Overview

URL tube.perverzija.com/full-movie/page/2/
IP104.27.206.92
ASNCLOUDFLARENET
Location United States
Report completed2022-08-30 18:31:21 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 possessionaddictedflight.com Sinkholed
2022-08-30 2 banquetunarmedgrater.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 addresseepaper.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed
2022-08-30 2 unwillingsnick.com Sinkholed


Files

URL r3.o.lencr.org/
IP  23.36.76.226
Magic gzip compressed data, max compression\012- data
Size 1589
MD5 28a99533032415b06f9ee45cfc247865
SHA1 726d9b8553fc00634aa9a959216626a6b39fde6a
SHA256 6f46f365b4f7b1ab84d08d1cabc49afc88c1223b6cccc044d078763323f6f4a6
Analyzer Analysed Verdict Comment
VirusTotal 0/0


Passive DNS (35)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS r3.o.lencr.org (11) 344 2020-12-02 08:52:13 UTC 2022-08-30 04:23:29 UTC 23.36.76.226
mnemonic passive DNS tube.perverzija.com (2) 0 2019-05-28 20:48:19 UTC 2022-08-30 18:27:31 UTC 104.27.207.92 Domain (perverzija.com) ranked at: 76655
mnemonic passive DNS cdn.discordapp.com (29) 2474 2015-08-24 13:06:21 UTC 2022-08-30 04:33:10 UTC 162.159.134.233
mnemonic passive DNS simplewebanalysis.com (1) 0 2022-02-25 04:06:25 UTC 2022-08-30 10:59:06 UTC 18.192.162.188 Unknown ranking
mnemonic passive DNS addresseepaper.com (1) 18169 2021-11-01 21:11:31 UTC 2022-08-30 11:20:56 UTC 104.21.234.254
mnemonic passive DNS www.google-analytics.com (1) 40 2012-05-21 07:15:40 UTC 2022-08-30 15:34:57 UTC 142.250.74.174
mnemonic passive DNS push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-08-30 04:28:52 UTC 34.211.93.78
mnemonic passive DNS ocsp.sca1b.amazontrust.com (1) 1015 2016-01-20 08:47:26 UTC 2019-03-27 04:05:54 UTC 54.230.245.110
mnemonic passive DNS firefox-settings-attachments.cdn.mozilla.net (1) 11509 2019-11-30 09:32:57 UTC 2022-08-30 05:39:07 UTC 54.230.111.82
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2012-07-01 17:13:23 UTC 2022-08-30 04:24:15 UTC 142.251.1.154
mnemonic passive DNS fonts.gstatic.com (5) 0 2014-04-02 10:51:04 UTC 2022-08-30 04:24:15 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS 6023.ductclickjl.com (3) 0 2022-08-30 18:27:37 UTC 2022-08-30 18:27:37 UTC 88.208.59.103 Unknown ranking
mnemonic passive DNS fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2022-08-30 12:25:50 UTC 142.250.74.10
mnemonic passive DNS cdn.cloudimagesb.com (1) 23099 2021-02-12 16:15:41 UTC 2022-08-30 11:01:27 UTC 45.133.44.10
mnemonic passive DNS banquetunarmedgrater.com (1) 0 2022-08-04 15:12:50 UTC 2022-08-30 11:17:11 UTC 192.243.61.225 Unknown ranking
mnemonic passive DNS cdn.barscreative1.com (1) 25648 2021-09-16 11:14:42 UTC 2022-08-30 16:31:03 UTC 45.133.44.4
mnemonic passive DNS e1.o.lencr.org (6) 6159 2021-08-20 07:36:30 UTC 2022-08-30 04:25:40 UTC 23.36.77.32
mnemonic passive DNS ocsp.pki.goog (9) 175 2017-06-14 07:23:31 UTC 2022-08-30 04:23:24 UTC 142.250.74.3
mnemonic passive DNS www.googletagmanager.com (2) 75 2012-10-04 01:07:32 UTC 2022-08-30 04:24:15 UTC 142.250.74.72
mnemonic passive DNS unwillingsnick.com (8) 0 2022-08-06 03:44:45 UTC 2022-08-30 18:27:38 UTC 192.243.61.227 Unknown ranking
mnemonic passive DNS cdn.sb4you1.com (2) 22321 2021-09-16 11:26:58 UTC 2022-08-30 11:20:58 UTC 172.67.183.56
mnemonic passive DNS tube.perverzija.com (2) 0 2019-05-28 20:48:19 UTC 2022-08-30 18:27:31 UTC 104.27.206.92 Domain (perverzija.com) ranked at: 76655
mnemonic passive DNS aversionworkingthankful.com (1) 0 2022-08-29 11:08:12 UTC 2022-08-30 18:27:37 UTC 192.243.59.12 Unknown ranking
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-08-30 13:55:21 UTC 34.120.237.76
mnemonic passive DNS www.facebook.com (1) 99 No data No data 31.13.72.36
mnemonic passive DNS content-signature-2.cdn.mozilla.net (5) 1152 2020-11-03 12:26:46 UTC 2022-08-30 04:28:52 UTC 143.204.55.110
mnemonic passive DNS firefox.settings.services.mozilla.com (16) 867 2016-03-17 08:25:01 UTC 2022-08-30 13:03:36 UTC 143.204.55.115
mnemonic passive DNS shavar.services.mozilla.com (1) 3602 2015-09-18 05:16:29 UTC 2022-08-30 04:48:22 UTC 50.112.193.239
mnemonic passive DNS creepingbrings.com (1) 0 2022-05-27 14:56:26 UTC 2022-08-30 11:17:48 UTC 104.21.234.232 Unknown ranking
mnemonic passive DNS discord.com (1) 1053 2013-06-04 18:47:24 UTC 2022-08-30 18:27:37 UTC 162.159.137.232
mnemonic passive DNS getpocket.cdn.mozilla.net (1) 1369 2017-08-31 07:41:15 UTC 2022-08-30 13:55:19 UTC 34.120.5.221
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-08-30 04:25:59 UTC 34.117.237.239
mnemonic passive DNS ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-08-30 12:00:12 UTC 93.184.220.29
mnemonic passive DNS region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-08-30 04:45:00 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS possessionaddictedflight.com (1) 0 2022-07-16 01:56:10 UTC 2022-08-30 16:36:14 UTC 192.243.59.20 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 104.27.206.92

Date UQ / IDS / BL URL IP
2022-09-10 22:14:01 +0000
0 - 0 - 14 www.film1k.com/the-invisible-maniac-1990.html 104.27.206.92
2022-08-30 18:31:21 +0000
0 - 0 - 11 tube.perverzija.com/full-movie/page/2/ 104.27.206.92

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-11-30 03:40:36 +0000
0 - 0 - 3 chezcrom.com/1669779241/imagenes/_personas/ho (...) 188.114.96.1
2022-11-30 03:39:30 +0000
0 - 0 - 3 chezcrom.com/1669779202/imagenes/_personas/ho (...) 172.67.152.43
2022-11-30 03:39:26 +0000
0 - 0 - 1 qqc.co/zsGayEZU 104.21.54.124
2022-11-30 03:35:15 +0000
0 - 0 - 4 skype-chat.cc/ 104.21.67.25
2022-11-30 03:34:32 +0000
0 - 0 - 2 updates-protections.start.page/ 104.18.25.210

Last 3 reports on domain: perverzija.com

Date UQ / IDS / BL URL IP
2022-10-12 00:54:50 +0000
0 - 0 - 5 tube.perverzija.com/teamskeetclassics-chanell (...) 104.27.207.92
2022-10-02 14:44:51 +0000
0 - 0 - 13 tube.perverzija.com/familytherapyxxx-molly-li (...) 104.27.207.92
2022-08-30 18:31:21 +0000
0 - 0 - 11 tube.perverzija.com/full-movie/page/2/ 104.27.206.92

No other reports with similar screenshot



JavaScript

Executed Scripts (49)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (129)


Request Response
                                        
                                            GET /full-movie/page/2/ HTTP/1.1 
Host: tube.perverzija.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.27.206.92
HTTP/1.1 301 Moved Permanently
                                        
Date: Tue, 30 Aug 2022 18:27:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 30 Aug 2022 19:27:36 GMT
Location: https://tube.perverzija.com/full-movie/page/2/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tJYPX4cL3je0jb7JmoAbltzzfv6DHXicUBupcdWMrq5oCIhIoOMviSfKG3A%2BOp8LdoH24CjEfi1gB1UfZBZVPBR66fn5R7KeBdutoHPKr0bM5qeqfW5Wqv%2B2n2bvQ%2FpT2jgsbsE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 742f94d7ab5f1c06-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ECE269E8B9BE8A5839D75C1343823D68B96930C593C2E3E8D522999176EE3149"
Last-Modified: Mon, 29 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15178
Expires: Tue, 30 Aug 2022 22:40:34 GMT
Date: Tue, 30 Aug 2022 18:27:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A3B68467B71B2C19A0D966FBDE0F78CDCD19CB91D78A170528634E282797434A"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6035
Expires: Tue, 30 Aug 2022 20:08:11 GMT
Date: Tue, 30 Aug 2022 18:27:36 GMT
Connection: keep-alive

                                        
                                            GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 HTTP/1.1 
Host: getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.5.221
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA19-C1
x-amz-cf-id: KhhhGjlzfDZe93IeQdJWBRLjuC1h8oNsMQ6DYnYNnpdpS31KMw7WbQ==
content-encoding: gzip
via: 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 18:22:15 GMT
age: 598
content-length: 42345
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   42345
Md5:    909a3fb898e905c7ef98add0aba93af9
Sha1:   66b810bc96e8dfa5b74b167c58dc7291e9b9aef8
Sha256: 7b995782fba200483a8bdb4ed5d8d83fd6aafd6d653021526dc3d1c82b49b88f
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 30 Aug 2022 01:21:43 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eQL9Eg8BkfPbqDk5cm7rGel6-yCKjjyThhYW_Bvcu2U7vOBkrTkW6g==
age: 61553
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "91E18EE26F4822E21C6C2FA35236AAC4748EF656C3ECE7D9B4452CAA4642A414"
Last-Modified: Tue, 30 Aug 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5241
Expires: Tue, 30 Aug 2022 19:54:57 GMT
Date: Tue, 30 Aug 2022 18:27:36 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 18:26:00 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4zWPYQbvyi3H3XYevJY7tJwvHERgj60CrPf5fk_vKv9XteiOI1V4yw==
Age: 96


