r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6d997a3e4c838d12e34de2dd2d4208c3
386abb53e2df86f291b6a86765d9a6feb88ba30b
32e00abd54407308b80a14e2916a119d95d90b1e7842f8cf0e87df306287869c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "32E00ABD54407308B80A14E2916A119D95D90B1E7842F8CF0E87DF306287869C"
Last-Modified: Thu, 20 Jun 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2475
Expires: Sat, 22 Jun 2024 18:05:51 GMT
Date: Sat, 22 Jun 2024 17:24:36 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31c219b3ac9b4615f1a78cd882995e6c
1bb1aedb59500ceabd4f44ae9b7317c544084afd
6e8de7454df9b981f3c2bd8746558f3eb5c48599c66fc0f5301169c0ed42c8fe
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6E8DE7454DF9B981F3C2BD8746558F3EB5C48599C66FC0F5301169C0ED42C8FE"
Last-Modified: Sat, 22 Jun 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16509
Expires: Sat, 22 Jun 2024 21:59:45 GMT
Date: Sat, 22 Jun 2024 17:24:36 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f0269d61bdfd971c035a90020cb9f629
06631fd5df5a9bd3b9673361601cc37a34e64f69
47b785dc0588f89f6a0bd23143e340c2fa04f194c59853f63e8b937964655373
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "47B785DC0588F89F6A0BD23143E340C2FA04F194C59853F63E8B937964655373"
Last-Modified: Sat, 22 Jun 2024 04:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11285
Expires: Sat, 22 Jun 2024 20:32:42 GMT
Date: Sat, 22 Jun 2024 17:24:37 GMT
Connection: keep-alive
gensonal.com/j9v2sfpnby?key=5b651019775a59683dbbecc1b00d2a22&s2s=ade88gxqdgm6j8n88a
35.157.149.252 0 B URL gensonal.com/j9v2sfpnby?key=5b651019775a59683dbbecc1b00d2a22&s2s=ade88gxqdgm6j8n88a
IP 35.157.149.252:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j9v2sfpnby?key=5b651019775a59683dbbecc1b00d2a22&s2s=ade88gxqdgm6j8n88a HTTP/1.1
Host: gensonal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 22 Jun 2024 17:24:37 GMT
content-length: 0
location: https://1of.backluck.shop/?utm_medium=a7ff87d4f3a4b18a37dc1d598c31f21445711faf&utm_campaign=trafficback
server: nginx/1.19.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: backurled=5b651019775a59683dbbecc1b00d2a22; expires=Sat, 22 Jun 2024 17:25:37 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-request-id: ac775bfad2e9627fd18cf649d210a342
cache-control: no-cache, max-age=0, private, no-cache
pragma: no-cache, no-cache
X-Firefox-Spdy: h2
www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291
51.68.82.147 4.4 kB URL www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291
IP 51.68.82.147:0
File type HTML document, ASCII text, with very long lines (3490)
Hash 569f0ff3d6a29d8489f51113757fcfa1
039d0fbc4b9c719033ee330427a7e89c6dcaddfe
79c628b90a505dd4ab6985a84e26a35d09e415b9bd9e6b4a5e600d98f5903a96
GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291 HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1of.backluck.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 22 Jun 2024 17:24:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-transform
Accept-CH: Sec-CH-UA-Platform-Version
www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=57527e5be7ba38d94057016f5efba621&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop
51.68.82.147 0 B URL www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=57527e5be7ba38d94057016f5efba621&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop
IP 51.68.82.147:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=57527e5be7ba38d94057016f5efba621&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 22 Jun 2024 17:24:38 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=3&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop
www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=3&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop
51.68.82.147 0 B URL www.trimbuilder.foundation/?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=3&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop
IP 51.68.82.147:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5768231-bead7&data1=Track1&data2=Track2&tag=M7383379825035051177&website=23291-5ff0790z&placement=23291&eyeg=3&eyer=0.20495846153146102&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=1of.backluck.shop HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 22 Jun 2024 17:24:38 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://click2kikc.xyz/go/4995/3?subid2=902&subid1=33000fafd5596e1bdc16e46b02436111e235f0622-202406-flb*5768231-bead7*M7383379825035051177*sl_5768231-bead7*5613296ed8e7b0c5a9c449725de07f41b6ecb7ac*23291-5ff0790z*23291
