code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css
104.26.7.173200 OK 17 kB URL GET HTTP/2 code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css
IP 104.26.7.173:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerCloudflare, Inc.
Subjectionicframework.com
FingerprintF0:95:87:C3:E4:A0:31:2D:83:93:BF:FD:9F:E3:6A:84:64:FB:AC:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (50806)
Hash 1690997909aae14b023a6580d4a2f33f
a4fd9551382a3b5c9c43e14adb8c4c4149cd2352
92ac508220f5bb60ec94e07650528eb66625f82a4740ada068cde05365781286
GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1
Host: code.ionicframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:15 GMT
content-type: text/css; charset=utf-8
x-origin-cache: HIT
last-modified: Thu, 13 Apr 2023 16:20:19 GMT
access-control-allow-origin: *
etag: W/"64382bc3-c854"
expires: Tue, 14 Nov 2023 02:21:50 GMT
cache-control: max-age=31536000
x-proxy-cache: MISS
x-github-request-id: 9540:058D:10ECD14:112CF71:6552D766
via: 1.1 varnish
age: 9046
x-served-by: cache-bma1642-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701336569.099746,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 85c21ec55e799a3534dda0e3ab0416b3da19df86
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x0y7Y1KgHzEUB7SNGJp3N8AsUx%2F8ih%2FD25D2Ea1YpN9%2Bwpnxeoap1vQJA168MzZE4F66ZmaXFgx%2BkaZyyA%2FyW8VUbSq0aQ76EJqB5%2F75sM5WA2TUwE0r22H1eW%2BW9xLfG3dSVJ4KpR8r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2edd01afdb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
softsparkling.site/photos/c%20(411).webp
172.67.203.22200 OK 6.3 kB URL GET HTTP/3 softsparkling.site/photos/c%20(411).webp
IP 172.67.203.22:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash c48752f7154ff582b04ac63eab34d9ac
177b437165d6293b6fe363cd3194ec5e2a03f59f
60c5c3846efdcb7b8e529d916ad9822071e24866051a04cdb422b3dadc4924fc
GET /photos/c%20(411).webp HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:15 GMT
content-length: 6252
last-modified: Wed, 04 Jan 2023 04:05:51 GMT
etag: "186c-5f1684ccefb03"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f0LUDSYmF2HLwMZpMXw6iDw1ZAFUjOQ5cLflhTlIR9P9eN12uq%2FMnAtrwp2c%2BDIpyMq2VYnNZiC3%2BO7yggktpj1bgPf3cAXCw4wr%2FIL3QMrBiAbS%2BhMX8qQf9ANpyt3sns7MSz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edd16fa8712e-OSL
alt-svc: h3=":443"; ma=86400
softsparkling.site/photos/c%20(184).webp
172.67.203.22200 OK 33 kB URL GET HTTP/3 softsparkling.site/photos/c%20(184).webp
IP 172.67.203.22:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash e0b790902b7cfaa560dd6c0795360ba7
e7972c66128f3bdbd3a1dfc47cc9d15e22a00536
e59446446cde93d841e6b91b673b542e72295f0a2f0dfc5b12192447af2599aa
GET /photos/c%20(184).webp HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:15 GMT
content-length: 32902
last-modified: Wed, 04 Jan 2023 04:02:41 GMT
etag: "8086-5f1684184d6e7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nTDcOTV1tdqIzXHwjwNPZ6tA0%2FvtZ8Aj8LJ35pEGU7QBLZ%2FeOe9d8I8zq6agKjvyG1cwq9%2Fwcm37cQcbrs4Cx07JAq%2F%2FTeYvSF2pmFLIH50TKPssedVZCkf0MbVh03SHMV%2B1%2F2s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edd15fa6712e-OSL
alt-svc: h3=":443"; ma=86400
intoxicatefiglowest.com/ac/34/fa/ac34fa280dc4ca9d6d13e6403ea43b91.js
173.233.139.164200 OK 16 kB URL GET HTTP/1.1 intoxicatefiglowest.com/ac/34/fa/ac34fa280dc4ca9d6d13e6403ea43b91.js
IP 173.233.139.164:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectintoxicatefiglowest.com
Fingerprint1F:86:D9:54:E8:E2:F7:B3:A4:04:E3:6A:67:84:FC:4E:C3:47:78:38
ValidityThu, 02 Nov 2023 07:11:14 GMT - Wed, 31 Jan 2024 07:11:13 GMT
File type ASCII text, with very long lines (42843), with no line terminators
Hash 6bcfc0a49a8347a3fb8ce01920585403
1a10a488e2d18e18b85031dd69fbade00840d017
bd113f6fcd70aaefad5a35ee658051f2c87fe058d1bdab12ca212e4f93774696
GET /ac/34/fa/ac34fa280dc4ca9d6d13e6403ea43b91.js HTTP/1.1
Host: intoxicatefiglowest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:00:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0fe0a07e7a4ca4a717690338d92f6531
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL ocsp.r2m03.amazontrust.com/
IP 54.230.218.11:0