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 30 Aug 2022 18:27:36 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "91E18EE26F4822E21C6C2FA35236AAC4748EF656C3ECE7D9B4452CAA4642A414"
Last-Modified: Tue, 30 Aug 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5240
Expires: Tue, 30 Aug 2022 19:54:57 GMT
Date: Tue, 30 Aug 2022 18:27:37 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5621
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 18:27:37 GMT
Last-Modified: Tue, 30 Aug 2022 16:53:56 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /full-movie/page/2/ HTTP/1.1 
Host: tube.perverzija.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         104.27.207.92
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Tue, 30 Aug 2022 18:27:36 GMT
x-dns-prefetch-control: on
cf-edge-cache: cache,platform=wordpress
link: <https://tube.perverzija.com/wp-json/>; rel="https://api.w.org/", <https://tube.perverzija.com/wp-json/wp/v2/categories/18894>; rel="alternate"; type="application/json"
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-litespeed-cache: hit
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EzDA2zAFSzezFbVvQBTan90SxeDABm9cqS9cD1Y%2B8JX%2FrYBryDexfckUNjMUUSzIhWpYrsfmb6RznFZJTAkKx5F7yEGWQ88jqRKX7MANsEODLu0zelPVcRmcS49KT2pFCxZr35U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 742f94da0ca6b512-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (18532)
Size:   65515
Md5:    14f82e680fac97a128f7ca988d922cac
Sha1:   0eba43ca3c4b44c009191cb4efd2cccc295b81c7
Sha256: 2e437854f89c2381738168f1dedbbee92c67f0b9205530c0ac513084265a48a9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-56516027-2 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 30 Aug 2022 18:27:37 GMT
expires: Tue, 30 Aug 2022 18:27:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42991
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1615)
Size:   42991
Md5:    1b8f3da4d2198c5e5a98144691c24aab
Sha1:   fd14d5df018bad838c628e703029e67c47b1e3bd
Sha256: 90e1a261db44515be294c42a5dee773954c9db727793505fb2a91cb58dcec3fd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1 
Host: shavar.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         50.112.193.239
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close


--- Additional Info ---
Magic:  ASCII text
Size:   8
Md5:    29fc57841962e407cb50c1be60284bf7
Sha1:   ce968a77e2996da5eee8925182318f171ccdce47
Sha256: ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=G-45LFSXX593&l=dataLayer&cx=c HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 30 Aug 2022 18:27:37 GMT
expires: Tue, 30 Aug 2022 18:27:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73669
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (14270)
Size:   73669
Md5:    f289e58fc5d1cdc46b4b5461072c1170
Sha1:   8436448f03e8b8dd675c4cc950f2a359dc119d34
Sha256: aa2e01238d5de39bf7524979e71c16caec84c36ac0949b0df2c672fb71fbebca
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alxw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15476
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Aug 2022 19:58:22 GMT
expires: Wed, 23 Aug 2023 19:58:22 GMT
cache-control: public, max-age=31536000
age: 599355
last-modified: Fri, 24 Jun 2022 18:41:33 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15476, version 1.0\012- data
Size:   15476
Md5:    083f5cafe748b8ac91823b36986d7fda
Sha1:   0d763699e5bce633aa6adc03370b8630b87c1b31
Sha256: a3d8afcbc68d3ae65312e50ce252f5eb4cb817d3fe39452bd37a76f896ab5921
                                        
                                            GET /s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkW-EH7alxw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16168
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Aug 2022 06:30:50 GMT
expires: Fri, 25 Aug 2023 06:30:50 GMT
cache-control: public, max-age=31536000
age: 475007
last-modified: Fri, 24 Jun 2022 18:41:32 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16168, version 1.0\012- data
Size:   16168
Md5:    8213ad3df6322d456993217ae180d354
Sha1:   05a9b8f9988559553e415036d2cc19c9b29f6a61
Sha256: 510ce4502b0c68c2867a02142722b1f9d91ad9230fa2cc274368408b400b8d9e
                                        
                                            GET /s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15168
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Aug 2022 21:14:00 GMT
expires: Wed, 23 Aug 2023 21:14:00 GMT
cache-control: public, max-age=31536000
age: 594817
last-modified: Fri, 24 Jun 2022 18:41:36 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15168, version 1.0\012- data
Size:   15168
Md5:    1598ebfa232c5514a99a8af0405cc9a6
Sha1:   d81db409924496627326925cffa27d465c24de3d
Sha256: 45a8badf06824c87461905a8b1871fc3ca3eb5934cee490deadad743ebf99661
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 30 Aug 2022 18:17:12 GMT
Expires: Tue, 30 Aug 2022 18:26:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: daJZrRqHLPWD3Q7_NxwdlJdSdhz1HKs3AkgKGaxN91BNC0JGwyzFjw==
Age: 625


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /v3/a/pop/js/201456 HTTP/1.1 
Host: 6023.ductclickjl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         88.208.59.103
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
server: nginx
date: Tue, 30 Aug 2022 18:27:37 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   93338
Md5:    857b902db0db25bc8346b6661ef83dca
Sha1:   8e76db1bff9b730d7cd4e7e4eb3bff7525264b00
Sha256: 6ed4062ce82716e03d637a55ad4e33af8cf3c31aed77a0313a9b0eb67b3ff30c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Oswald%3A300&ver=5.9.3 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 30 Aug 2022 18:27:37 GMT
date: Tue, 30 Aug 2022 18:27:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   80827
Md5:    676e9abd46e6970861feef379bbb897a
Sha1:   a6925daaee63bcea30b64eac80f07ffffa980a80
Sha256: 3f6d5f5932523ee434599ab876d3df152488a5273d8107263658349d6e142650
                                        
                                            GET /css?family=Cabin%3A700%2C500%2C400%2C300&ver=5.9.3 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 30 Aug 2022 18:27:37 GMT
date: Tue, 30 Aug 2022 18:27:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   60508
Md5:    70cba90c8c54c25d7a8ff80e0f93e8eb
Sha1:   6a221147fc0f902ce6230e5850a37658f1763c89
Sha256: a668bf12942f343f91db504224a3f6c432590c5e04e0df421964aaa70aa7ae5d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5542
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 18:27:37 GMT
Last-Modified: Tue, 30 Aug 2022 16:55:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   7488
Md5:    db2da8a991647e2b0370a72df72bfe7b
Sha1:   a4ebfe117218176097b2b17af15ac389e4305a65
Sha256: eb3cc5d06bdc7ddf6a8226c4bffa83cf08c2a79c5eb6ffa941267ea8f8f7f04b
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 30 Aug 2022 16:41:12 GMT
expires: Tue, 30 Aug 2022 18:41:12 GMT
cache-control: public, max-age=7200
age: 6385
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D68C8C15595E9072233A83C331C928256339D495A213ED4E6FC5C682791EB165"
Last-Modified: Mon, 29 Aug 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6037
Expires: Tue, 30 Aug 2022 20:08:14 GMT
Date: Tue, 30 Aug 2022 18:27:37 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1NfVbmQHHhrDcaTopECdTw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.211.93.78
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8PKrHwIUawJZAJBBhnGXKJh31So=

                                        
                                            GET /87/6a/a7/876aa79f7ac526b92bb5f08170e901d5.js HTTP/1.1 
Host: aversionworkingthankful.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.59.12
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 18:27:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 839219df133687215810cf8486a0ad42
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (37151), with no line terminators
Size:   13430
Md5:    762007778f335d4eb9657cc6a651b3ca
Sha1:   6461678c2fff424e8d0b6c241f3010e69664f822
Sha256: 83993c43e352064d1ee651880ed3c92de74400c64a94b974bf890238c6fc0acd
                                        
                                            GET /widget-avatars/XMRGf4Nvr4f6J2MmmdW3ZqlDCePQI4I8V88j6Cymy-o/qvvO1AX4q-Ym-NcBFa4lsUbtPLFBiG7QxCs_Z0tat_xpnY61qw05Hp2gnTcJVVunB6AcKcmLcbLaEM--kK6AyrjAdFunJpZMlkqwFKIO_x63euBfncB2GOlREUXI1Qy2ZfUqt2fnHZF5lg HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3025
cf-ray: 742f94e44f87b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 697468
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Mon, 22 Aug 2022 16:32:17 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 5
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2H3K0nlffhEMz%2BvwkzKgjv8DXqkBUonL%2BHmbKMjoj8YyXX%2F8hmP%2Fp3XRBJsFRjJamAc6Tz5GVQfEim%2BVpkYW6sxygSDj2UxDdFQGKIT7GHYnpoPiAWvi%2FF%2F2aF7uUPHl3z5dIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3025
Md5:    f8c2d2f8a46775994fd576fb293c9164
Sha1:   78cc8c6451501252cb25e1734c3a6bbae813ec5f
Sha256: daded1c26d9f186b61939588921406c79e5ebd75b3c8b682dadd50ed3bb3e27f
                                        
                                            GET /widget-avatars/y9OSmHXb-HC1sqbK_FKU8QF1ECQhdnIW0XTrpGpvO4U/5MZXDLxZeYMYsJeHxXn7FjrsjJV7T2xQYp3OrFE4myCGDCRCLt7gfuTf9hHe7qPVQiQcaI2FfItqH_7fF5x2JFLIaqtUxlZLFUKYuoQFHlWZV4aVi6futhxC68AXiPYcylkwL2Dy21La7w HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 5226
cf-ray: 742f94e44f82b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1195362
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Fri, 10 Feb 2017 18:28:12 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 39
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a5TZHGS1kD66L4qhuuaMAzWEmdwNZ6B9uVZKYIAPRn1F1rNFyyhRD2I6aUhZPaHptInHUVmRlkQyYkL5%2FxwXsmfTSF1KWl3gGYKqNAs8sRVORo6WVgdIUFuZ7byJ%2BJcth6jbfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   5226
Md5:    c9dcc4bf2c471a8e26c96a0946649bc6
Sha1:   ac45696dd9bb48eae7519b7e128af7e1f04789a9
Sha256: 9de92c2ede74f84f3a0323d54a5edc77cb366375b08aa15a9961982a180ffaae
                                        
                                            GET /widget-avatars/FEsH4mNiTq0kPUovFwYPQO7LgCMs9FyHU4u9TXQhtUE/AKZXIfJ3MoEkVMeUEFZ9B04pCEGcedRBSl-O8qPsJ9l0YD-lnzo5N_nGUWWfiDEIlAlsoZ6Q21xaoPCtWHGz3pwVRMqt6z0UcImsRSgSp83oAJINrcEIIdTX83X4jKuRaqfL9uEUsN4StA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3453
cf-ray: 742f94e44f79b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1710716
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Wed, 10 Aug 2022 19:01:34 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 31
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TnTA1rJUadI%2Bd%2F2QRL2w%2BYLf6PYUv7EySDfcx1wizSRLzM83TrHwWO0GflvqIbLkp17gWpizvYyiFJq%2BUWm1KOKfij9SHn7whQfUsvJjcsxFJBddKk9NRkNDCkrN04UJLFtYrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3453
Md5:    4bb5443c813e576bdae3debd6d1f039f
Sha1:   ccc2b7f088cc0f15b742b2f89fe2d759400b83e3
Sha256: 3e30edc5f51ac713f2f766a78455d8911634624dd0d0744a118359a7bf6357c6
                                        