r11.o.lencr.org/
23.36.77.32 504 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 985a419f45a30033c8ece5be927f1e25
16ae762e66df55c545dbe92e166d0123c44687b8
428a12c6392dbf4a6e921319f2feb445b83207150e7bd6f3caa0fdfa16015161
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "428A12C6392DBF4A6E921319F2FEB445B83207150E7BD6F3CAA0FDFA16015161"
Last-Modified: Fri, 21 Jun 2024 19:43:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5100
Expires: Sat, 22 Jun 2024 18:49:38 GMT
Date: Sat, 22 Jun 2024 17:24:38 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20190
Expires: Sat, 22 Jun 2024 23:01:09 GMT
Date: Sat, 22 Jun 2024 17:24:39 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20190
Expires: Sat, 22 Jun 2024 23:01:09 GMT
Date: Sat, 22 Jun 2024 17:24:39 GMT
Connection: keep-alive
click2kikc.xyz/go/4995/3?subid2=902&subid1=33000fafd5596e1bdc16e46b02436111e235f0622-202406-flb*5768231-bead7*M7383379825035051177*sl_5768231-bead7*5613296ed8e7b0c5a9c449725de07f41b6ecb7ac*23291-5ff0790z*23291
91.209.226.54 279 B URL click2kikc.xyz/go/4995/3?subid2=902&subid1=33000fafd5596e1bdc16e46b02436111e235f0622-202406-flb*5768231-bead7*M7383379825035051177*sl_5768231-bead7*5613296ed8e7b0c5a9c449725de07f41b6ecb7ac*23291-5ff0790z*23291
IP 91.209.226.54:0
File type HTML document, ASCII text
Hash 475f36097835014a366aa6f6ae69f865
73e87e46a46c8c0fa1af1fb303dd62d1d922225c
265f2567c1a3a88f6cfc05842b9244af7e0ab19ce42180abdfedeff934881a41
GET /go/4995/3?subid2=902&subid1=33000fafd5596e1bdc16e46b02436111e235f0622-202406-flb*5768231-bead7*M7383379825035051177*sl_5768231-bead7*5613296ed8e7b0c5a9c449725de07f41b6ecb7ac*23291-5ff0790z*23291 HTTP/1.1
Host: click2kikc.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 22 Jun 2024 17:24:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 279
Connection: keep-alive
X-Powered-By: PHP/7.2.34-8+ubuntu20.04.1+deb.sury.org+1
Content-Encoding: identity
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sat, 22 Jun 2024 17:24:39 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: mobitck=1; expires=Sat, 22-Jun-2024 23:59:59 GMT; Max-Age=23720; path=/; HttpOnly
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20190
Expires: Sat, 22 Jun 2024 23:01:09 GMT
Date: Sat, 22 Jun 2024 17:24:39 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20190
Expires: Sat, 22 Jun 2024 23:01:09 GMT
Date: Sat, 22 Jun 2024 17:24:39 GMT
Connection: keep-alive
r10.o.lencr.org/
23.36.76.226 504 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6720792332fb717894b4e5221fdc3d86
f79b1d3611fb53cea950acb15000473ae7174149
67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20190
Expires: Sat, 22 Jun 2024 23:01:09 GMT
Date: Sat, 22 Jun 2024 17:24:39 GMT
Connection: keep-alive
www.trimbuilder.foundation/favicon.ico
51.68.82.147 0 B URL www.trimbuilder.foundation/favicon.ico
IP 51.68.82.147:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.trimbuilder.foundation
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Sat, 22 Jun 2024 17:24:39 GMT
Connection: keep-alive
dotranquilla.com/sftouch?userId=0080831fa2654feffd2940c239afe09f&z=7482447&p_rid=130a6e11-ce03-4dbd-9099-8fa67c2c258d&p_src=sf&branchId=0&rb=hIVpz65pDsm5ie4Vf5HHnVo6TE_P08oBeiSx_R4Lfuy1CUtJukeqFWQM7rEBcXJ0ibhMtW4BTjeLQ5LNUgSVav4W-F5g0bKW-nUOtOE8nPTZr1gLgNgw9c0eTMTkOqLeEOXaEcWZIc2RhN4bxWuB20DS9PhTIVZNmBU6urvuVjZRBlHV5UxKkGrW7HDUoLB8jo_0ceT1nZfeHJcbIfuVGkaPeWeKe1hhILMPiPpv6h9L-kH5qpEqGzd-9f7CHUOMyRVstA==
139.45.197.244 2 B URL dotranquilla.com/sftouch?userId=0080831fa2654feffd2940c239afe09f&z=7482447&p_rid=130a6e11-ce03-4dbd-9099-8fa67c2c258d&p_src=sf&branchId=0&rb=hIVpz65pDsm5ie4Vf5HHnVo6TE_P08oBeiSx_R4Lfuy1CUtJukeqFWQM7rEBcXJ0ibhMtW4BTjeLQ5LNUgSVav4W-F5g0bKW-nUOtOE8nPTZr1gLgNgw9c0eTMTkOqLeEOXaEcWZIc2RhN4bxWuB20DS9PhTIVZNmBU6urvuVjZRBlHV5UxKkGrW7HDUoLB8jo_0ceT1nZfeHJcbIfuVGkaPeWeKe1hhILMPiPpv6h9L-kH5qpEqGzd-9f7CHUOMyRVstA==
IP 139.45.197.244:0
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /sftouch?userId=0080831fa2654feffd2940c239afe09f&z=7482447&p_rid=130a6e11-ce03-4dbd-9099-8fa67c2c258d&p_src=sf&branchId=0&rb=hIVpz65pDsm5ie4Vf5HHnVo6TE_P08oBeiSx_R4Lfuy1CUtJukeqFWQM7rEBcXJ0ibhMtW4BTjeLQ5LNUgSVav4W-F5g0bKW-nUOtOE8nPTZr1gLgNgw9c0eTMTkOqLeEOXaEcWZIc2RhN4bxWuB20DS9PhTIVZNmBU6urvuVjZRBlHV5UxKkGrW7HDUoLB8jo_0ceT1nZfeHJcbIfuVGkaPeWeKe1hhILMPiPpv6h9L-kH5qpEqGzd-9f7CHUOMyRVstA== HTTP/1.1
Host: dotranquilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dotranquilla.com
DNT: 1