Hash 5f98417c5efbc404cdc6e1eddca05845
123fef79582954e02a5acbd4b65e5c8c5ba14397
7e4f8947cb87eff6976f88fd49a323f00ec79211df4f468d9c622c91c42de0d1
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 30 Nov 2023 12:00:16 GMT
Last-Modified: Thu, 30 Nov 2023 11:31:49 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LQoBDetX7h0Zg-xKxVhvYXtyGMffUvNMI0x7BFXjL6nUFBdl22yVZg==
Age: 1707
proftrafficcounter.com/stats
18.185.191.211200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.185.191.211:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 8a23bec6e512abd96408347875996850
a6e1ad58665cc7e634bd12298716eb0a42c1299d
b4de732cb66910b3ad6bed4b7cf1d1e372f59498e08c0b10ee320c763b26de64
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://softsparkling.site
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=3f4e53f5-ec94-4bdf-8b85-ba084eacf844:3:1; expires=Sun, 27 Nov 2033 12:00:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
softsparkling.site/favicon-16x16.png
172.67.203.22200 OK 385 B URL GET HTTP/3 softsparkling.site/favicon-16x16.png
IP 172.67.203.22:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d6f31b1eae7d596ff490b0ce3545271
5ee1f8f66701199e681504ab8b8ca47fd75c9b1e
afe665ba36977d0dc4e95a4cf7dab4bc3d3c222be1425e9c5dad074c1e7bbfe9
GET /favicon-16x16.png HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=3f4e53f5-ec94-4bdf-8b85-ba084eacf844%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:16 GMT
content-type: image/png
content-length: 385
last-modified: Wed, 04 Jan 2023 03:57:53 GMT
etag: "63b4f941-181"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vlllej3dq%2BSFuFy8Fdwu6qB6v5NOdFlPvPv5iXzaIF5zB7zk4%2FoltKTnaxMeNgIFSs82Q3xdWgCHlxIg41ewC7tsjzl9gOR2Q9VQrJqK2zt4lfTCGqVMfAur4%2BoU6tG2S%2Fnl7k4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edd88808712e-OSL
alt-svc: h3=":443"; ma=86400
softsparkling.site/apple-touch-icon.png
172.67.203.22200 OK 5.1 kB URL GET HTTP/3 softsparkling.site/apple-touch-icon.png
IP 172.67.203.22:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 63cd7cffb689abc8e7781a2bce6eb81d
31e4d77177dd9b5db1af3bc432ff1dfaf02070a8
d2d6adb1901d939a3f5c2c012e26210a43d524e724f876eb8da58f5dae2fa577
GET /apple-touch-icon.png HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=3f4e53f5-ec94-4bdf-8b85-ba084eacf844%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:16 GMT
content-type: image/png
content-length: 5121
last-modified: Wed, 04 Jan 2023 03:57:49 GMT
etag: "63b4f93d-1401"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZkdzNCQgLnHmDPi1iRXwpPcUSoFL06iEaRoOvtU%2BaG%2F2X616Jh0OUaiDTNrwLOStdUU0ytW9XwznrfiaK9V%2F8%2F4ICJQeAhmIBZ%2BQ66tRWw6nOiT2%2BCMw7t45UNliHzhswqqhdzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edd88806712e-OSL
alt-svc: h3=":443"; ma=86400
anticipatedthirteen.com/98/ec/3a/98ec3a723d1e7ac65e08114e77dd03bd.js
192.243.61.227200 OK 23 kB URL GET HTTP/1.1 anticipatedthirteen.com/98/ec/3a/98ec3a723d1e7ac65e08114e77dd03bd.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectanticipatedthirteen.com
FingerprintCC:17:E5:B3:52:51:1B:BF:80:D1:31:E9:B9:2F:F9:0F:9D:59:13:28
ValidityTue, 28 Nov 2023 11:03:31 GMT - Mon, 26 Feb 2024 11:03:30 GMT
File type ASCII text, with very long lines (59653), with no line terminators
Hash b6f443947c7b60968eaab699fc720311
dd992cbd64ec1ee78f9365f2233d72dbba8e5ee3
ea3bbc68956ef8a4e4a9415aaf8909123bd03a6ab4cb323dc25535becfa23e8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /98/ec/3a/98ec3a723d1e7ac65e08114e77dd03bd.js HTTP/1.1
Host: anticipatedthirteen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:00:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b33fcbdd306cb93781e1ded5e8b9daf2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
anticipatedthirteen.com/sbar.json?key=ac34fa280dc4ca9d6d13e6403ea43b91&uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844%3A3%3A1
192.243.61.227200 OK 4.4 kB URL GET HTTP/1.1 anticipatedthirteen.com/sbar.json?key=ac34fa280dc4ca9d6d13e6403ea43b91&uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844%3A3%3A1
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectanticipatedthirteen.com
FingerprintCC:17:E5:B3:52:51:1B:BF:80:D1:31:E9:B9:2F:F9:0F:9D:59:13:28