                                            GET /widget-avatars/14fbwngSZ317FuThXEGRur4FfKI-4VOo-bz-Dbeb-hs/xxvNVWPwNHIKYgrJxKKiR8jWLzR94WHSVRpZ-fnWkrj5muOaYukWVb0w2nuWBWsoumPy7bwJ-ydFzon_TOC9kMmIhODkrrZeHhuicppWt-oumeDA5Qrd817Kt73QEcApZ-bb19CsRMzuXA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4842
cf-ray: 742f94e44f7fb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1170399
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Fri, 17 Sep 2021 04:58:56 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 27
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pQF479VzHPAxgz5xyXZ8IMtv5l5%2FXVfDxcbhK71OhAnnIfyaVJ21WZEynWddI0V5bmcOEOg6CBHrt2uEjkAR5NjkbAKtw7GKDFkPwsT%2FyVQjEbNbZ7B%2Fq7P2BvzZ48P722FiYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   4842
Md5:    5c4c3ee67459e37049cf23884c7d8171
Sha1:   6d968b58d08d0f117290da1d854a081ff48971dd
Sha256: e021ae10576b793e485331b66e838d8a23c702fbc874f06081ca6ae03e90a073
                                        
                                            GET /widget-avatars/ubLoVISOLGkCha6DCz5Az3vNBEsqJDK4tkDzTuiLbUQ/yhkgGPDjvNHEufA-aNzBflKfUtgEgvX-7hSGrmjHDoBZvQy1sEMhAtPv4YRJvAAHBmwn9kNCUc-TyYWlI6Fl3-cMuD0v4P5CFlthSsLfu18D3lzlllad4xPWFY88Biax1XeKxFN84K2HCQ HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3795
cf-ray: 742f94e44f80b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 2133873
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sat, 06 Aug 2022 01:33:53 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 24
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=92EXNZcOjOehdrHf5lqHMZrZC2Dn4jCPm3rgIbBi5YN8lyckZDdD3bJIn5n%2Fs0BpyIHy3cujdblMxdJ5ROvQAsHqA%2BAepDpZP8dyfGFGujSUD%2BnDFmJg314Ldsi40SnMYxF7gA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3795
Md5:    de6eaeef7d062933dbf8ca4423415c0a
Sha1:   40f01555974f23be12c470dd591328c1fa76b24c
Sha256: d3a40ea45c8d12baa7ddc1c9d1c353cdda513ce53e96cc232a6a771810e58d5d
                                        
                                            GET /widget-avatars/axflnnIqgFpDWCHWXIcV_jydoHzrYzdbzYfIL8XwIZQ/qwC9J55TuAx4xteS5hSvjmTpzHoZiOw901xHYJ1bTMdSSPu8Lq74i5dLl6dyxJH3t6wSyYHGYw5VznMth7Dg1F-L2j5moHj2gT7YoNKlSbTg4nQ0ArcsZLgruwcAPNCZtWXKbd05XDS3xg HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4150
cf-ray: 742f94e44f7cb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 75012
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Tue, 06 Apr 2021 19:28:06 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 5
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qTXzHVEPsE%2Bs43VG%2Bsm%2BXtC8K9T3L9QmYXASWFohwWXPzNsonSQkdVJWCQYYjAwITUL7U6trhnfXOpNgnO0msNYDFQpvKQEbznCWTApc37Ez1K9k7nJqPMYgX2vBFkBitTTSsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   4150
Md5:    b570bd2ed29a7825bcfdbaa1c6fd209b
Sha1:   062b9e4d63a85e408d5953f1d44cbbd255b8ca58
Sha256: cff333169f0e06e8c30fc07e6201eb575b6d5769dc2254f588b0992ddf098eca
                                        
                                            GET /widget-avatars/ryX_EthxsLWAcDu3bgiW7cHJqVlTgJncYoCK6BbKyPI/-ML-Uew_LXxhJ6wB3UlfpkyVOY_MtQUQkYwvgZH0lQlXBYrS1GgIQeJpu6MUx4INUaeC57E1NmBLFHGXN9gpgSygknxd092mauWa5MfgYIaGWAcAwQdW6q2JttnxZuprNySpiUW10g-wlg HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 1670
cf-ray: 742f94e44f84b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 70282
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 03 Apr 2022 21:17:29 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 15
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xKLZ560faTI1b%2FlRv%2B4B1KV03mSyg17737oTqTcVC1WL6K3Yb2fTr9aoT2ABfAT76fruJ1UIhV%2FQO%2BO9ljeukdotYUp1B7px4aae0VZsX2sa5fmpBcfV6hjUlxDU05%2FYoL58VQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   1670
Md5:    4527c4fb1666dee220496c404aa2150f
Sha1:   9f1e74d02e46ec1305b50e87c58d8ed2fef2979b
Sha256: 9d3a7be919e1c9b842ca881ae13a7f5bb01467d7cc0cd5f5ee30f711d64efa71
                                        
                                            GET /widget-avatars/2sQc5KPwVStvXQsoRTpleaKHdxkcUI29tb0vem0aI2E/4YPRPPF0d6IWQQxgKYycgyZAZjB50UKkVry0680kJIJcvNMtUwbpjSoElezoAeKEKnuNiUXLVuI5aoeCw3MCigZXTSagNzdWALb7aDrrhilVVpb6LcbBLj85LmXonbtFY0YsBBAfqJ4xzw HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3274
cf-ray: 742f94e44f88b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 70347
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Thu, 06 Jan 2022 11:26:32 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 33
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WG1P%2B%2FcPlk9LJgWVNwHwugIDx3%2FAfydca8tl7bLtGtTht%2BWuk%2FJ6y7qLA0ECexFoqC2tq%2FIAzceJIrJpvt2FMQadAW9Kx9JEkAoEDQKrxxpZNvV9kLCSPM7PXBJ3%2BtNDb3%2BnUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3274
Md5:    0b14e7a3c20c8806f64f9ad93e59478f
Sha1:   da1564b462c10145226857d4973fe17657a0f799
Sha256: 8481f27ef087554bb0e3cf34da84bd5927dee2105a164de098d6725e0ab4bc97
                                        
                                            GET /widget-avatars/etRgx6CmutDvQ7gPwkxfmxTxOH7LoxQP_TlIaNKNII4/QNhwJpLb8wiW_dJZ26NX_ZhGu-NJck-v5_Ch3BRpUC-7mFj2txzO0ehe-E6EF2kon9gWz3TEbVHJWS-Ek8X4pA3RrbZFOV1Gg6D9_pmBuzfEtX1wDtJrrAgnBPiFeeo-gSEnCjwDR_eb0w HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 2911
cf-ray: 742f94e44f85b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 521184
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Wed, 24 Aug 2022 17:35:56 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 2
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AEdyz%2FGhYbHZBWksCb17gyWznpzdxOz7LnFSOoJypv0J6FQscnnbzTtCwexlUjzZ55QmFFHfilCWN8yZpNYHBJRCIFzoOA4uYx3BYRE5wdfd3GYHuQn4eeuIUzmDinTzDXqwWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   2911
Md5:    b64cbdd1e09c8ae0925fb02c89049603
Sha1:   bd5e6d12c40b0f88750cd66e0e62be82ff476671
Sha256: 7d8bcd47f337a63ea8166eae3ee6cb0e30f5da63d5d554a5b2f42458c4acb0f8
                                        
                                            GET /widget-avatars/FfFjqHCTJgxedmTUr8IrB0fpBy4ii92dw0ZgpkTSJh0/MPzF13R64VGrGNz7YpWcb-Mpj80OLC37nokUDYCYZZe7RCbGXF8lrdSy424PnBLAfq21nOcSblob0VF9PXK_zerJHHirEioHT8gB_ztoZreIBOPSFJO8rOexhAUivCQ9X1lk6mw5APwusQ HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3155
cf-ray: 742f94e44f7eb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1377830
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Mon, 27 Dec 2021 21:33:57 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 22
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4BzEzq%2FrG0ObSCGOQulYy82DPGI89ERJLXyJ%2B%2ByHkyf2mqdY0SzMewX4ZUhbcb1c%2BP6EH2W%2BBTXxIcRMMHcc1vu9FrhEprhvzZ06m7oVv4LY0C63%2F%2BwgO7TeDGsOVqNVL89Rbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3155
Md5:    d2e6865da6bf9ede4d616797e2def6a6
Sha1:   872fc4c5df16841415b9d252ac6876332138be58
Sha256: 1f3422b7ab4a78f8b44450c4fb2f7aa999c3a346f4c2d0f54b2ab4e699628bad
                                        
                                            GET /widget-avatars/8TFQVRLXLmBtlD5dKjVYIm5-lo0INIH6jO31TWIs5YI/cMKflHNg5qc3VJZ_ALc26Oa39Vtj7LrZVSfks10yGYOxrHdQ6hsgzq1SJ0I4u2AMSxaDF0WTgz2cyMFGnRaO-g7hWBm0PB9qAB51HiaYe_pyWPllAukvgt1RvEV9V8WtzTopI2OR_FSQPA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4589
cf-ray: 742f94e44f7db4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 882664
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 06 Sep 2020 14:19:55 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 19
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NR%2BVmTI%2BDKfMXYweNTWjU89ZmqKBsulAmid%2F28JpMbP3rr2%2FajOV4WU%2BQsQJDl0RbvTPKBpuwfClWJh%2BLfef1%2BUJl1uVZ4KfEsWd1ksGKUGq69l5rNxSC1fNWssLvr%2BLJYL7Vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   4589
Md5:    16bb58bab6929660634b052041b40ed3
Sha1:   f115f5dfa6aa72ac63a2d562a46abc423cca9531
Sha256: 5e79be1c8ed47c1ee0726d11cddde286d1f5b061729a5464b6a2e7c0cd641648
                                        