Connection: keep-alive
Referer: https://dotranquilla.com/4/7482447?var=4995&ymid=13kjqqs1g0084
Cookie: OAID=0080831fa2654feffd2940c239afe09f; oaidts=1719077079
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Jun 2024 17:24:39 GMT
content-type: text/plain
content-length: 2
x-trace-id: a596e474353354e6ca59abe52de39394
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://dotranquilla.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=merge&userId=0080831fa2654feffd2940c239afe09f&z=7482447&p_rid=130a6e11-ce03-4dbd-9099-8fa67c2c258d&p_src=sf
139.45.195.8 43 B URL my.rtmark.net/img.gif?f=merge&userId=0080831fa2654feffd2940c239afe09f&z=7482447&p_rid=130a6e11-ce03-4dbd-9099-8fa67c2c258d&p_src=sf
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=0080831fa2654feffd2940c239afe09f&z=7482447&p_rid=130a6e11-ce03-4dbd-9099-8fa67c2c258d&p_src=sf HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dotranquilla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 22 Jun 2024 17:24:39 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080831fa2654feffd2940c239afe09f; expires=Sun, 22 Jun 2025 17:24:39 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dotranquilla.com/favicon.ico
139.45.197.244 0 B URL dotranquilla.com/favicon.ico
IP 139.45.197.244:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: dotranquilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dotranquilla.com/4/7482447?var=4995&ymid=13kjqqs1g0084
Cookie: OAID=0080831fa2654feffd2940c239afe09f; oaidts=1719077079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 22 Jun 2024 17:24:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
POST dotranquilla.com/?z=7482447&syncedCookie=true&rhd=false
139.45.197.244302 Found 0 B URL User Request POST HTTP/2 dotranquilla.com/?z=7482447&syncedCookie=true&rhd=false
IP 139.45.197.244:443
Certificate IssuerLet's Encrypt
Subjectdotranquilla.com
Fingerprint92:96:C7:0D:C7:80:61:7D:34:DF:25:52:C7:B9:ED:A2:85:3D:67:3C
ValidityFri, 10 May 2024 12:49:13 GMT - Thu, 08 Aug 2024 12:49:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /?z=7482447&syncedCookie=true&rhd=false HTTP/1.1
Host: dotranquilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 590
Origin: https://dotranquilla.com
DNT: 1
Connection: keep-alive
Referer: https://dotranquilla.com/afu.php?zoneid=7482447&var=7482447&rid=XXz4jyvWNyEJSqRKY8d18w%3D%3D&rhd=false&ab2r=0&sf=1
Cookie: OAID=0080831fa2654feffd2940c239afe09f; oaidts=1719077079
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 22 Jun 2024 17:24:40 GMT
content-length: 0
location: https://singelstodate.com/base.php?c=5713&key=5b8f3324e319ed734d6a1dec5ea2cb1d&zoneid=7482447&cost=0.000600&subid=828431920659702219&bann=21302642&subzone_id=0
x-trace-id: 17117f91feaad00d68c32960811db7dc
link: <https://singelstodate.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://dotranquilla.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080831fa2654feffd2940c239afe09f; expires=Sun, 22 Jun 2025 17:24:39 GMT; path=/; secure; SameSite=None
oaidts=1719077079; expires=Sun, 22 Jun 2025 17:24:39 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 29 Jun 2024 17:24:39 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET singelstodate.com/base.php?c=5713&key=5b8f3324e319ed734d6a1dec5ea2cb1d&zoneid=7482447&cost=0.000600&subid=828431920659702219&bann=21302642&subzone_id=0
68.66.228.109302 Found 0 B URL User Request GET HTTP/2 singelstodate.com/base.php?c=5713&key=5b8f3324e319ed734d6a1dec5ea2cb1d&zoneid=7482447&cost=0.000600&subid=828431920659702219&bann=21302642&subzone_id=0
IP 68.66.228.109:443
Certificate IssuerLet's Encrypt
Subject*.singelstodate.com
FingerprintA9:60:50:A6:46:EE:E9:07:32:76:90:9E:AD:2E:E9:A4:84:61:3A:5B
ValidityMon, 29 Apr 2024 06:46:44 GMT - Sun, 28 Jul 2024 06:46:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /base.php?c=5713&key=5b8f3324e319ed734d6a1dec5ea2cb1d&zoneid=7482447&cost=0.000600&subid=828431920659702219&bann=21302642&subzone_id=0 HTTP/1.1
Host: singelstodate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
set-cookie: PHPSESSID=c25c632aa391c9bebc8e732585e71665; path=/; secure
cpvlabclick=MDEyNHlqbWhfNTcxM18zNTIxMV8zNTc5Nl82MTc3NTg2Ml84; expires=Mon, 22-Jul-2024 17:24:40 GMT; Max-Age=2592000; secure; SameSite=None
cpvlablevel=1; expires=Mon, 22-Jul-2024 17:24:40 GMT; Max-Age=2592000; secure; SameSite=None
cpvlabclicks=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure; SameSite=None
location: https://www.remembergirl.com/ALL-C/index-no.htm