ValidityTue, 28 Nov 2023 11:03:31 GMT - Mon, 26 Feb 2024 11:03:30 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6332), with no line terminators
Hash 4a3ab5f4e5cb914c3c67f3ddb92ef790
cecfa5206fb9c77f450bf057ab582c8d9aae3ea5
0d018b61001f7a195a1cf30b37490d806fef739b89dd65c61410d7f30a141b7c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=ac34fa280dc4ca9d6d13e6403ea43b91&uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844%3A3%3A1 HTTP/1.1
Host: anticipatedthirteen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:00:17 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://softsparkling.site
Access-Control-Allow-Origin: https://softsparkling.site
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17216069; expires=Fri, 01 Dec 2023 12:00:17 GMT; secure; SameSite=None
uid_id2=3f4e53f5-ec94-4bdf-8b85-ba084eacf844:3:1; expires=Thu, 07 Dec 2023 12:00:17 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Dec 2023 12:00:17 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Dec 2023 12:00:17 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 01 Dec 2023 12:00:17 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 01 Dec 2023 12:00:17 GMT; secure; SameSite=None
slecac34fa280dc4ca9d6d13e6403ea43b91=[4243974]; expires=Thu, 30 Nov 2023 12:00:22 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b47e72113e8f96386f54ee295a99afa9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
friendshipmale.com/sfp.js
104.21.234.33200 OK 27 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP 104.21.234.33:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d593f6935c3f5173c9e3f6776e0f1625
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 12:00:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bKuc0GgvKHjYzCiRJipHz4lQtUwWfOSWG1LQr%2BgO5guV1fIvVAe8eLlE9BNVzEJN5hkMqDvC2EG%2Fy%2FqvSol944RBIOHOD9d0aKm%2F7Tyag9bD%2BVliTNnQPu6nevqGodkeqfleezo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edda5bb856ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
landmarkfootnotary.com/pixel/purst?dl=0&th=0&sc=0&rs=2213&rd=2213&fd=598&bv=23.11.v.8&tmpl=136
192.243.61.227200 OK 0 B URL GET HTTP/1.1 landmarkfootnotary.com/pixel/purst?dl=0&th=0&sc=0&rs=2213&rd=2213&fd=598&bv=23.11.v.8&tmpl=136
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectlandmarkfootnotary.com
Fingerprint2C:92:6E:67:72:53:38:53:98:3A:A1:91:EC:A0:87:A7:07:5F:13:A1
ValidityTue, 28 Nov 2023 10:45:28 GMT - Mon, 26 Feb 2024 10:45:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2213&rd=2213&fd=598&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: landmarkfootnotary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:00:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
172.64.108.10200 OK 4.0 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
IP 172.64.108.10:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced\012- data
Hash 23e9690b0e7ac26868363a6248f44467
d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f
f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395
GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: image/png
content-length: 4022
last-modified: Tue, 14 Apr 2020 14:09:22 GMT
etag: "5e95c412-fb6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2539280
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Chc%2F7DmAn7jaUpkln4JnfO6PcJYnTXifQz7ddWUOnFiu8OLV3S11topdveY3Ia9rUfmyJ4N5Tn9V73wGi5B%2F1juI96ajyqhC9uJJL6cgipdyVsVz3AjgWZ6JGhAUlft%2FzCFWsLR4ilsd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edde6a8960e1-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
45.133.44.10200 OK 65 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
IP 45.133.44.10:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 887812a53b8ea2dbad33f6ae105b8c2d
f83d97ef46827200fa62093ed09b4b6fa25b26d8
9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9
GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: image/png
content-length: 64601
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:12:45 GMT
etag: "645411bd-fc59"
expires: Sat, 02 Dec 2023 12:00:17 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
45.133.44.10200 OK 39 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