                                            GET /widget-avatars/g6AjB8CkhOYaAYq0WYZ6E_2Pp0qF2c6va6AKEXOKFAQ/VU1a2xs7E1E5d927cYm-V2j0dchvNL4gNynZWQRtHTQSTr5AgEkDteD34ze0pcThjqh-s12MaP_WahIQLriolcmPHLhVjPsijBhh4Xmin_maSRGB9U85f6_pLdIcSnOgB6G8xYlvrtJK2Q HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4037
cf-ray: 742f94e44f7bb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 268718
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Fri, 02 Apr 2021 14:40:41 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 17
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c5hH2tEAEpsD79VeazWDcSpVPqDHLAtAz6iiE%2FesGSSefqVVYoaBd4L0DSES0EBnZV85qgbnGv7k3ZOjukZet6Al2ujU6pBrgaeYOzzPJZZx3LGorRwxWULT0wIKzUc4UKqDQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   4037
Md5:    b3201479f0ea2fba4cbc664203885103
Sha1:   822b10334ddddf0b97046298bcc542a9b0d596e4
Sha256: 90e3445afbabb114440c934006489d6dba29883268d7d1b1eab68ca616563c7f
                                        
                                            GET /widget-avatars/kLY9wpJR9Hh7-D3NE7x97Bo-K1qZCKug5XRCNWCiPpI/IGH8c5Poe6myisMYed_IzBU9n8PHFJqq2MreymeH90eJVLXzrJvaXCkPNu_NzVIyMw1fBBEmjtZhM69wanBE2lYFNFpyapGMysh_xPQKaVHlU2SpQlgCLqHIzthJwMmUPXpiKFroi6pNvA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4466
cf-ray: 742f94e44f81b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 353860
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Mon, 23 May 2022 12:36:31 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 16
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q1sG2sIhWa%2FApvQWxlcSispM3bevDUJUlxUJkXsyN3IKkCpb6ftFK8pp1JNpOkLW%2BV8EVsCgOAlNaUAMN1kR3EiV7iQ%2FDsoI190sR%2FvUeFhvO%2BmufFMs0%2FQmFK%2F3yLFeCYiOXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   4466
Md5:    abc2b7999126fc016f8b726dcf246547
Sha1:   36caffc0d080c2dc6778cb0cbbc92b194dd2f5fd
Sha256: f0404c052d82e296fb0dbbd9a7e11f041d6357987417b4f0e06a26727d1efd08
                                        
                                            GET /widget-avatars/be1NEy5Hucrt-b5cFmslsQ_Gd3gexCnjy82hR2o8ulI/YWuINhakon_c12ULevIRBnef90o0E0dGhoTmmKMGvuqu7vepORFczxVDlS70UcXYA_tABiAn2nJV4s3yOpI HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 1325
cf-ray: 742f94e46fb7b4f4-OSL
accept-ranges: bytes
age: 1513
cache-control: public, max-age=14400
etag: "7c8f476123d28d103efe381543274c25"
expires: Tue, 30 Aug 2022 22:27:38 GMT
last-modified: Fri, 14 May 2021 01:14:15 GMT
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-goog-generation: 1620954855711859
x-goog-hash: crc32c=1a1NXQ==, md5=fI9HYSPSjRA+/jgVQydMJQ==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1325
x-guploader-uploadid: ADPycdt8XziAIyRv3ptDwk2H5jx0u52EkoyTcRTkbcx1vv03fMBXFqgNeTIeva5c8bLBb2nGCHviVVG6dE78Yfl9DC9cWNeRzg
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=99%2Bp6pdSLvNdv62OZP8Uh3MZnfgaFFZtVcRZnMdm66tLvzzsnxv8uR01d3ZiK5TVFTZhY5wLhNRt5xizUrMndV%2B01LiJMvtv6zGC6hGfNqJ%2BXeqDQ4pbAOtN5lpvVR4VtPhrKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Size:   1325
Md5:    7c8f476123d28d103efe381543274c25
Sha1:   00aedaa4f0a2e7ba85b3863f4fa0ca3b0d067ff3
Sha256: 9a013cd568e05ca7eabd6169ca0fbbfaec75ce60e434a9e0e6e5060e54061ec1
                                        
                                            GET /widget-avatars/vwwKPrirLnzupLY5CZMlya8vea7y3V1C0nHB3KABVu0/Pe997ZnxD8MpZ_3qwCmkCcO_eCYs4oyqfXD7KYK07f9wc5yOM59C1UjtF9jLPN08GZ2AaKiQ3716ygnzpnSJxuSpA-cSk_8M8XAwCAN2sTGs4x3RA3fpzLeKFHqlUXC6nVUJWTTFujFydw HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4696
cf-ray: 742f94e47fbcb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 362009
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Fri, 09 Apr 2021 09:17:05 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 90
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CsgFsZANNhBfSdlqfdCyhDSubTL8EnucpPbIP%2BUL56dY%2FJ8K7uuPqsfzcMHjmcZbrN9CfFGH8vKQIOxwBCmmVdLwdG1rAtdiXpCkZIIvZGnku5US7iHkFiyk1tUKnFjKUTVbVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   4696
Md5:    fc226100485c55ddd66ccd865885ed90
Sha1:   3af742a6f08ae595bfa393d2bbbbaceec88245a1
Sha256: b9817b6dbb6bee065b5dcfac3360775841b4df6bde8c925056200933294dd189
                                        
                                            GET /widget-avatars/DcSz6nfQ2imEHq-Q_P4cN8VUPJXgf7c6oKUD4mBGtCg/LxA46yp-pTN3niaDd-BhP4WsF2Rh5Iox3ElXUEJ7SBx_4s4iniPQUApCr099z1onI6LuqK916t636bezWRY HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 1268
cf-ray: 742f94e46fb4b4f4-OSL
accept-ranges: bytes
age: 2299
cache-control: public, max-age=14400
etag: "1f0bfc0865d324c2587920a7d80c609b"
expires: Tue, 30 Aug 2022 22:27:38 GMT
last-modified: Fri, 14 May 2021 01:14:12 GMT
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-goog-generation: 1620954852447678
x-goog-hash: crc32c=ILT29Q==, md5=Hwv8CGXTJMJYeSCn2Axgmw==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1268
x-guploader-uploadid: ADPycdsqnersV0o9dX-zYdUBby3PZR91Eq8uxco2pZZBuhdm8jAoYJWdw9gXLOI06UiNDSrBjEBU1AtzBN9NECZwZuQg-g
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q4qWGD7gcfmXKsLh63ckVJBvyOv4%2BhCSfkwkbVW%2BY35xSEh2a%2FknBwjxYBLFcWstvvKwwIzA6OH3MhorhJc9i%2B4WlsXvx8dxWCKEUMQsJqk99BwsRQjcA3umshjofYXveHfoFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Size:   1268
Md5:    1f0bfc0865d324c2587920a7d80c609b
Sha1:   e9524e647d689ce255f2175593a89684e784762c
Sha256: 2b4a9c8f3fc1e08227a34e42518a289c6b1229bec46b32bd44e32a1038447d3b
                                        
                                            GET /widget-avatars/4JMHkWnI7N2VthdPno5jH98O2gGmy_aXIrnfzXFqxG0/uhcz5jnfxXFsQSMwRfg6-LFHogrbEJzWmXhRFJeG7vp1LmOxdAvt_nT0HSqj5dbHU13h2qjEI4g3oNm76Rtfuuah-sWQtY7Ynm5gqs1COgbBrzAgscXyuLAvA4FBZG-6zYPiHTrNM1qQ9Q HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 5652
cf-ray: 742f94e46fb1b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 267101
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 16 Aug 2020 09:54:16 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 13
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nG%2BsEHJ3Emv%2BlnXnmZTmu9Z8Ee%2BxRO8q6CWCOTzxNiKxZT3wDi9t2U56idrdWQMDW0%2FPdpRaLtQ2uG3MeAeunVS2wkbv9J6zdJkAYXOCZNuck%2Be3dxVxxYf3mmVC879NMaAvwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   5652
Md5:    fecac1d5c29a258731e9dab03fb26ddd
Sha1:   96a13752c680be6e937f6a7b1cb0eae4f2cbb581
Sha256: dea0aff23ab6b8ffc010fd6921fa7616fe1ef64d86c8eb4bdce1ad498c8bfd45
                                        
                                            GET /widget-avatars/vnXD1cZKpEt60-mKjHUiEEJlJEI3zjfQWnYh1AgQf3E/Wun10w4JxWZxwGHcGkRWCWS4YcOQH4GWexguHC7kmfuEMwSwJlh6hwKgo0TypS3iy3E6FC84XejwVXJq2Fj7YvVF9amdr-9Fw-YClxclXWDC53bAE9q6mLW2gGkxidrYe0BcnwHs6zTI2w HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3802
cf-ray: 742f94e48fd1b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 540053
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 07 Aug 2022 19:05:36 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 13
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xSD1pO7xwmqkYpztAaWE2fd8Ep7kRWuxMOxwt6UPtQYQ1eZLjErgXM%2Fe2Abv87DbMmUim38BzbUD06lu9tExQpr5u8BS3AWa3v8WL2u3%2FKNAMHP2FPm3YRyRHJcvcYxQ7zLV5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3802
Md5:    dac5d2e68c89fb97b254df1d3c984dff
Sha1:   b8ff3f43719feace3042d4803ec51059824ee2e1
Sha256: 02b1b72ae9b5aa95e4635de3dbde9850b16730b57826169f591b5c7c83402f0b
                                        
                                            GET /widget-avatars/HHAteGnTAPXlSVFyfxL4AXZ0zhNoaOFFlCUg3FHI-Bc/Ji4eWT3ntssVswDTe7pQV-PJw01PNHC__Cx0KT1fHERzvcWT0JXNcChr8XIEjAdr05Zu8ZVcrzDwGuQl7GwNN6MY-3MKeZyhZi6kB33fGnVtbp5WGFEsSZ1S_inKTMktZQy_pD20oQL9EQ HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 2919
cf-ray: 742f94e48fdab4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1546077
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Wed, 15 Dec 2021 12:06:18 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 20
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=za8FadmzcW1wSt5Rr1vsP4MUtLt5eV3VAhQPCpyKy99hTNnMRHPyyOmLkH1xOm%2FKUxRAgYB7s%2BRwrvvt02WhDM8iUMsl9B4iXi%2BTTy1gHAX5WBxFJJ9EFj9lYSFA3ufUoLqIRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   2919
Md5:    5fb4f3912c0b48178d4e76cd8e6969cb
Sha1:   0cf18a3cadd8d9463f43cba617a6b4d2d6bb360d
Sha256: 79499931dccca43354da2e5dfd1b0ea9c84c3f2d7058566ff26dbde881ef0571
                                        