content-type: text/html; charset=UTF-8
content-length: 0
date: Sat, 22 Jun 2024 17:24:40 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
GET www.remembergirl.com/ALL-C/Image/1.jpg
104.21.81.94200 OK 41 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/1.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash 2406e5669cb75853b085400248d1622f
d84da06636acf5c3597bd6a62e8ce8ef1ee3287a
f0657a5cc4a40ab3b76d476f91bce56eddaa44dc15db329a9bad4f9cb1da8787
GET /ALL-C/Image/1.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 40611
last-modified: Mon, 05 Sep 2022 04:00:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1598
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RjBsKjJ5ubaqlfdXjbpZTUDzSF8wCgP%2FuuHl4E8eqsx7UNUg6P3De0PoXNALnUz76KUK9q2Yil%2FCtlb%2F05aKsa%2FsBspr5Ku895c0yFElLSnelwlsGoebouWbZaZkiP9hhviTGQZ7Kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b60b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/2.jpg
104.21.81.94200 OK 36 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/2.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash b490e64057d91560a26ef1859d686c44
441c31172d9a1be51b4ad54105425ea43ed42e6b
baaa35534fcaddf5df3795c853ea4ed5a4c62f91ea4ec7651edc393226fb0dd6
GET /ALL-C/Image/2.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 35642
last-modified: Mon, 05 Sep 2022 03:59:33 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ao6fjXrof9KgX7KXW22RKNa9jbaEKhF77HGCpWtvGxsl0ibQ1ehoaqZZQ%2FSgICVIwU79QUEvGHf%2BhvoOOURmQs%2BMPWjC1uHl7CB3UB%2BLf%2FTQfGHwl1BV%2FvtyFQXEvm8K3lsEcoM6Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b64b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/3.jpg
104.21.81.94200 OK 34 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/3.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash 11372c3024d634aeb250b4fffee6fdea
7639871286a3fec088f3691deda160ad3a06efec
aa61f4fcde676ac24703d6562718ddfce6f0850568191896d9c3ce71ed630be2
GET /ALL-C/Image/3.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 34231
last-modified: Thu, 30 Jun 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HRdWIGSU5V%2FRcHgj5vE3PlPZLO9oAfaFycDPs1lSQ1fJvqWdu5NuYQsYJsLGkAWC1nDBKh9QVUiNXjbIRQjH%2FtpNlAF2VW5B2D6AQ7rh3OjIyZsdfNr8UQKD1KSPrO0lw8l9dVh%2BUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b6ab511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/4.jpg
104.21.81.94200 OK 31 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/4.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash e1f82bfeab8524a292791a371ce1e7da
3ee31756c99cb0f69178a9445c1ff9a923a9c4f7
fab876713c58292214ad938d37340e59c89c4cdc38625a4c44b368777706a337
GET /ALL-C/Image/4.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 30880
last-modified: Thu, 30 Jun 2022 09:08:43 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gZTInHuP6Z8d9bq7Gp0lKkJX0VtHwAY3tvXBSST3ZYCwZJkiQdJ6dHwziHphzrSXhh9S890c76JoIcM6B9Tvq1Q5E8EqYeSgt0FO%2Bo%2BI%2BiNIil84KXWDIcUCM15GVh0UuEEgyrP6hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec1b75b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/5.jpg
104.21.81.94200 OK 41 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/5.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash 8d0120dfc6551dabddf905b0bef27492
132be39c10fc6e3d2e328b645d8d0b5427b579ba
c1a4d47f95b6d94a50cad10d99777976fcfeb25994873a59a2ab3b82e17e0672
GET /ALL-C/Image/5.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 40915
last-modified: Thu, 30 Jun 2022 09:08:44 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2aPpLh%2BfYNyNbpOtEF7CVnbbqYJOGaUoyO%2Fomm0qlG1J%2BPFwY6wg6oyHqTYNgWso9yEnYPABpjQyysE69R6FpsUnGDDPzSoJWnMUauXRzruKnDKdtz%2FzKmosmAxcPscarW1n82ccg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec1b77b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/6.jpg
104.21.81.94200 OK 38 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/6.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash a4536f4c32f28ab6e6f9ac04aced38de
2331e6dbf743443a67364aad506cce64cc601ae1
543a1e411f47632fe1fc3846d1e96f062be146e257ea5cc261f268fc0bd70517
GET /ALL-C/Image/6.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 37820
last-modified: Thu, 30 Jun 2022 09:08:48 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jkbj%2Bk0JVKhwWdaBuHvjf04orkBBAKwS9IhpAv91Lkuwct07REDCbMuH60jeKUf7Tpv%2BJ1SkiAFNanh9uNFGveKgHc0Q1rZQmcf1C2EoNy3vMRzww17%2Fe4nGU5ahlS5xkwReIIFpLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec1b79b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/7.jpg