IP 45.133.44.10:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6451b63b68b5068db02571051f6f6a30
32badef5d69090b4d2ea7b300bb5264938e198ef
b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819
GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: image/png
content-length: 39220
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:11:29 GMT
etag: "64541171-9934"
expires: Sat, 02 Dec 2023 12:00:17 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.131:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:52:12 GMT
expires: Thu, 28 Nov 2024 21:52:12 GMT
cache-control: public, max-age=31536000
age: 50886
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 23:43:03 GMT
expires: Tue, 26 Nov 2024 23:43:03 GMT
cache-control: public, max-age=31536000
age: 217035
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
anticipatedthirteen.com/pixel/sbs?c=1
192.243.59.12200 OK 0 B URL GET HTTP/1.1 anticipatedthirteen.com/pixel/sbs?c=1
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectanticipatedthirteen.com
FingerprintCC:17:E5:B3:52:51:1B:BF:80:D1:31:E9:B9:2F:F9:0F:9D:59:13:28
ValidityTue, 28 Nov 2023 11:03:31 GMT - Mon, 26 Feb 2024 11:03:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: anticipatedthirteen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Cookie: u_pl=17216069; uid_id2=3f4e53f5-ec94-4bdf-8b85-ba084eacf844:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:00:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
anticipatedthirteen.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRSv3q%2FLXlS8CAoDelAwk%2B7pnqTHPUTjbjQYk7i7koOn6qrqSZmarraqPybBQ3BB9jh68tj5TbIhusiud0E6etDAouNBcjD4Pwh7E2QmA9F36Pe6fq%2Fg91Gf7%2BVnxENOT9ff1ztSKTrbbrqNVzdkwnVpG6t3G57bdG80NmQyF9xo9McfU7zhue2m%2B1rjHcG29GzL9VzXc73GkjQi1v3ZCQqZPux4zY7bDFpNrx2gb%2F7%2Fb3MHljrgxRl5DpKPrm7%2B%2FBiS1Uh6j24Ku5Xp9PVbvVzRTBsU%2FPDDZCvRZYLexRgbB3FyON2GtiNCvroEnRxOFUAX%2B2MFiOSIOH94iJLDKU1ExcE500hBJIj4dZRFDaFqSFqD6XuQ%2FDcCMI7VNSS9B6valHT7HKVjdESuPP0bshyRK38%2Bj6T37aKS%2FcYdrfJM6sSiH1eQ%2FRqyWyPNj5HtOJDlMVj2GSR%2FQmafriDp7a9ZpSH56St%2BHIi2H7dnBOsEM0HE45kwCtszEXXDQFAWh0EwsUjKGjKuocQA1F5Gbh3k0kEeO8hTBz1%2B2qDtTuy683EU%2B34YMMZ8n7F2OMfb3A%2FC2EXOxhoGyNIBmBqAmV2kZhdbcgCT%2FwC7WcFyBzYjKHiFUhCUlqCkBKUkKDOCsqgOuLItWz3gyuaRN%2B2taferoc66e%2FRAZ12REFAz2EvPyLNj85xr393CljhtUOYHMW2FLmcBox0%2Bxz1fzAWuL2jgRx0PVlaQ9hKodbAjR%2BTFToh0nOinBSJ6DKuOweQzoPlLoOVwvuWCbg6D0MVOcpSJjNpmnCfgukKaXUG27eypM%2FLCJME362sQ7GThVzIpMFMhNRU%2Blj8SdNX94W1dkv3burTk8VqayZ7coeN072Q0E5e%2Ffk9sl9rw5Zt2cPQWGwPj8eFdYbMVmnCZdC35ZlFyLsySNkyQ75fthojWc7u5mJskT1fW315a7qVGWCt1UoPKESH1J2ByRK7%2F82Tycl82CtLUMHmFXn5CpgWpj8HSXdj0gr%2FVBEZd7ESpgzKvhqYVXRwqOSLvfvQXlDhZ%2BPLqLz%2B1jx6BRhWs%2BM%2FFi3nP3kfXOKDZPSS9CoWpUKgKVA1g88vDLDUnC7%2F7k0KknGGkjLMfKaO%2BODfYytNG2wtEGIXzjPNIMO7Nt%2FzQd90W58F8R3gdZHYkNrc%2F%2BBcAAP%2F%2FAQAA%2F%2F8fLRxZlQQAAA%3D%3D
192.243.61.227200 OK 7 B URL GET HTTP/1.1 anticipatedthirteen.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRSv3q%2FLXlS8CAoDelAwk%2B7pnqTHPUTjbjQYk7i7koOn6qrqSZmarraqPybBQ3BB9jh68tj5TbIhusiud0E6etDAouNBcjD4Pwh7E2QmA9F36Pe6fq%2Fg91Gf7%2BVnxENOT9ff1ztSKTrbbrqNVzdkwnVpG6t3G57bdG80NmQyF9xo9McfU7zhue2m%2B1rjHcG29GzL9VzXc73GkjQi1v3ZCQqZPux4zY7bDFpNrx2gb%2F7%2Fb3MHljrgxRl5DpKPrm7%2B%2FBiS1Uh6j24Ku5Xp9PVbvVzRTBsU%2FPDDZCvRZYLexRgbB3FyON2GtiNCvroEnRxOFUAX%2B2MFiOSIOH94iJLDKU1ExcE500hBJIj4dZRFDaFqSFqD6XuQ%2FDcCMI7VNSS9B6valHT7HKVjdESuPP0bshyRK38%2Bj6T37aKS%2FcYdrfJM6sSiH1eQ%2FRqyWyPNj5HtOJDlMVj2GSR%2FQmafriDp7a9ZpSH56St%2BHIi2H7dnBOsEM0HE45kwCtszEXXDQFAWh0EwsUjKGjKuocQA1F5Gbh3k0kEeO8hTBz1%2B2qDtTuy683EU%2B34YMMZ8n7F2OMfb3A%2FC2EXOxhoGyNIBmBqAmV2kZhdbcgCT%2FwC7WcFyBzYjKHiFUhCUlqCkBKUkKDOCsqgOuLItWz3gyuaRN%2B2taferoc66e%2FRAZ12REFAz2EvPyLNj85xr393CljhtUOYHMW2FLmcBox0%2Bxz1fzAWuL2jgRx0PVlaQ9hKodbAjR%2BTFToh0nOinBSJ6DKuOweQzoPlLoOVwvuWCbg6D0MVOcpSJjNpmnCfgukKaXUG27eypM%2FLCJME362sQ7GThVzIpMFMhNRU%2Blj8SdNX94W1dkv3burTk8VqayZ7coeN072Q0E5e%2Ffk9sl9rw5Zt2cPQWGwPj8eFdYbMVmnCZdC35ZlFyLsySNkyQ75fthojWc7u5mJskT1fW315a7qVGWCt1UoPKESH1J2ByRK7%2F82Tycl82CtLUMHmFXn5CpgWpj8HSXdj0gr%2FVBEZd7ESpgzKvhqYVXRwqOSLvfvQXlDhZ%2BPLqLz%2B1jx6BRhWs%2BM%2FFi3nP3kfXOKDZPSS9CoWpUKgKVA1g88vDLDUnC7%2F7k0KknGGkjLMfKaO%2BODfYytNG2wtEGIXzjPNIMO7Nt%2FzQd90W58F8R3gdZHYkNrc%2F%2BBcAAP%2F%2FAQAA%2F%2F8fLRxZlQQAAA%3D%3D