                                            GET /widget-avatars/sjKqzW40vipDOlla4WXQzCP_07z7vAzDuNZUSVKsbdY/ERa5F08KBvzzlZifvgRknGTRCsHEzt8AkYamd6xgM0x-H-77LGMbgaFKgp1xuNoJF-aqF33I8GBMWsxwF1k9i1P-nXpU19p7daTMMAlPmeTyutezRKMe7qr9ZFzckgx8EMyB937n_ozTuw HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3165
cf-ray: 742f94e48fd8b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 177668
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 06 Mar 2022 23:16:42 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 3
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ABqioduFtdOVzhZohULClaLtr5QGr%2BzAxaQeHWCTqEgaRdd%2F8CpVi55yBJGtsYyOMlCSNZ1FJyousplMORMDks6pLVSESbgV5d6NFGQjOD24MS9FIedJGispDV%2BIi2OFuBGZlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3165
Md5:    41e07ffe84dc8934f9eb877feb96c434
Sha1:   7a54ea79be75378fb3936527feab65095924c5b3
Sha256: b0238d0e0734b29bbfeaf38b1813d223ed30fc8c66b46949543eb1a4ae650c85
                                        
                                            GET /widget-avatars/yf_4tusyK37M0V649kNLHc-G2rJYH6nuj774RtJ9N14/0ABzsbGfQmuFd4_GcQaJ4q4hw9yleZG9VRHdyoZ2nHPoeTCZa5w3MQqQhHzpfsGrgV5I3FWnMvIiGsGDulv2lnGvvgRHkrdoMxy36UUOoItCyNf7mRjQfNySRlGMpy6ls-7ae3cbGpM_ZQ HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 2576
cf-ray: 742f94e48fd2b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1673751
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Thu, 29 Jul 2021 17:39:32 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 49
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BZMv5Drxu2JqrJlhneHficmIQjUTdApsY3koUK2ITMaAY4F61gSMi2xh%2BjzUCUyrYLhbzUU7z6nX4sKzj1KdjinPHzYSE%2F80B4%2FberIR9DaEMEKuOK3s3Xi72Q%2FdCcDC6qy4BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   2576
Md5:    5658075b483c153014b25ca00edc5740
Sha1:   a25035f6ab0df4b0f8df94fe6c8ce128f7b4ca6f
Sha256: 99952e0778b3f903f6fd0d3a30669a71c19464ecbddfec0179ce90229640695c
                                        
                                            GET /widget-avatars/Qfv5dKn3n6IGeo75I8A-cz1p5j4Y89RU8r_SMXiEQJM/MG53qrcg-MysW3AtV1gByBRxJdbIhrL_phmqok52nzZvQQSvo_-dwaJzeunRjawB5ophmmDAiNSMdGLdqKu5KK_QXyuuW_6lrp1n59LlyZbiyp3gMF5w3d6QCA5hG7_QcYcMHuVIxxSgsw HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3261
cf-ray: 742f94e47fc6b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 638183
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Tue, 23 Aug 2022 09:05:06 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 2
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i0ovHSW3u2iShg5KVPwy4mT39scJ5tW49pBDWEnL%2Bntytujq632QjCBm1suhaQtCt1H3%2B4y8gTrLs4HKrRdzy4TC0UEeXt%2FUL1FKrjV01noxQF3w7MebLg0q%2FVJMSUcQtetdRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3261
Md5:    34b7f55561b518c6ae96b1efd6308db6
Sha1:   3e8df12836b5a49777b8bf7b4a1c7e72625b05d0
Sha256: f546803676c0d50f9e8cec20cf4c73ac6cf7fc68697f6af2752c35c7380298a3
                                        
                                            GET /widget-avatars/0Yr4S0ZQ7OQOP4LqA__hbEw5ix0WmFMDnK84vIHFTPY/ESVXzOs5RUNFyV1DrZ1mzP5yZGTtfmq9DfZghkt__lJBNmv2mVwh3HnH6D42Kk0WonsQi5EhB4kHMhaOUIK5PbF47iCanU5JqurIdxlT8kOifPtpNhRtvE_cHq57wLgjYC1D6-M1fFQzEA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3514
cf-ray: 742f94e47fceb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 436955
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Thu, 25 Aug 2022 16:56:29 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 35
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FFFi9yoLhon2mAi%2FBA%2B%2BItehQuhJrBAKEz4MCnB9bcHYY5ndymzH4%2BUenIwYSmVs0jCI5HUqVdmU3g%2Fd67RLSRGwbbrGBHi4cEQKNDYHPSAUrHqiDV4bAaNApqrR9EZ%2BVefqNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3514
Md5:    8079101297be3cff1f4925d80b75b8fa
Sha1:   ef9bd87fa9e45ea6f6062421991bd33dd25ef6f1
Sha256: 87a7cfb66c6967a9c1eb56484745291a61595c4452da46a98b0b5c6185ac8b7d
                                        
                                            GET /widget-avatars/OAb6IahHalhlxBmKS_WMeLGvu-AbKrows1qQ_zU0BIw/izZEw5QglKDg6GcBbGEXfA4iJwTuYE-eZh1Swmu15NmbNG67bFA_Rk9n9ASnByq-Zsv9FJ8NG5GCmeiTU5RRjqq4ds9_haYC_OHqkt2t0o6YFJ4yexNsVmVSy0hmw1YTtNnt0pIn0SgOdg HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 4075
cf-ray: 742f94e48fd5b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 381822
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Tue, 12 Jul 2022 21:08:21 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 20
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JERarCsbE7jDvRwx5zpqPE35WxQCmAAL52yHTLawwu%2FvOc9WZzs%2F6K0TXWIvrcHquTpyOt%2BE2d48grDGEPIADm%2FLAbSRUNX8peh6mXBDS36Iq%2B93lc3gR62Olsf9zyLKr7Bd0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4402
Md5:    d0169c9133786a920fe3c226338990a8
Sha1:   4da705e23272ad91e33ac9209a90f8edff6e3be9
Sha256: 7e1a0c5b49b2fd798781c8ba97d0bea80b1e61eda5bc58c4c66d150c793b4535
                                        
                                            GET /widget-avatars/g8HZyudzVYgJRK77dDjjVKowT4WLOCfqdD6r0znE6Kk/FEqlsbeZsZfkOyOlRhE78XzDipiTk0ICIrwhzRrZCBf2pqWIR3Hw_3vXj3IViGUIBdaNCXeK83FjK5WZ2yWpqY55gUuUaT5YRMN6BaqYgxMziSb-xG4JMHtRsql7XNKyeVr0VRjbeyOWdA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3134
cf-ray: 742f94e48fdcb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 70154
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sat, 02 Apr 2022 02:58:57 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 14
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ph%2FSxGxsYgaz3xqUeY5g%2F34h%2F30dnobZtqgyGjm1fU8CrwM34aBwuXavZ3R%2FG66DYDM66Qg6vTHkuLvC1didrgoRj0f%2BPrV8nYzCp0LE6BnpEeahMGq4yw8DMFgGCeGV%2Bg2uyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3134
Md5:    7ac6bbbfa512d0915a3f7f379d842a7b
Sha1:   82377dc72d2da12e2c51f5c748b0108eee416a08
Sha256: 1cf8993fad636f297f64f32a22461493fc96eb50fd09fa7b78435c065b4760fe
                                        
                                            GET /widget-avatars/Ul0t_NpoGoz-jjE_hW46At_iZX7qFXG99ZwGeJF5-kI/vPNPx2L9QQbUyMtTmounmoNikU9zrQ3eSLBAhCw-mtlPnS5pE49Abr7cYOiswm66s7hPWlN1U_NU03CqYFG0fFHIk0sDCF225tMPAkbOwOMTpNLorrO-R1SJwt4GupVJxm1hWZyDTwA1bw HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 2767
cf-ray: 742f94e48fdeb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 105474
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 28 Aug 2022 01:27:26 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 5
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4X4Yn%2FWD3%2FvVM8UBzV1U%2BnnmMBP1uRbg7tlcred7E1pznPG%2BGVkJ4C4SLq0VRgzrCsvh2Xp7QgVQr%2FguOruTjG9CG1pYbGqiBg4BU%2BV6JdVuCsnK7ENnFFlDak7cX%2BVgQef0BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   2767
Md5:    5b4c6fe7ea4762fdcd25b1d47da1a98e
Sha1:   dac628063bc810e2431d4cfec09509bd006cde69
Sha256: 918ea2030eb4b8e3935da71dc3ce472e685ec82bd071c6c8bf9c30ccee74c875
                                        
                                            GET /widget-avatars/cB8I-iF0XHIVbqANgT1-TMcRFbKHnyfxmeRxRBpzR0Q/JTiFulB-9ONVTh8l4VWYResXmaDaLA7Oks5vGCxxiPZwlJ_46uiMOOtSQz5WFiDiFWyV94-UqudDBivJnHbuRw7W-9IClyKDoNQxsiEKEWwuXBKoFimyaSVx3D-G4z_JmTfMYYm_KkLpjQ HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 5165
cf-ray: 742f94e4980bb4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 217533
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Sun, 28 Aug 2022 05:52:17 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 50
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4grIZCE0CxhAlOiXkTc%2FdZovnnNK7484o3Z0JkqZmglGbtsslQm2cKaJTGHIigZr3qMrq4Mm74KUe67%2B54DPBUt202NiKFHvkdXn9bTHt0lWcATqt9SOEITwvQOggpIjdG93ug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   5165
Md5:    91a3a06b3ce6e16e1f8e8b35fde599fe
Sha1:   71d07cf06582e30f81fd2e63bc14acfa0def441c
Sha256: fbc527837b0677882c2db5f53f7d99c582fe5d9aa989a3ea6163b15f17313961
                                        
                                            GET /widget-avatars/_-A3cYeLn4jtjw9it5R386JRl4nPsH-xmiEoohHTHZ8/0cgUGW5OsukcQ_aXjVEfrQq6dddby53Jvj7qOpcNsV79LgIArlmLpa_SAGMA2bc6iJ6dkYXI-rmIiRYxLK8XNBnU_ZLVojtrYEMIliqdgee-YHI1MhtZliSDPtJ7TXgdcVCf7nhkxSIkpA HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 2545
cf-ray: 742f94e49805b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1135569
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Wed, 08 Dec 2021 13:54:20 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 14
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L8fSe%2F%2FHXlXw9ix%2FqsCaII9WyraM3j1jFqBxe8xEvyp%2BtuIF5Rt8IvqhUfW2PBu5zfDIqxv4FFCECjVSRYq%2B%2F6pzOcncpJCh2SIGjGk%2ByxtRLcgn7FTEn%2BbU7CYyNeCFdJk2cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   2545
Md5:    41f560a8de85d5e34cda6da354192c6f
Sha1:   41a1f90298749af4e4e695a0c73fb8ae8985dac8
Sha256: e5c913098b4898fb0a5a718ccc4f3f7b159b60eda5fe458a5c99a7bfb1c684ed
                                        