104.21.81.94200 OK 48 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/7.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash 2547737234a33da21fba2f88ec0f36b8
0d5a5fe88bb8a6f0f3727e7b65da97a167b16c04
d78652aa5afade543add0eb499ed831b2d06f556d120c440fb54de4f74eee4d7
GET /ALL-C/Image/7.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 47477
last-modified: Thu, 30 Jun 2022 09:08:49 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9fapy1%2Bm9JBSjgaBjb95X3DooCTA0VLTxth0gYxxXrCwAya3d2EnFa6pSkZWpJeq9OODDZA42hKPAUdJQ3ZicjOj2aSbeBqf7IonpXd9GpeDz%2BOe2POdZ%2BWfHi3mklAnK4G8GPAH0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec2b86b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/8.jpg
104.21.81.94200 OK 34 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/8.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Hash ad047e5458e605126d282fd4888f61f1
23c3c0c25957e8041e4a5726513d59a62a94a12c
f8614fba335c92e0e4ff4398b056a32bbd5ef8f91930bf9e81d3b5a7bc6f272d
GET /ALL-C/Image/8.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: image/jpeg
content-length: 34489
last-modified: Thu, 30 Jun 2022 09:08:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RMR2SFQ7l16UybSPaQbfRIDO8p%2BaikafVV93TlN3l0ronVrAQfNtDe7JnH7DSNblt0%2Bi4NK2R797xaEdNV6vSYMaJzLtKYSgiqcQbPZ%2FjX5aabkAaZt9bXK%2F8zZxrIXGSeezj75aqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec2b87b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/CSS/bootstrap.47407f28f6b047490b60b0854c97a929.css
104.21.81.94200 OK 80 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/CSS/bootstrap.47407f28f6b047490b60b0854c97a929.css
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7014b18fd53c1230fcac0d5a10bbc92e
e41f7322ac46299c2f444e0668b5a877c252f3fa
957ec84708a01f197df5ac2f01abf9b966afd696f711eb200ebafdd8fceaadd2
GET /ALL-C/CSS/bootstrap.47407f28f6b047490b60b0854c97a929.css HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: text/css
last-modified: Thu, 30 Jun 2022 09:08:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tek4Ulf32yZ88FbGzqD0BWthIcC1uLvSpiJkP%2BiJYNIWa%2Fh6BgjBUPnAMuFLoJOb9L%2Fuoodv52c31vh%2FP9iBgIhhHKAyrgjZ4a33fWiVMh8g2mPZBUMJ%2FATzGqDOX1gjgZonvUFrFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeebfb4ab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/index-no.htm
104.21.81.94200 OK 4.2 kB URL User Request GET HTTP/2 www.remembergirl.com/ALL-C/index-no.htm
IP 104.21.81.94:443
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (3322), with CRLF line terminators
Hash 07e5d4fc054403b268a9726fc3a34b3c
7d7b76726fe8ec4b252ea40e05a98ca74cd879dd
638dc280a6f8575970cb54434bb6d846d6c5fd36519b6e3680701ee4c6317d0b
GET /ALL-C/index-no.htm HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: text/html
last-modified: Thu, 30 Jun 2022 09:09:18 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXspTrTR22Iv3ekBEYF%2Fu0Sy7La9YkWSjiR0ex0ESgk2KRa0nW4gtF8s3vsjXJ9UBnG94x1muq5Enos2qSPAJbhGR3mGFAmVnwhycCDbCHlCM1iXks1wy7kkmc5wz9DJQyCpoRyXyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 897deeea0ef256ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-TMR4NP
142.250.74.168200 OK 73 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TMR4NP
IP 142.250.74.168:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint62:9F:34:0E:FD:86:47:D8:9C:DB:7F:2E:F7:05:DF:FA:84:E1:FE:1A
ValidityMon, 03 Jun 2024 06:35:20 GMT - Mon, 26 Aug 2024 06:35:19 GMT
File type JavaScript source, ASCII text, with very long lines (17349)
Hash 37ad1b546cd1e0ddc49b53f24b74d7fc
b0ab716cf71bad211a7d8940375b349f6480456d
6e2b839bec3e6e079bb7eb1c7012e57743ed6ca002a3db8a05d9115e72847b53
GET /gtm.js?id=GTM-TMR4NP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 22 Jun 2024 17:24:41 GMT
expires: Sat, 22 Jun 2024 17:24:41 GMT
cache-control: private, max-age=900
last-modified: Sat, 22 Jun 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73073
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.remembergirl.com/ALL-C/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js
104.21.81.94200 OK 35 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 60710551d19f77e6496b01207365a0e4
837fcb824626afc559093c2c835f8fa064b72010
cb28bc8f8098b56206d0af5cda644951777e8d8fbc053c8ee3b88eca2bca4e3a
GET /ALL-C/Javascript/jquery.695b55bf947b588e5fad6be1acfdc1f6.js HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: application/javascript
