZDR%2FapKcFFl%2F35CbFZwNcHnKkp4cPT52eI8CeHpcDlBKtttka2vEF8CElr9FVrWStvx57592O5dsLAYD1bp3Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc9781c0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/images/loading.gif | 104.21.87.253 | 404 Not Found | 0 B |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/images/loading.gif IP104.21.87.253:0
GET /es/multi/ms/7-216324/images/loading.gif HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ug%2Fj3YbB%2FX1JTYjkfyHNjX8rk7OyU903MON5Xd%2Bprmsby5%2Bcaa%2BX5jj1y6Z5eMxMEKYpDMJGe30Jjj99YUEIe70CTWZIL8lPx2ZnkCvYd6LiQJYAHq%2BJiSsDTwcg9H6qWu1p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc9781a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net |  167.114.67.56 | 200 OK | 0 B |
URL HTTP/2zeniocloud.com/JAIA.js?sub1=fuckthisgirl.net IP167.114.67.56:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /JAIA.js?sub1=fuckthisgirl.net HTTP/1.1
Host: zeniocloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 29 Jan 2023 22:01:56 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/images/frame.jpg | 104.21.87.253 | 404 Not Found | 0 B |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/images/frame.jpg IP104.21.87.253:0
GET /es/multi/ms/7-216324/images/frame.jpg HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gy7kPXG8Kad%2FQXIYyrZNGYrDO%2BUPXGnfLYff1M32FYiqEK7msoTPEdrYH5xnRpJqg7DrvdWrqn0nVjERqZW5wk4nm73t4bumczlPM8idD0YakQzwozDMvFFK1gXbFnPVI%2FP9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc978180afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/css/style.css | 104.21.87.253 | 200 OK | 0 B |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/css/style.css IP104.21.87.253:0
GET /es/multi/ms/7-216324/css/style.css HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: text/css
last-modified: Tue, 27 Jul 2021 08:07:07 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3rAiBhYc%2FdQB5fTQU76A5hj2zwqtlf8WG3%2FZE7K%2FrBMoFfbDjZs6jvWfnM8sa5fgCsqexe%2BT7U27upEkNV%2FRcu16xJd1aye2c%2F%2FpgZBxhm%2FIZAceX%2BxJbNbyD0acKIpbXnCd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc95ffa0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/js/jquery.min.js | 104.21.87.253 | 200 OK | 0 B |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/js/jquery.min.js IP104.21.87.253:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /es/multi/ms/7-216324/js/jquery.min.js HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: application/javascript
last-modified: Tue, 27 Jul 2021 08:07:08 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykRgi9QBy8V9YZkHnITjgck%2BMIJ6wU2TyKLYEn%2FneDsZHc35jW8AiS7T7k7476OlH%2B5Zc%2B%2BHstQcmz6qErauzZ5%2FrOVVBcLcHCwrqbYuT6hTviN56dXgg2dn0istFmAn0%2Bpq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79153fc968050afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext IP142.250.74.106:0
GET /css?family=Source+Sans+Pro:400,700,400italic,700italic,900italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuckthisgirl.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Jan 2023 22:01:55 GMT
date: Sun, 29 Jan 2023 22:01:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb | 104.21.87.253 | 200 OK | 0 B |
URL HTTP/2fuckthisgirl.net/es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb IP104.21.87.253:0
GET /es/multi/ms/7-216324/?cep=cSuFKPu3WcdUC8hpxN5TqOY_K5slwZZdUl1Jd6Y2whrPStNmfUqW-7RoZIm8x9WLR3qiV_dDBOLnteEamcZ0xJHQZhrVmfWOxy8N0kto_h7MHj7emhAmGB9u5-7p0p4L70Npm4fcLZaaNqrX-N2ZLi_tFpR6UsN1QpCNRHGjamS-TPTUxYnWKmHWJOV6kaImNj3E6p1ws01ysiYGHhRJ9YipxudIdbKG_37omw6un5HxBQwadCOobquPXuLFv6_egZmG8eJHEKZc4T2j3AFctL9AyPSS_gc0EX-uNGsIbeYTYA7XTiS184rZ9LSW16VnaMERbt7yTcOQ0VyvXD-ugiLSjsjEijz_FzXz4qLKSEc&lptoken=16327519035d154114bb HTTP/1.1
Host: fuckthisgirl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 29 Jan 2023 22:01:55 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ev0MeldvMflf1Esg7eHILZYsmbdLWsSn0Bgf0IexzVN%2Bwhy9bK343B%2FdWD8giAMlokUMDGV%2BAzA%2FZfhaCqjpv5s78C1znIhoXU%2BSWDVUHdO0wE6XDdgtbH4BiO26aOZPFm6d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79153fc80eb80afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|