                                            GET /widget-avatars/VwgA_7KrSF8wsKfXfpzzA_-H9Mk-OJUcpMtKEFxNNPA/FH60RWYp7oT_06sXUU6XIbmTfPcdsu2gS5_EKljpQJDMJoelChujYXTNzlfpWBffqz3CRmIfyVxgVAFbDrWNGNXaVFOZmEJzeveQErdiU50ESDm2C1XXtI7B83Jv5D59qWM7xWK8GjzPdw HTTP/1.1 
Host: cdn.discordapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discord.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         162.159.134.233
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 3379
cf-ray: 742f94e49809b4f4-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 16475
cache-control: public, max-age=31536000
expires: Wed, 30 Aug 2023 18:27:38 GMT
last-modified: Wed, 08 Jul 2020 14:53:35 GMT
cf-cache-status: HIT
cf-bgj: h2pri
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-envoy-upstream-service-time: 31
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aM7UdRSXRIZiZ22aOFqQdDY51KPJQOqdBv2MI%2Bbu0e8YyOvPPJzQiotkSYuWPDgwcfJkDinCcqaLoNdsb6DKScLV7Snq%2FXcnQPudoVQZXO5U5fWtiQRhc7%2BtQOltILMbDbJUkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Size:   3379
Md5:    49bf76acd86c95efa6a23268a06e9774
Sha1:   9068647ded0ab6ddb58adb1cf86a006d6338afca
Sha256: 2e082b1688fec382fd1bfeb568358255c0ae839ee6af5054b08003e3e093f41b
                                        
                                            POST /g/collect?v=2&tid=G-45LFSXX593&gtm=2oe8t0&_p=1595259966&cid=1845497122.1661884058&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1661884057&sct=1&seg=0&dl=https%3A%2F%2Ftube.perverzija.com%2Ffull-movie%2Fpage%2F2%2F&dt=Full%20Porn%20Movies%20%7C%20Perverzija.com%20%7C%20Watch%20Free%20Streaming%20HD%20Porn%20Online&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://tube.perverzija.com
date: Tue, 30 Aug 2022 18:27:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4776
Md5:    cf13a3b4bca6ac74700278844329058e
Sha1:   97f14c8a01429e962fab96e38ab5ee164bdd0b04
Sha256: b2444f0965a689db435396036068b649deaee9850cd9d4df846f5aec84f230c7
                                        
                                            GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221661864233926%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Tue, 30 Aug 2022 12:57:13 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 18:01:56 GMT
Cache-Control: max-age=3600
Expires: Tue, 30 Aug 2022 18:02:17 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Qo42IULtbLs-YDZdzkqhX_Fl4rNRKc0Z4UCUMe_fijFD7kMeOi4Jgw==
Age: 1542


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (21675), with no line terminators
Size:   4573
Md5:    2526979d9a731e29561be3ba79aead07
Sha1:   547dfb30343fbba5fb6da37eda7a7a4fa22e47b9
Sha256: 4ab8d96a1160c99668a4d1c8ac92751a0b7d251698d7dc482e43e8288c090581
                                        
                                            GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1661863044535&_since=%221653914271178%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Tue, 30 Aug 2022 12:37:24 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 17:42:46 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ts8qQodjoC2AG-CNK2OD5X5O5l9oKCbX67SkMMUpEg04Q0ouvO9Erw==
Age: 2709


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   10895
Md5:    919f3d372ae2e30c7e1dbf6a7957d4ce
Sha1:   7cf52295e3f2b2621fb34edbdb05b3bdf3e6a09f
Sha256: c9f8f7cd585ba935fdaa88db6dbf4f6f88434807cfbc233fcbf1d049ab8735ae
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 29 Aug 2022 22:35:59 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 66y77UbGXM8SC58tv2m0AbzDDF060OHUryIVpp5ieETwvrPvhZEOzA==
age: 71500
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157978
Date: Tue, 30 Aug 2022 18:27:38 GMT
Etag: "630e02fa-1d7"
Expires: Thu, 01 Sep 2022 14:20:36 GMT
Last-Modified: Tue, 30 Aug 2022 12:30:50 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9guQwJG7IqPSMSIIo7ME9fKd7_RRNq7lWzAeeDDj-sYLk8nb8eTJsw==
Age: 6586

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 18:26:00 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: c5LNQf6jO6d4w-5YYRnBu3VoQpm6aq0YtA_Rve3YL1IgfFbo0XCd7Q==
Age: 98


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.192.162.188
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: https://tube.perverzija.com
access-control-allow-credentials: true
set-cookie: uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; expires=Fri, 27 Aug 2032 18:27:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    f3620010b39420218e9e3c6a4d0b8321
Sha1:   ba40428bdcf9070715cd1e216014222dda96ba2a
Sha256: 5e1d26a20db3438a14ac97109f4399c3f62e74754c62b7dbdc60bb9bc589a3cb
                                        
                                            GET /staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin HTTP/1.1 
Host: firefox-settings-attachments.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.82
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Content-Length: 795699
Connection: keep-alive
Last-Modified: Mon, 27 Jun 2022 12:39:11 GMT
x-amz-version-id: 9np1boOrxtHVWzMczpbX1a.N_ewQWHDF
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 30 Aug 2022 01:13:08 GMT
ETag: "9b95765b0e26af76116a95a966d61354"
X-Cache: Hit from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1VUqqasYsDLgr51-1X_qL9boo2t_A2b6SpaTTed3c51fL3jlsdaNWQ==
Age: 62196


--- Additional Info ---
Magic:  data
Size:   795699
Md5:    9b95765b0e26af76116a95a966d61354
Sha1:   3f7c1b40fc999b83f3696f455402e49ab484b027
Sha256: 34f969c8e082310785ec4262e2d5b58c919d4de856ffc64b3467507f83ac9571
                                        
                                            GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1661817670072&_since=%221654732864402%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Tue, 30 Aug 2022 00:01:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 18:17:07 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: n_Js6PWPm-RyEPXa8f3TMuEb7dZKHVCqJcZYAMKph676JuHeoOj5Sw==
Age: 969


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (59438), with no line terminators
Size:   12051
Md5:    3e71c124ded681af3d9fa78cda96d01a
Sha1:   249370b3fd9043f3e153aae21bb090022f164d4d
Sha256: 00afb728b4dab509e9cffd65a3dd306834a8b0e120d350711ea5febaab926feb
                                        
                                            GET /v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Mon, 08 Aug 2022 02:06:49 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 17:45:11 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tzRXEGpi3k0WwdFJ2TEoUUQLeHk-AkB84zgGLdfi2R76LEhouP6RKw==
Age: 2564


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1393), with no line terminators
Size:   783
Md5:    d8e59c6bd160719da9f2b9571af22b8e
Sha1:   b4353f8308be656bdf00bc4676fdb23e7c285f32
Sha256: a3e7359fc3dbb20b38aae533bedd4061dad7a3440ea323cb17dba0540a670c81
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A51A65872D9B5164B8A149A8275EA44DCB5CAEA381F1338E7698A85ECB8A7ACC"
Last-Modified: Sun, 28 Aug 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5850
Expires: Tue, 30 Aug 2022 20:05:08 GMT
Date: Tue, 30 Aug 2022 18:27:38 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sun, 31 Jul 2022 18:34:08 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 30 Aug 2022 01:48:10 GMT
etag: "578b9ff83ff3950ab2a3d1a8344d2938"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fEHjJIiEoaAn8c85BEMW4pq49bQEb59m2dJDO5dB0h7MTWrAhG3uXQ==
age: 59969
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    578b9ff83ff3950ab2a3d1a8344d2938
Sha1:   39d48b67ba6aa45ec01767725e726cf9b0c87a70
Sha256: 35c99da9a5463a4788ceab7cf4b027bb25506cde28ace36c70d0bc924138f2f5
                                        
                                            GET /v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Mon, 08 Aug 2022 02:07:26 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 18:03:15 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _vmGFL42QYkFNHRUenU_WsNTzkNHYbDeMZJtLta_Cfhpionon2cjbQ==
Age: 1472


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (8682), with no line terminators
Size:   3107
Md5:    ca9b7ec20643050e8acc3b7ee435f6a3
Sha1:   204f7d4e4dcd10b449d91bd6f9edbffe17dd6dd1
Sha256: 531a79432808c6959aa6fe610b7112c27bad3f4c548e411b2861eed0bf06165d
                                        
                                            GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1661719663846&_since=%221654636467710%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Sun, 28 Aug 2022 20:47:43 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 18:02:30 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BgKHrX57TSYUiGajjaAskdWgoAepD96pJLfuBZyX9jw0azhnNpVysg==
Age: 1508


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   6989
Md5:    4a4dfc030c91ac546467a7ffa6e1b240
Sha1:   836a59d78c2153cf76a3b9dacddd5097d11a11f9
Sha256: e30aff37ffada31a3e6350d48669bdd77467f0d6c618cb3b61cec7f6142b8220
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5844
Cache-Control: max-age=149677
Date: Tue, 30 Aug 2022 18:27:39 GMT
Etag: "630de574-1d7"
Expires: Thu, 01 Sep 2022 12:02:16 GMT
Last-Modified: Tue, 30 Aug 2022 10:24:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-56516027-2&cid=1845497122.1661884058&jid=473017473&gjid=419427686&_gid=422432315.1661884058&_u=aCDAAUIgAAAAAC~&z=973238438 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.251.1.154
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://tube.perverzija.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 30 Aug 2022 18:27:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 681
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, ETag, Last-Modified, Backoff, Cache-Control, Retry-After, Expires, Pragma, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Sat, 27 Aug 2022 16:36:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 30 Aug 2022 18:15:49 GMT
Cache-Control: no-cache, no-store
ETag: "1661618213112"
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Q5XMbFZZmUwXmnkF-woA0Ql6Ul5iKF0EpjCowLHjAB_U40ApZj082Q==
Age: 711


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (681), with no line terminators
Size:   681
Md5:    b4b97219fcdaf5f60e4fbefcb16f02bf
Sha1:   163349dcd850952ee78ffd458f642f8d9af883ed
Sha256: 175f1b8a7d212d2e6692b0a1e8332d185cd9254ddd543f029fd6cd345ff298fc
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 18:27:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5844
Cache-Control: max-age=149677
Date: Tue, 30 Aug 2022 18:27:39 GMT
Etag: "630de574-1d7"
Expires: Thu, 01 Sep 2022 12:02:16 GMT
Last-Modified: Tue, 30 Aug 2022 10:24:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Thu, 30 Jun 2022 10:44:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 17:40:13 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MQgfUTzLtEXXLU3BZrLrnJutmUd9fS_Lkdn25cYXGq5PMilBdXZWTg==
Age: 2866