last-modified: Thu, 30 Jun 2022 09:09:29 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FgpoB%2F%2BUIUr1%2B4WgFkCGZlnG1n6%2Bljau4RFeluABPYPYeAot5Y4FLTvuo9SIuZRHlh5B96BIA6snOaWVOTZWAiaFXkAxE1veZINc2WLACyJ1Z6moRSOSmCOQ5qnfVlMxl7dOqfFlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b57b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
e5.o.lencr.org/
23.33.119.27 344 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3ff5b626a87953e0faf5cede69a862d8
0403ac2ae1871fa753b107af1009cf9bdad1478c
2729ccc8803ee797065c41d94c29b1ee22d0681623003b290268ea4a954cfa56
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "2729CCC8803EE797065C41D94C29B1EE22D0681623003B290268EA4A954CFA56"
Last-Modified: Sat, 22 Jun 2024 10:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8359
Expires: Sat, 22 Jun 2024 19:44:00 GMT
Date: Sat, 22 Jun 2024 17:24:41 GMT
Connection: keep-alive
e5.o.lencr.org/
23.33.119.27 344 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3ff5b626a87953e0faf5cede69a862d8
0403ac2ae1871fa753b107af1009cf9bdad1478c
2729ccc8803ee797065c41d94c29b1ee22d0681623003b290268ea4a954cfa56
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "2729CCC8803EE797065C41D94C29B1EE22D0681623003B290268EA4A954CFA56"
Last-Modified: Sat, 22 Jun 2024 10:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8359
Expires: Sat, 22 Jun 2024 19:44:00 GMT
Date: Sat, 22 Jun 2024 17:24:41 GMT
Connection: keep-alive
GET tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1933835739
144.76.168.81200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1933835739
IP 144.76.168.81:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
Fingerprint21:44:73:D5:80:22:FF:67:C5:62:ED:C0:AA:50:45:16:EB:B3:BC:00
ValidityWed, 12 Jun 2024 09:06:28 GMT - Tue, 10 Sep 2024 09:06:27 GMT
File type GIF image data, version 89a, 1 x 1
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/06eb0705-463f-4b96-836b-64bf3cfa8631?gtmcb=1933835739 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 40272d06cd66760c
set-cookie: ts_rt_06eb0705-463f-4b96-836b-64bf3cfa8631=AM_QaTNGTI8YOWbMwDGjxo0ZOQIC; expires=Sun, 22 Jun 2025 17:24:41 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
GET tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1117025546
144.76.168.81200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1117025546
IP 144.76.168.81:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
Fingerprint21:44:73:D5:80:22:FF:67:C5:62:ED:C0:AA:50:45:16:EB:B3:BC:00
ValidityWed, 12 Jun 2024 09:06:28 GMT - Tue, 10 Sep 2024 09:06:27 GMT
File type GIF image data, version 89a, 1 x 1
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70?gtmcb=1117025546 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: f5146b2d2b3888f4
set-cookie: ts_rt_e61f38d1-37ba-4a3d-9474-c0d9e0d9ea70=AM_QaTNGTI8YCG_AkFGjBg0bAQE=; expires=Sun, 22 Jun 2025 17:24:41 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL ocsp.r2m03.amazontrust.com/
IP 54.230.218.11:0
Hash 8308fa27b3724629188d8f57f39bad5e
881d645bfe122ea0e6ea0cfd8901dedc7407aefb
c4383e8ea99c978d88aa0975dc969af6a18fec519e1abdc5fc0920b597df7e71
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 22 Jun 2024 17:24:41 GMT
Last-Modified: Sat, 22 Jun 2024 17:07:09 GMT
Server: ECAcc (ska/F7A7)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oJYZAt6BYn_DevUPAwlhes591YXm6ZZxU_T8-qbpadyXlHGE6xJ0Ww==
Age: 1052
dotranquilla.com/4/7482447?var=4995&ymid=13kjqqs1g0084
139.45.197.244 19 kB URL dotranquilla.com/4/7482447?var=4995&ymid=13kjqqs1g0084
IP 139.45.197.244:0
File type gzip compressed data, max speed, from Unix
Hash f4a6a76a40ab55d9d5f636702c6a67a1
b0a088a967b2c3d56ce9f50e94f84879f633f448
a0811f35d0d74e24eee145a91367c6d3a079784ad7ff8a3a312c1eeb95174597
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /4/7482447?var=4995&ymid=13kjqqs1g0084 HTTP/1.1
Host: dotranquilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 22 Jun 2024 17:24:39 GMT
content-type: text/html; charset=utf8
x-trace-id: 07ef2a7b2d20fa08a9be514dd997cb31
link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080831fa2654feffd2940c239afe09f; expires=Sun, 22 Jun 2025 17:24:39 GMT; path=/; secure; SameSite=None
oaidts=1719077079; expires=Sun, 22 Jun 2025 17:24:39 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.remembergirl.com/ALL-C/CSS/style.a699b1caf61e690ba1b00116d51c9269.css
104.21.81.94200 OK 5.6 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/CSS/style.a699b1caf61e690ba1b00116d51c9269.css
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type ASCII text, with very long lines (5562), with no line terminators
Hash 42e60f03d305141c7c1c2c48637b7327