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectanticipatedthirteen.com
FingerprintCC:17:E5:B3:52:51:1B:BF:80:D1:31:E9:B9:2F:F9:0F:9D:59:13:28
ValidityTue, 28 Nov 2023 11:03:31 GMT - Mon, 26 Feb 2024 11:03:30 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRSv3q%2FLXlS8CAoDelAwk%2B7pnqTHPUTjbjQYk7i7koOn6qrqSZmarraqPybBQ3BB9jh68tj5TbIhusiud0E6etDAouNBcjD4Pwh7E2QmA9F36Pe6fq%2Fg91Gf7%2BVnxENOT9ff1ztSKTrbbrqNVzdkwnVpG6t3G57bdG80NmQyF9xo9McfU7zhue2m%2B1rjHcG29GzL9VzXc73GkjQi1v3ZCQqZPux4zY7bDFpNrx2gb%2F7%2Fb3MHljrgxRl5DpKPrm7%2B%2FBiS1Uh6j24Ku5Xp9PVbvVzRTBsU%2FPDDZCvRZYLexRgbB3FyON2GtiNCvroEnRxOFUAX%2B2MFiOSIOH94iJLDKU1ExcE500hBJIj4dZRFDaFqSFqD6XuQ%2FDcCMI7VNSS9B6valHT7HKVjdESuPP0bshyRK38%2Bj6T37aKS%2FcYdrfJM6sSiH1eQ%2FRqyWyPNj5HtOJDlMVj2GSR%2FQmafriDp7a9ZpSH56St%2BHIi2H7dnBOsEM0HE45kwCtszEXXDQFAWh0EwsUjKGjKuocQA1F5Gbh3k0kEeO8hTBz1%2B2qDtTuy683EU%2B34YMMZ8n7F2OMfb3A%2FC2EXOxhoGyNIBmBqAmV2kZhdbcgCT%2FwC7WcFyBzYjKHiFUhCUlqCkBKUkKDOCsqgOuLItWz3gyuaRN%2B2taferoc66e%2FRAZ12REFAz2EvPyLNj85xr393CljhtUOYHMW2FLmcBox0%2Bxz1fzAWuL2jgRx0PVlaQ9hKodbAjR%2BTFToh0nOinBSJ6DKuOweQzoPlLoOVwvuWCbg6D0MVOcpSJjNpmnCfgukKaXUG27eypM%2FLCJME362sQ7GThVzIpMFMhNRU%2Blj8SdNX94W1dkv3burTk8VqayZ7coeN072Q0E5e%2Ffk9sl9rw5Zt2cPQWGwPj8eFdYbMVmnCZdC35ZlFyLsySNkyQ75fthojWc7u5mJskT1fW315a7qVGWCt1UoPKESH1J2ByRK7%2F82Tycl82CtLUMHmFXn5CpgWpj8HSXdj0gr%2FVBEZd7ESpgzKvhqYVXRwqOSLvfvQXlDhZ%2BPLqLz%2B1jx6BRhWs%2BM%2FFi3nP3kfXOKDZPSS9CoWpUKgKVA1g88vDLDUnC7%2F7k0KknGGkjLMfKaO%2BODfYytNG2wtEGIXzjPNIMO7Nt%2FzQd90W58F8R3gdZHYkNrc%2F%2BBcAAP%2F%2FAQAA%2F%2F8fLRxZlQQAAA%3D%3D HTTP/1.1
Host: anticipatedthirteen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Cookie: u_pl=17216069; uid_id2=3f4e53f5-ec94-4bdf-8b85-ba084eacf844:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:00:18 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 47ca0272531a997ecfbc4dd19e0e4386
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=98ec3a723d1e7ac65e08114e77dd03bd&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12
192.243.59.12200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=98ec3a723d1e7ac65e08114e77dd03bd&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=98ec3a723d1e7ac65e08114e77dd03bd&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:00:18 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1621e482f48c14b036a3f37981501fe1
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=ac34fa280dc4ca9d6d13e6403ea43b91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12
192.243.59.12200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=ac34fa280dc4ca9d6d13e6403ea43b91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=3f4e53f5-ec94-4bdf-8b85-ba084eacf844&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=ac34fa280dc4ca9d6d13e6403ea43b91&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 30 Nov 2023 12:00:18 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a5a3f5ab7f707a2daa7718ea6a696ccc
Strict-Transport-Security: max-age=0; includeSubdomains
softsparkling.site/embed/1645251
172.67.203.22200 OK 6.9 kB URL GET HTTP/3 softsparkling.site/embed/1645251
IP 172.67.203.22:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6977), with no line terminators
Hash 943bb900bb91c459c53862e74bdfe605
06467d34b6463e908d9620033eb23fdba99d00ec
83d79748614b00d8d0a274fc217e981ae6caf0b41a258ca615f80870b8c6ef01
GET /embed/1645251 HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 30 Nov 2023 12:00:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v7%2F3Q%2B4BZyXZlNxrxqwZ6DGFwcHzv6CtinxaFDtA0tNHhStxEJL06473fErkd0ZW2nHfp4wd4ukwqtAwatt4diKvvVsH8wPV0bPfnRPCVtIS%2FHmEtCU10%2FlgMfMQKU7bY21V3Dk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2edcf3d59712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
172.64.108.10200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
IP 172.64.108.10:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 80047eaa13ebd50c50e8a9753621e430
9c503e07d130572a0eaf51f7c02cbd4cf6213fe3