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1710), with no line terminators
Size:   893
Md5:    cdb42a32eb079761007d29ee4bbc9a0b
Sha1:   9653c4215e912886e5b6f5a39a33189147f10573
Sha256: 26e1a455c2a879130bec3641d40ed1e2aabed7d0aafde9e11a07a2cc6eb63eb8
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-30-15-09-07.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Mon, 11 Jul 2022 15:09:08 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 30 Aug 2022 03:06:52 GMT
etag: "c0f7028ab1157f24d515abdede77d5b3"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -EB_OuPamyhifSLWZJAhS5Hd01Kv-FB9dbDm6ksuVls24BdLowjz5w==
age: 55248
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    c0f7028ab1157f24d515abdede77d5b3
Sha1:   00208a34ed76644814967ad5611bdbc1f3ba6780
Sha256: 6a1b8917468b937fda9acbfead382d4349063f5bd36a812dbd79e91645abb576
                                        
                                            GET /6d/30/2a/6d302a56c3f06b332a56f548ac2d546b.js HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f56cd952532221925207da46ea3df109
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   28747
Md5:    6a8edd37dc21d9a3a197455be9a94e17
Sha1:   8216ce680aa1e33079f193b04bd5683085810f83
Sha256: 1fb17e0cad30842f17840494b3d23ebe32e904cb44cf803ee209cae8e8315c70

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-10-13-16-32.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Thu, 21 Apr 2022 13:16:33 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 30 Aug 2022 01:11:17 GMT
etag: "c2eff79baaa46df0eb1ad5ad7b702bca"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sZwdaIgAZBoP8XA3U1HG-x5-Bl_iFOr1yAL3Ng2LUhmKnMCuyygRyQ==
age: 65015
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    c2eff79baaa46df0eb1ad5ad7b702bca
Sha1:   a1161150e75b0f0dd30de06ac6f27c1be4810048
Sha256: 6871f00b47a3525296bf02f508923ab3e15cc705694aee45d8db44b9c63bd201
                                        
                                            GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Thu, 30 Jun 2022 10:44:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 17:34:18 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DTpDyIvQNtjTCJqYNbJkOeI7Qp-1SV2Faai66EXqai0YLEui23fnoA==
Age: 3202


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1918), with no line terminators
Size:   987
Md5:    62f9c1e2660b0b8161a74f15789e0d11
Sha1:   484d4f9d7a70b5c0876408557d761537bf908f36
Sha256: 850feab870a4bb644f8a05d09ce4789e69acb2c9319472817ea3745c34608d46
                                        
                                            GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Wed, 13 Jul 2022 21:25:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 17:51:39 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dx5KHLupa7gz_eNltMWW-xTXPk4_Ar7ZNTFdWvp5jh3V8-eCuUeVHA==
Age: 2186


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2195), with no line terminators
Size:   1008
Md5:    284ce6f489d4e39635136f153138aeb3
Sha1:   e15907c1e8e1a973af52a876c4efac08eb4a8f4d
Sha256: 0728663f31f157e091c5f658b8fa24e2833830e95429146d470f2edd6e8705fd
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "A5BC7049E45CD638904A9A7DD6CC9A1FC8040440148EF1656F54360F0AB28E80"
Last-Modified: Sun, 28 Aug 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4325
Expires: Tue, 30 Aug 2022 19:39:44 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Wed, 03 Aug 2022 17:26:35 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 17:31:22 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5cigyaWWVyGQ54ZJ-dS1Z4BU2sbKUuZhrv7iqBDtg1hZVR0d782jvA==
Age: 3388


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (3677), with no line terminators
Size:   1404
Md5:    5f4edd5433264154f517292748387ebf
Sha1:   d6e41d472f12649a84d2484433c89d64836ca059
Sha256: f749fdbbb83278e27564e565558832d799197c405c39055ea1d3cfb1274f9086
                                        
                                            GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1660685423451&_since=%221622732735407%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Tue, 16 Aug 2022 21:30:23 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 18:17:14 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0QstbSB88TOW6U1zJu1vQgLmgdamUbqfTO8gut9E5aegQI4jR4WF3A==
Age: 631


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (19819), with no line terminators
Size:   5312
Md5:    33ad4f4fc9e26933036275da3c1bd8ae
Sha1:   60cd003ed5eb3ffe86ac1c30318b24f8b9fe49d4
Sha256: de72eb589f443bef0e30ca422ef4b1b0d5bb73d71f3c7179d68909565b8dc3b9
                                        
                                            GET /v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22 HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Mon, 22 Aug 2022 20:25:49 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Tue, 30 Aug 2022 18:17:07 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cPSTF8f1RxJ5peLDyRSdG6FhAed4Nt-enAaF9TIplYbFudu4xklixA==
Age: 632


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (45919), with no line terminators
Size:   7590
Md5:    1e57ea90c14266c0e33ceef8a6c31427
Sha1:   bcc4037c1556802dceb1c3603774845b24f6abec
Sha256: 6e0d2659f8b8d7f01838faa52dee6662167acc9090b12c6f2a438e491723d6cc
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5029
Expires: Tue, 30 Aug 2022 19:51:28 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5029
Expires: Tue, 30 Aug 2022 19:51:28 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   20132
Md5:    e9a3239120f372f6d1c131a18492b8f7
Sha1:   806a09719169fd7bb2461486c89245b8729b1326
Sha256: a71371bd9fa46766f6105f44fe48af14065bfa92c4ae14988ca43d2a691894fd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5029
Expires: Tue, 30 Aug 2022 19:51:28 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5029
Expires: Tue, 30 Aug 2022 19:51:28 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8478
x-amzn-requestid: 8ae5ce3f-0d58-412b-84f1-579c5cf21fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTWIH5JoAMFh9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d328d-7bb707102a3acb0320585b52;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:33 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: G0y5MCu_U2IUMTrWxPmyUefwSkF5tcEWpPh7sZ-Bn_1lXZv12tlpgQ==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:58:58 GMT
age: 73721
etag: "b2866f84f93b73d97e9aecfa2293ff47131b6d67"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8478
Md5:    87425d52d274ccbc12298aa7a47395f2
Sha1:   b2866f84f93b73d97e9aecfa2293ff47131b6d67
Sha256: 2284c74b04493c7a67907b2477bac252832f3550c6a7e57c221abefc45a12549
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac715f17-8b9a-495f-bc62-6136925908ac.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6405
x-amzn-requestid: 1c49054a-8058-48cc-8660-46e06070b23b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XYcDvEJ4oAMFkyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630673b1-19d3c0a020e8efca51a1bb05;Sampled=0
x-amzn-remapped-date: Wed, 24 Aug 2022 18:53:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SqsgdB7nD_msORiQkay5KD55fD1lW5wRyDFO4qCM0zR0W4HIy8UI6w==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 22:48:13 GMT
age: 70766
etag: "84b01ce7d173848c449e4332eb1fa1abe8ac307d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6405
Md5:    7bfe221c6ea8b215ff7f30b28f7cd389
Sha1:   84b01ce7d173848c449e4332eb1fa1abe8ac307d
Sha256: 6c53f4d30d7f0f735c793f46ab25feb5767373718b6f92c7f13eeec8306b8ab5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5925
x-amzn-requestid: fa7479ef-c5db-45ce-a973-a8831df14931
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpS-ZFH1IAMFsFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d31f5-1a9b0a43065d731b4cc61ed3;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:39:01 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DBxGjmVUCTjHUrOzLWp37FwLUUo_5CykjgxAeCAaw1TlodWSmbnCrA==
via: 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:45:06 GMT
age: 74553
etag: "ec2a4baf0a21c1738a541d89756cccd6f3bef5fd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5925
Md5:    91310bc1fb5ae0efa502a9bafe046399
Sha1:   ec2a4baf0a21c1738a541d89756cccd6f3bef5fd
Sha256: 5fe0511116c6bd2d6e668c69764905c3a5c93fa23a4dc207b0f4b1604783ceb6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10672
x-amzn-requestid: 9044b578-ffc7-4890-a16f-bf6d5e242f46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWcEUnoAMF_UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-4397932f1417f6ab2463c4b0;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uc8twk9uXve3wFxTvsZa_sg-aduiVBxXjTvOdqBc_BZmgw4BldMyHQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:15:20 GMT
age: 40339
etag: "bf1d4347e1641da5aebe6ae438c0431232ae6242"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10672
Md5:    9f9132960db725a095b0db1773dc6f69
Sha1:   bf1d4347e1641da5aebe6ae438c0431232ae6242
Sha256: 0e0b84df674d48517a04819604deb555c904518f093784691de4914b6ddb9e9d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8684
x-amzn-requestid: e02c26f6-e28d-4b3f-971a-f42cbbf67845
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTWIGH0oAMFpEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d328d-3183e76132b622350a75a86b;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: T1FGC5fMnwea3ltKnLgvqI1AueU8xp5ukWXnRptxDQoAH0DUbXPOEA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:59:22 GMT
age: 73697
etag: "20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8684
Md5:    4aa2a22c2851d082acd55c1c9782cee9
Sha1:   20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e
Sha256: d0d6a3cc781786f5377191e2b1f3495ac76f4f8af7c56291f761a49a167b8726
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9980
x-amzn-requestid: b9f6b930-9c47-41b9-879d-ce239e39f033
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTMGHlNoAMFuoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d324d-72ea52c010dff34438bbca28;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:40:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: orq6ucCez7UBzTSPTyJR8u8ZYf1VOV_zPOLsJFvGD2jfiW0YJmxVSg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:45:02 GMT
age: 74557
etag: "0c122f15422cab7ee3461e8fa657183ae54adcc5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9980
Md5:    82bc1c69018845280d29653d6b2d6f8d
Sha1:   0c122f15422cab7ee3461e8fa657183ae54adcc5
Sha256: e221638eff281c27ef4656f76e64963718186285c57e50a8958bd3065e662674
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "A5BC7049E45CD638904A9A7DD6CC9A1FC8040440148EF1656F54360F0AB28E80"
Last-Modified: Sun, 28 Aug 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4325
Expires: Tue, 30 Aug 2022 19:39:44 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8550AB486C08F26EF003F584F9D89EC65B758DEF9853A1F93D5517528D5FC380"
Last-Modified: Tue, 30 Aug 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7003
Expires: Tue, 30 Aug 2022 20:24:22 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DCCC792CD2B8F25C666DEFFD611429DED01B93209B6B2EB6385EA3CDE254C518"
Last-Modified: Mon, 29 Aug 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5132
Expires: Tue, 30 Aug 2022 19:53:11 GMT
Date: Tue, 30 Aug 2022 18:27:39 GMT
Connection: keep-alive