852ae2cfcb8a185bb3119c5bd9630f1ab7891d69
cc8c755fbcfe4a1bb14ee07b3f6fe5ccb4c51a5fc4e9b77642093fe3e7aadf5b
GET /ALL-C/CSS/style.a699b1caf61e690ba1b00116d51c9269.css HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: text/css
last-modified: Thu, 30 Jun 2022 09:08:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AGfkk3R%2Bpfa78bDJ%2BFPlGvAxhpqniU33wSm%2FU3c63bO7VoR9fvHP3QNJyv9dIx3wBuh1NABz%2BRMk1lzvnt6gY9o24fjoav58GmIWFYSEF5ZJXl3D%2B08IvaI1y9lgiwO18rKUKfSijg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b55b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/favicon.html
104.21.81.94404 Not Found 315 B URL GET HTTP/3 www.remembergirl.com/ALL-C/favicon.html
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /ALL-C/favicon.html HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: text/html; charset=iso-8859-1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iAPZKsIMCa82BLM8HBu2zOfJqBP8QAYbGHwgf1hjJwaQPfqqv5ztxg3FgeQLcK7TLPs8wzOmadb3pqfXAKJB9Htm1CUSlxIThPg6hjcjvdvn73eK7M3%2Fo4MOscBEdZ90NYO0iOA2gQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 897deeee5e2eb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/mnpfi9pxYH-Go5UiibESIj8E0i7KZn-EPnyo3HZu7kw.woff
104.21.81.94404 Not Found 315 B URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/mnpfi9pxYH-Go5UiibESIj8E0i7KZn-EPnyo3HZu7kw.woff
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /ALL-C/Image/mnpfi9pxYH-Go5UiibESIj8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 157
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WZtQ0m3Ktb7XYTRSOD8%2B9Fq99yXW6z%2B0EpJsWhG7wWIHWdhzeDE3N6o410TLB7fleA3z%2BLPJyJk9qLa%2FW7WRBowEPkc1iRQZixXqBjv8fGLJLkLeXUqoD%2BN3SVRrIEOIa%2F6kCspLsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeed4ce8b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js
104.21.81.94200 OK 439 B URL GET HTTP/3 www.remembergirl.com/ALL-C/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JavaScript source, ASCII text, with very long lines (451), with no line terminators
Hash 2eb3bfa92ac56cd2c94165d4509f83f0
5b7bbdf742593a7fe62c52b866ff53f38ba35926
c7a17254778b98e94bfd1b8f2967b02d71afe74ad947a331340a532152149ea9
GET /ALL-C/Javascript/error.1c4710d4434f595f8a835f40daa776b8.js HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: application/javascript
last-modified: Thu, 30 Jun 2022 09:09:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xi2MAkm64LO66vMWlzWjkFLd3FmpaZhp7NyPI5oHNdYU9RXVf1cB2BDMenH73NxGPCDLVoodGxyDxvg8j9Lc9ti6O7ryDE2IlFCVmF0Bf9XcpRkMvFQu5RP%2Fm2%2FWTi30vnDutIwUFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeebfb46b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/maincontainerPicture1.jpg
104.21.81.94200 OK 61 kB URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/maincontainerPicture1.jpg
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 792x1103, components 3
Hash 926894b12cfdf2cd3f04ebe2b25800c0
3b9a12994076ec004248e64f93a9d1697b07d98f
be01e5eafebe629f566093af14700274b908f7f4d572b2e3e5a1fa3b43bba6fe
GET /ALL-C/Image/maincontainerPicture1.jpg HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/CSS/style.a699b1caf61e690ba1b00116d51c9269.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: image/jpeg
content-length: 61278
last-modified: Thu, 30 Jun 2022 09:08:52 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6423
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GmTI1mCbCYnhQiGh4u3PVOvdn64u2sChSAfHcR0VSypdTFCMcHNhQ8TPaRzZ6JQXyKu5IEa%2FQ7xIfZx%2BRt%2Bg5txfAqXFByGJA%2FtoSr91lmmyKBuRhp9tUboThc%2FLQvYL3mMVV12aQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeed0c82b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/mnpfi9pxYH-Go5UiibESIltXRa8TVwTICgirnJhmVJw.woff2
104.21.81.94404 Not Found 315 B URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/mnpfi9pxYH-Go5UiibESIltXRa8TVwTICgirnJhmVJw.woff2
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /ALL-C/Image/mnpfi9pxYH-Go5UiibESIltXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 158
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=35E0OSKnQ754W6CmMw0S5%2FefpQagSVhry1%2BerstqU1Bn4vhuWbPoX3mF1tYNCtv9V6r60HBYxhZaVXc2rE6matAUiKO%2BiyCFW1P0Xru9skD98wKgBCk5qTZ2razjTGM9%2Fam6VZlrTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeed0c87b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js
104.21.81.94200 OK 656 B URL GET HTTP/3 www.remembergirl.com/ALL-C/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type JavaScript source, ASCII text, with very long lines (659), with no line terminators