3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET /sb/notifications/dating/default/us/desk-all/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: text/css
last-modified: Tue, 14 Apr 2020 14:09:21 GMT
etag: W/"5e95c411-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L%2F6ruUhEMnvUScDzTLCXztKGyZFhHvIcR0fnWOdh%2BSVt%2BZMzZZTwramsiTD6BXs2isy4w5W66Uml9SX%2BVXwCjgiixdMAGe6WYLjp8EKn0gIIBeYGkzA3Xe7pKqUtkUSeXdYyjZEAzfuj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edde3a1c60e1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
172.64.108.10200 OK 386 B URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
IP 172.64.108.10:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (399), with no line terminators
Hash 022602a468da44628060800173771da2
9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c
6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET /sb/notifications/dating/default/us/desk-all/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: application/javascript
last-modified: Tue, 14 Apr 2020 14:09:27 GMT
etag: W/"5e95c417-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sc9WvwwrOTLwRoZt5c2dhUoxpoY7SNUQSF5jE6rkaVaJlkQgi0jz4xKDKz39qH4L3nW8mYu6Fuyy1UDLcMA%2BIXLLDMu%2B63qII3v3KAxB6mYvc6esB6Z6TFkhsYK4nos5BAdMN7Pwg3%2Fd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edde3a2d60e1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.106200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.106:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 12:00:17 GMT
date: Thu, 30 Nov 2023 12:00:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
softsparkling.site/blog/1645251/Softsparkling%20dildo/
172.67.203.22200 OK 16 kB URL User Request GET HTTP/2 softsparkling.site/blog/1645251/Softsparkling%20dildo/
IP 172.67.203.22:443
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /blog/1645251/Softsparkling%20dildo/ HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 30 Nov 2023 12:00:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Afkq2ybLaLB7GmsRPCxu1yuxL6mYXvBMGAGPeE1JskXqVB%2BELdybkQdZvsc2C3VgB8rkMF4LdFhfwbdkFbNdA1mhRA2RZLha6W07dSMiqWwrO29sA2UyssOA2zzq0LyKb7kmZ%2Bs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2edccfcf8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
softsparkling.site/style.css
172.67.203.22200 OK 16 kB URL GET HTTP/3 softsparkling.site/style.css
IP 172.67.203.22:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectsoftsparkling.site
FingerprintCD:5A:04:36:F1:9E:B1:96:A9:01:F1:64:E1:B7:84:70:99:85:5B:E0
ValiditySun, 29 Oct 2023 13:43:22 GMT - Sat, 27 Jan 2024 13:43:21 GMT
File type ASCII text, with very long lines (16203), with no line terminators
Hash b302a672a734199dc1e3184d8c5e3cf0
e0b61caf358791268cdcb8af914c0624cac67938
0e92c2a7c33d81b7053644f2b9a6d6e50ab3c31f6b6186ce766569e5ebc813fa
GET /style.css HTTP/1.1
Host: softsparkling.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:15 GMT
content-type: text/css
cache-control: max-age=315360000
cf-bgj: minify
cf-polished: origSize=16371
etag: W/"63b4f94e-3ff3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 04 Jan 2023 03:58:06 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 72
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z3FHRu9%2FaGOyB3QPuMNVOCzexifltozZBkpdDraKwG2fHZM2Rue%2FIEe6fbsdjOYHVRZZnBPYWpoEnjv9J230zsvZfD3w0nZOEJL3zLhEpNd%2Fp6gK%2BNoroDCbsnea%2BbBVUOi3tk4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2edcf3d64712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
code.ionicframework.com/ionicons/2.0.1/fonts/ionicons.ttf?v=2.0.1
104.26.7.173200 OK 188 kB URL GET HTTP/3 code.ionicframework.com/ionicons/2.0.1/fonts/ionicons.ttf?v=2.0.1
IP 104.26.7.173:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerCloudflare, Inc.
Subjectionicframework.com
FingerprintF0:95:87:C3:E4:A0:31:2D:83:93:BF:FD:9F:E3:6A:84:64:FB:AC:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type TrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh\012- data
Size 188 kB (188508 bytes)
Hash dd4781d1acc57ba4c4808d1b44301201
956116ebe4b3a315b1a43009567e6f8ad0a9a720
5e700835ec05293a3d0f9e354e7d038319d34521cd279e782198dff6d1dd58f2
GET /ionicons/2.0.1/fonts/ionicons.ttf?v=2.0.1 HTTP/1.1
Host: code.ionicframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://code.ionicframework.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 12:00:15 GMT
content-type: font/ttf
last-modified: Thu, 13 Apr 2023 16:20:19 GMT
access-control-allow-origin: *
etag: W/"64382bc3-2e05c"
expires: Tue, 14 Nov 2023 02:18:08 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
x-github-request-id: 60DC:8389:10E8A74:1128DA4:6552D73E
via: 1.1 varnish
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1701345616.570448,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: bc942ac33e3541e7a667534331847c4a1e027285
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GJ7Wn%2F%2BXF%2B8jbwjqTpSGJfpK3otGUuzUEzm%2BSSldzJnN1YSahuVOrcUO6CSURVqFnE%2Br0CeyldQVz1NZGW3S0lo7fY2h2n9djcrwr%2FFb%2BFqW35Q34UHAYrBszZFrw01J93YkIyodzXoo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e2edd13a6d56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/mavenpro/v32/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8SX21nejog.woff2
142.250.74.131200 OK 9.4 kB URL GET HTTP/2 fonts.gstatic.com/s/mavenpro/v32/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8SX21nejog.woff2
IP 142.250.74.131:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9412, version 1.0\012- data
Hash 2e1e2874a5b386ca7c934eec2c035302
24ca9d7e8a83a8139379d47ffc89edc936d08773
5322cfb86c34d58be1390ce31d71b3c09de2b11979b7baeff52c0461fb7c534a
GET /s/mavenpro/v32/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8SX21nejog.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 23:53:22 GMT
expires: Tue, 26 Nov 2024 23:53:22 GMT
cache-control: public, max-age=31536000
age: 216413
last-modified: Mon, 11 Jul 2022 20:35:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html
45.133.44.4200 OK 1.3 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html
IP 45.133.44.4:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F
ValiditySat, 11 Nov 2023 03:00:51 GMT - Fri, 09 Feb 2024 03:00:50 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1388), with no line terminators
Hash 1e11fba825d4244ebfc11b9784c9744f
86f24edfd397e9f4d65e589ceb97196b71d2d828
7737a119c12f495c4f32f75686c087c59387d5f851ec8c5443a385dda8c5df76
GET /sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sat, 07 May 2022 03:21:27 GMT
etag: W/"6275e5b7-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 30 Nov 2023 13:00:17 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/style.css
172.64.108.10200 OK 5.8 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/style.css
IP 172.64.108.10:443
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (6136), with no line terminators
Hash 9f80fb73071a2440f4592b4422167a7a
bbd9cd5f77ec53153284f71655920f35815c6c4b
0a1eda0aa145d20b7434500ebb9087051733b0e11eb2187a237a2891b0973b9d
GET /sb/notifications/dating/default/us/desk-all/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://softsparkling.site
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 12:00:17 GMT
content-type: text/css
last-modified: Fri, 27 Aug 2021 11:38:00 GMT
etag: W/"6128ce98-169c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ARFZ3HM%2FuRSjCKadqUetar3iqUd%2BCD%2B6tbr153RrLXpMRrQNKtqdtqiQqI00CXTDX7axP1%2F27iKGl%2BKUdLEe8Zro8VlEv2f%2FNNaxRUSebiBpsqn6gEGecQBuCP%2FMEGDj%2Bi5oE0Tlkd1l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e2edde3a2760e1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
anticipatedthirteen.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRSfzVeTBhANEkgnQQESPu%2Fe7tp3pAiEJBBhbJMEuaCarz0PnttZZnZvzxaFRSSU8qCiXP%2FOjmWIUEKPhNZQgKUIjgK5wOJ%2FQEqHhO58kuEV%2B97O7430%2B5jPd4oTEqCgx6vvmy2lNZ2Pm37j1TWVClO6xvLdRuA3%2FSuNNZUuRFcag8nH9t8I%2FLjpv9Z4R%2FINM9%2FyA98P%2FKBxU1mZmMH8FIXKHnaCZsdvRq1mEEcY2P%2F%2Fu8KDox5E%2F4Q8ByXGF9d%2FfgzFa6S9R9el28hN9vqNXqFpbiz6Yv%2FDdCM1ZYre2ZhYD0m6P9uGcWNCvjoHk%2B7PFMD0dycKwNSYeH8EYOn%2BjCZYf%2B%2BUKdOQKZi4jLJfQ%2Boaitbg5h6U%2BI0AXGB5BWnvwbKxJd08RekEHZMLT%2F%2BGKsfkwp%2FPI%2B19e02rQeOO0UWuTOowSCqoQQ3VrZEVh8i3PKjyEDz%2FDEo8IfNPl5D2dlecNlDi%2BJUwiWQcJvGc5J1oLmIimWuzdjzHqN%2BOJOVJO4qmFilVQyU1tByCuvMonIdCeSgSD0XmoSeOGzTuJL6%2FmLAkDNsR5zwMOY%2FbCyIWYdROfBR8omGIPBuC6yG43UZmt7GhhrDFD3DrFZzw4HKCvqhQSoLSEZSUoFQEZU5Q9qs9oV3LVQ%2BEdgULZr0162E1Mnl3h%2B6ZvCtTAmqHO9kJeXZinnfpuxvYkMcNysMooa22L3jEaUcsiCCUC5EfShqFrBPAqQrKnQN1HrbUmLzYaSObJPppH4wewulDcPUMaPESaDlabPmg66Oo7WMrPchlTl0zKVIIUyHLLyDf9Hb0CXlhmuCb9SVIfnT1VzItcFshsxU%2BVj8SdPX90W1Tkt3bpnTk8UqWq57aopN07%2BQ0l%2Be%2Ffk9ulsaKW9fd8OAtPgEm48O70uVLNBUq7TryzTUlhLQ3jeWSfH%2FLrUm2Wrj1a4VNi2xp9e2bt3qZlc4pk9agakxI%2FQm4GpPL%2FzyZvtyXrYayNWxRoVcckVlBmUPwbBsuO%2BPvDIHVZzss81AW1ci22NmhVmPy7kd%2FQcujq19e%2FOWn%2BOARKKvg5H8uns077j661gPN7yHtVejbCn1dgeohXHF%2BlGf26Orv4bTAtDdi2nq7TFv9xanBTh03ZJz4ifRbkiUdlixSX3SSqMNoJ5CLLKYBcjeW65sf%2FAsAAP%2F%2FAQAA%2F%2F8LJZK%2FlQQAAA%3D%3D