Hash 553653151691538ba5638ae536836742
0f339b674ead22ab107b5a9b4c980eab0d369adc
4dbbcf10a17424e0dcf6a2bcffee555989aba1ebac97f7cfb606ea80eecef896
GET /ALL-C/Javascript/main.7d815901029a10bbd862c4f5e3ada540.js HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: application/javascript
last-modified: Thu, 30 Jun 2022 09:09:30 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PfMsnnR7H4KDNsrku%2BU%2B%2BeE3IrnxusHwPMX3b%2B4r%2FARSIiZ8MMUsX4zuP0DBe7DjkxNfCM7ZM%2ByrjKlZMotnr1Au47fB3pdxGt1JzfwkPFWCtx6LW4F553860Z%2FZTRHeY5f%2BLlmKiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b5cb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/CWB0XYA8bzo0kSThX0UTuA.woff2
104.21.81.94404 Not Found 315 B URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/CWB0XYA8bzo0kSThX0UTuA.woff2
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /ALL-C/Image/CWB0XYA8bzo0kSThX0UTuA.woff2 HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 158
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBG6K%2BJBKK3OL64xx8Wo8trrjoz%2F1cf2shI0jiFJ0WjVf58fFwJuVvk4x%2B45c8%2B2KJwoSiOvK49QroCMwVGet3FvsmISE0Sfxpum6mWSiKRwIolxgRFe8ATQMdfXa%2BsuwXyEGIoYaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeed0c86b511-OSL
alt-svc: h3=":443"; ma=86400
GET www.remembergirl.com/ALL-C/Image/2UX7WLTfW3W8TclTUvlFyQ.woff
104.21.81.94404 Not Found 315 B URL GET HTTP/3 www.remembergirl.com/ALL-C/Image/2UX7WLTfW3W8TclTUvlFyQ.woff
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /ALL-C/Image/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 22 Jun 2024 17:24:41 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 74
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=USeGo5Ii61h2%2BjNI53UH8fY3hw%2FrZOgZe6u829ELHEYBa9v%2BI1NkAmIVbO0t2k59FWvWe%2FaI%2BXN4KQrIGEgL9Dh0PIkyaiFSYKZxUnscBsfXwYNSIgnmWzkZxPl%2BSVk9Fp60uZ3LRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeed4ce4b511-OSL
alt-svc: h3=":443"; ma=86400
GET ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3>mcb=1179271249
54.83.251.202200 OK 0 B URL GET HTTP/2 ads.traffichunt.com/adv_ret/?adv_pixel_id=861&nid=3>mcb=1179271249
IP 54.83.251.202:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerAmazon
Subjecttraffichunt.com
FingerprintFB:E0:74:3B:A7:41:0E:9C:CC:0F:49:8F:DA:FB:E6:8D:2E:31:F8:52
ValidityWed, 29 May 2024 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adv_ret/?adv_pixel_id=861&nid=3>mcb=1179271249 HTTP/1.1
Host: ads.traffichunt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Jun 2024 17:24:41 GMT
server: nginx
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
set-cookie: new_adx_profile_guid=e68dead3-044e-44d9-b67a-f7b38e662db3;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
new_3.adx_daily_rt_0=861;Max-Age=23718;Path=/;SameSite=None; Secure
new_3.adx_rt_0=861;Max-Age=7776000;Path=/;SameSite=None; Secure
adx_profile_guid=e68dead3-044e-44d9-b67a-f7b38e662db3; Max-Age=7776000; Expires=Fri, 20 Sep 2024 17:24:41 GMT; Path=/
3.adx_daily_rt_0=861; Max-Age=23718; Expires=Sat, 22 Jun 2024 23:59:59 GMT; Path=/
3.adx_rt_0=861; Max-Age=7776000; Expires=Fri, 20 Sep 2024 17:24:41 GMT; Path=/
X-Firefox-Spdy: h2
GET www.remembergirl.com/ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
104.21.81.94200 OK 500 B URL GET HTTP/3 www.remembergirl.com/ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css
IP 104.21.81.94:443
Requested by https://www.remembergirl.com/ALL-C/index-no.htm
Certificate IssuerLet's Encrypt
Subjectremembergirl.com
Fingerprint18:32:AB:0C:FF:FB:A8:22:74:60:6F:1F:EE:EA:32:7E:91:E2:26:50
ValidityTue, 30 Apr 2024 18:22:11 GMT - Mon, 29 Jul 2024 18:22:10 GMT
File type ASCII text, with very long lines (500), with no line terminators
Hash d27807a5e380abceff57872d83c7c4e5
f166a734c87196ef7d87ff2c8b0c2ceca7eac271
d415bede567d42f1f937691235fcbd91cc80b2ef2d48bc238dd997ee1da130b8
GET /ALL-C/CSS/css.e2f687a79a5c017217d9bc8f923fba6a.css HTTP/1.1
Host: www.remembergirl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.remembergirl.com/ALL-C/index-no.htm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 22 Jun 2024 17:24:40 GMT
content-type: text/css
last-modified: Thu, 30 Jun 2022 09:08:26 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fxH866SfvfxkI3fwNOJ66sgQj%2Bi9EAxF3quxRXEcWcTMM2I6bE2fXSmr0OowRI2Yepm2NxlpJfIYXcEB8I33bKs7GpzAyF%2FRuWpnDscSesa8gnZNB0egdFCc0WjuIeYpcTM4OvzYyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897deeec0b53b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400