192.243.61.227200 OK 0 B URL GET HTTP/1.1 anticipatedthirteen.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRSfzVeTBhANEkgnQQESPu%2Fe7tp3pAiEJBBhbJMEuaCarz0PnttZZnZvzxaFRSSU8qCiXP%2FOjmWIUEKPhNZQgKUIjgK5wOJ%2FQEqHhO58kuEV%2B97O7430%2B5jPd4oTEqCgx6vvmy2lNZ2Pm37j1TWVClO6xvLdRuA3%2FSuNNZUuRFcag8nH9t8I%2FLjpv9Z4R%2FINM9%2FyA98P%2FKBxU1mZmMH8FIXKHnaCZsdvRq1mEEcY2P%2F%2Fu8KDox5E%2F4Q8ByXGF9d%2FfgzFa6S9R9el28hN9vqNXqFpbiz6Yv%2FDdCM1ZYre2ZhYD0m6P9uGcWNCvjoHk%2B7PFMD0dycKwNSYeH8EYOn%2BjCZYf%2B%2BUKdOQKZi4jLJfQ%2Boaitbg5h6U%2BI0AXGB5BWnvwbKxJd08RekEHZMLT%2F%2BGKsfkwp%2FPI%2B19e02rQeOO0UWuTOowSCqoQQ3VrZEVh8i3PKjyEDz%2FDEo8IfNPl5D2dlecNlDi%2BJUwiWQcJvGc5J1oLmIimWuzdjzHqN%2BOJOVJO4qmFilVQyU1tByCuvMonIdCeSgSD0XmoSeOGzTuJL6%2FmLAkDNsR5zwMOY%2FbCyIWYdROfBR8omGIPBuC6yG43UZmt7GhhrDFD3DrFZzw4HKCvqhQSoLSEZSUoFQEZU5Q9qs9oV3LVQ%2BEdgULZr0162E1Mnl3h%2B6ZvCtTAmqHO9kJeXZinnfpuxvYkMcNysMooa22L3jEaUcsiCCUC5EfShqFrBPAqQrKnQN1HrbUmLzYaSObJPppH4wewulDcPUMaPESaDlabPmg66Oo7WMrPchlTl0zKVIIUyHLLyDf9Hb0CXlhmuCb9SVIfnT1VzItcFshsxU%2BVj8SdPX90W1Tkt3bpnTk8UqWq57aopN07%2BQ0l%2Be%2Ffk9ulsaKW9fd8OAtPgEm48O70uVLNBUq7TryzTUlhLQ3jeWSfH%2FLrUm2Wrj1a4VNi2xp9e2bt3qZlc4pk9agakxI%2FQm4GpPL%2FzyZvtyXrYayNWxRoVcckVlBmUPwbBsuO%2BPvDIHVZzss81AW1ci22NmhVmPy7kd%2FQcujq19e%2FOWn%2BOARKKvg5H8uns077j661gPN7yHtVejbCn1dgeohXHF%2BlGf26Orv4bTAtDdi2nq7TFv9xanBTh03ZJz4ifRbkiUdlixSX3SSqMNoJ5CLLKYBcjeW65sf%2FAsAAP%2F%2FAQAA%2F%2F8LJZK%2FlQQAAA%3D%3D
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://softsparkling.site/blog/1645251/Softsparkling%20dildo/
Certificate IssuerLet's Encrypt
Subjectanticipatedthirteen.com
FingerprintCC:17:E5:B3:52:51:1B:BF:80:D1:31:E9:B9:2F:F9:0F:9D:59:13:28
ValidityTue, 28 Nov 2023 11:03:31 GMT - Mon, 26 Feb 2024 11:03:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSvW8cRRSfzVeTBhANEkgnQQESPu%2Fe7tp3pAiEJBBhbJMEuaCarz0PnttZZnZvzxaFRSSU8qCiXP%2FOjmWIUEKPhNZQgKUIjgK5wOJ%2FQEqHhO58kuEV%2B97O7430%2B5jPd4oTEqCgx6vvmy2lNZ2Pm37j1TWVClO6xvLdRuA3%2FSuNNZUuRFcag8nH9t8I%2FLjpv9Z4R%2FINM9%2FyA98P%2FKBxU1mZmMH8FIXKHnaCZsdvRq1mEEcY2P%2F%2Fu8KDox5E%2F4Q8ByXGF9d%2FfgzFa6S9R9el28hN9vqNXqFpbiz6Yv%2FDdCM1ZYre2ZhYD0m6P9uGcWNCvjoHk%2B7PFMD0dycKwNSYeH8EYOn%2BjCZYf%2B%2BUKdOQKZi4jLJfQ%2Boaitbg5h6U%2BI0AXGB5BWnvwbKxJd08RekEHZMLT%2F%2BGKsfkwp%2FPI%2B19e02rQeOO0UWuTOowSCqoQQ3VrZEVh8i3PKjyEDz%2FDEo8IfNPl5D2dlecNlDi%2BJUwiWQcJvGc5J1oLmIimWuzdjzHqN%2BOJOVJO4qmFilVQyU1tByCuvMonIdCeSgSD0XmoSeOGzTuJL6%2FmLAkDNsR5zwMOY%2FbCyIWYdROfBR8omGIPBuC6yG43UZmt7GhhrDFD3DrFZzw4HKCvqhQSoLSEZSUoFQEZU5Q9qs9oV3LVQ%2BEdgULZr0162E1Mnl3h%2B6ZvCtTAmqHO9kJeXZinnfpuxvYkMcNysMooa22L3jEaUcsiCCUC5EfShqFrBPAqQrKnQN1HrbUmLzYaSObJPppH4wewulDcPUMaPESaDlabPmg66Oo7WMrPchlTl0zKVIIUyHLLyDf9Hb0CXlhmuCb9SVIfnT1VzItcFshsxU%2BVj8SdPX90W1Tkt3bpnTk8UqWq57aopN07%2BQ0l%2Be%2Ffk9ulsaKW9fd8OAtPgEm48O70uVLNBUq7TryzTUlhLQ3jeWSfH%2FLrUm2Wrj1a4VNi2xp9e2bt3qZlc4pk9agakxI%2FQm4GpPL%2FzyZvtyXrYayNWxRoVcckVlBmUPwbBsuO%2BPvDIHVZzss81AW1ci22NmhVmPy7kd%2FQcujq19e%2FOWn%2BOARKKvg5H8uns077j661gPN7yHtVejbCn1dgeohXHF%2BlGf26Orv4bTAtDdi2nq7TFv9xanBTh03ZJz4ifRbkiUdlixSX3SSqMNoJ5CLLKYBcjeW65sf%2FAsAAP%2F%2FAQAA%2F%2F8LJZK%2FlQQAAA%3D%3D HTTP/1.1
Host: anticipatedthirteen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://softsparkling.site/
Cookie: u_pl=17216069; uid_id2=3f4e53f5-ec94-4bdf-8b85-ba084eacf844:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecac34fa280dc4ca9d6d13e6403ea43b91=[4243974]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 30 Nov 2023 12:00:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 31451c3c8e5fd96a30038f180396c0de
Strict-Transport-Security: max-age=0; includeSubdomains