                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=3242&rd=3242&fd=840&bv=22.8.v.2&tmpl=136 HTTP/1.1 
Host: possessionaddictedflight.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.59.20
HTTP/1.1 200 OK
                                        
Server: nginx/1.17.9
Date: Tue, 30 Aug 2022 18:27:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /advertisers.js HTTP/1.1 
Host: banquetunarmedgrater.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.225
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:40 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7ad35a405a20c94ecbacbce3dd6b5395
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /iSRACYYzPgvlZtdxoEWUMWYX08lW-9mBfv9Yfo_FTpdDNJ6c8o1X9cmPVIBlfYbIlNgDdvJwjvy6Q-rmGO-8NC6VmqTDpLmIbQIVLrwsJHhiv81NrhU1Zw575I8FwRc2y-Q9Bsc?kws=full%2Cporn%2Cmovies%2Cperverzija%2Ccom%2Cwatch%2Cfree%2Cstreaming%2Conline&abl=0&fsb=0&pageUri=https%3A%2F%2Ftube.perverzija.com%2Ffull-movie%2Fpage%2F2%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221002%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%22939%22%2C%221268%22%2C%22939%22%2C%22false%22%2C%221%22%2C%2216%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Aug%2030%202022%2018%3A27%3A38%20GMT%2B0000%20(Coordinated%20Universal%20Time)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%221%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1 HTTP/1.1 
Host: 6023.ductclickjl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         88.208.59.103
HTTP/2 307 Temporary Redirect
content-type: text/plain; charset=UTF-8
                                        
server: nginx
date: Tue, 30 Aug 2022 18:27:41 GMT
content-length: 0
access-control-allow-origin: https://tube.perverzija.com
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
location: /iSRACYYzPgvlZtdxoEWUMWYX08lW-9mBfv9Yfo_FTpdDNJ6c8o1X9cmPVIBlfYbIlNgDdvJwjvy6Q-rmGO-8NC6VmqTDpLmIbQIVLrwsJHhiv81NrhU1Zw575I8FwRc2y-Q9Bsc?kws=full%2Cporn%2Cmovies%2Cperverzija%2Ccom%2Cwatch%2Cfree%2Cstreaming%2Conline&abl=0&fsb=0&pageUri=https%3A%2F%2Ftube.perverzija.com%2Ffull-movie%2Fpage%2F2%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221002%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%22939%22%2C%221268%22%2C%22939%22%2C%22false%22%2C%221%22%2C%2216%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Aug%2030%202022%2018%3A27%3A38%20GMT%2B0000%20(Coordinated%20Universal%20Time)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%221%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1&_h=accept%3A+%2A%2F%2A%0Aaccept-language%3A+en-US%2Cen%3Bq%3D0.5%0Aaccept-encoding%3A+gzip%2C+deflate%2C+br%0Aorigin%3A+https%3A%2F%2Ftube.perverzija.com%0Asec-fetch-dest%3A+empty%0Asec-fetch-mode%3A+cors%0Asec-fetch-site%3A+cross-site%0A%0A
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 30 Aug 2022 18:27:41 UTC
expires: Tue, 30 Aug 2022 18:27:41 UTC
X-Firefox-Spdy: h2

                                        
                                            GET /sbar.json?key=876aa79f7ac526b92bb5f08170e901d5&uuid=85d21415-7130-442c-8c15-31b9c30e21c5%3A1%3A1 HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://tube.perverzija.com
Access-Control-Allow-Origin: https://tube.perverzija.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17548143; expires=Wed, 31 Aug 2022 18:27:41 GMT; secure; SameSite=None uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; expires=Tue, 06 Sep 2022 18:27:41 GMT; secure; SameSite=None pdhtkv=true; expires=Wed, 31 Aug 2022 18:27:42 GMT; secure; SameSite=None uncs=1; expires=Wed, 31 Aug 2022 18:27:42 GMT; secure; SameSite=None pdhtkv29=true; expires=Wed, 31 Aug 2022 18:27:42 GMT; secure; SameSite=None uncs29=1; expires=Wed, 31 Aug 2022 18:27:42 GMT; secure; SameSite=None slec876aa79f7ac526b92bb5f08170e901d5=[3527115]; expires=Tue, 30 Aug 2022 18:27:47 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1b51a668d6a44ee673b93430e82ba1d2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (6408), with no line terminators
Size:   4453
Md5:    5949fbf0c764753949cf3742072b769b
Sha1:   9bcfb248833144edfcf6b793249e9b5a8df7896e
Sha256: b9a2640746deb602e438eb0d929aa4e2186a5fe2627a1c841f373977a60f6025

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRitjgsiAYmai2B0Dh4iuLtdPTPdM%2BawuMbV4OYHiT9yUqqrajaVre5qqvrHZL0EA5Lj5uBVet9sEtQQzB9g1Jmg4ICwEy97cA9evAqBnGVmFxcfNN%2FX9d7hfe%2F7vtwq9oiPgu2ePms2lNZssb3gN05epvRUY1WlRb%2FR74Sfha1TDVu%2B1Q0X%2FDca70m%2BbhYDn%2Fo%2B9WljRVnZM%2F3FKQmV3evSha6%2F0AoWaLuFvv3%2Fvys8OOZBlHvkRSgxmXvkHYfiQ6TJ96elW89N9ua7SaFZbixKcfejdD01VYrksO1ZD7307oEaxu2sPIRJb8%2FswpT%2FCWM1Id6vDxGndw9MIi63Zz5jDZkiFkdRlUNIPYRiQ3BzA0rsEIALnDuPNLlzztiKXdtn2ZSdkLmnT6CqCZn78zjS5P6yVv3GJaOLXJnUod%2BrofpDqLUhsmKEfOMIVDUCz7%2BAEr%2BTxaerSJPt804bKLH7eqctAtqi7fmINv35Vivg8x1O2%2FNNGnd505cB5e1ZQEoNoXpDaLkJ5jwU0095KHoeisxDInYbnFIa%2BYIzv9PlvCkiGYfCpyzqUUb9sIOCT2fYRJ5tgutNcHsdmb2OdXVrp%2F0XbPET3JUaTnhwOUEpalSSoHIEFSOoFEGVE1RlfVtoF7j6jtCuiOlBDQ5qsx6YfG2L3Tb5mkzJVrZHXphm5x0dGazL3UYnChmLur2I8XYQxt0gjts9v0MjX3Z9KtpwqoZyR2aTbqgJOXH%2Fc2RqQp79u4mYjeD0CFwdAytOgFWDKPDBrgxaHR8b6f1M2lLaDXWVLXCTQJgaWT6H%2FJq3pffIy7MttnfGkHy8tNebAdzWyGyNq%2BoRwZq%2BObhoKrJ90VSOPDif5SpRG2y64Us5y%2BXctx%2FIa5Wx4sxpt%2FnN23xKTNt7H0qXr7JUqHTNke%2BWlRDSrhjLJfnhjPtExhcKd2W5sGmRrV54Z%2BVMklnpnDLpEGx6rC%2B9D64m5LllOTveV06WUHYIW9RIijE5AJQZgWfX4bLx0h%2Fdy8fis4%2FhzBysPtTEmYeqqAc2iA8ftZqQ4Mlv0HK89OCX1z796ujPYHENJw%2BDiOX4x3%2F29VvuJtbsq2D5DaRJjdLWKHUNpjfhimcGeWbHS4%2BbMyDW3iDW1tuOtdW39gN2arcRNZs%2BC7ttGkVMRnEr6PRCKhgLWmEQhqyJ3E348x9%2F%2FS8AAAD%2F%2FwEAAP%2F%2FLoNKGYsEAAA%3D HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Cookie: u_pl=17548143; uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec876aa79f7ac526b92bb5f08170e901d5=[3527115]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:42 GMT
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c9cb9cb163377d7d92cef87a03100817
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    132d6af1b46048b45cf86cdee7991d31
Sha1:   eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /iSRACYYzPgvlZtdxoEWUMWYX08lW-9mBfv9Yfo_FTpdDNJ6c8o1X9cmPVIBlfYbIlNgDdvJwjvy6Q-rmGO-8NC6VmqTDpLmIbQIVLrwsJHhiv81NrhU1Zw575I8FwRc2y-Q9Bsc?kws=full%2Cporn%2Cmovies%2Cperverzija%2Ccom%2Cwatch%2Cfree%2Cstreaming%2Conline&abl=0&fsb=0&pageUri=https%3A%2F%2Ftube.perverzija.com%2Ffull-movie%2Fpage%2F2%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221002%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%22939%22%2C%221268%22%2C%22939%22%2C%22false%22%2C%221%22%2C%2216%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Aug%2030%202022%2018%3A27%3A38%20GMT%2B0000%20(Coordinated%20Universal%20Time)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%221%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1&_h=accept%3A+%2A%2F%2A%0Aaccept-language%3A+en-US%2Cen%3Bq%3D0.5%0Aaccept-encoding%3A+gzip%2C+deflate%2C+br%0Aorigin%3A+https%3A%2F%2Ftube.perverzija.com%0Asec-fetch-dest%3A+empty%0Asec-fetch-mode%3A+cors%0Asec-fetch-site%3A+cross-site%0A%0A HTTP/1.1 
Host: 6023.ductclickjl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         88.208.59.103
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
server: nginx
date: Tue, 30 Aug 2022 18:27:41 GMT
vary: Accept-Encoding
access-control-allow-origin: https://tube.perverzija.com
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 30 Aug 2022 18:27:41 UTC
expires: Tue, 30 Aug 2022 18:27:41 UTC
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2014
Md5:    bea309c8ab9799c57798ce035581ebb7
Sha1:   66bdcbbbf7c014f2f02945c8d4d379fad0b4ddbd
Sha256: cc4d8104326f042b55d00f1c9d41bc5d1bab8a9f92da5e330258a6c36508f6ef
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "893AA15F459674BE08625F9CB855CC9EEFA556784D96950EF68DF4BB8C1E82E6"
Last-Modified: Sun, 28 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6130
Expires: Tue, 30 Aug 2022 20:09:52 GMT
Date: Tue, 30 Aug 2022 18:27:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "893AA15F459674BE08625F9CB855CC9EEFA556784D96950EF68DF4BB8C1E82E6"
Last-Modified: Sun, 28 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6130
Expires: Tue, 30 Aug 2022 20:09:52 GMT
Date: Tue, 30 Aug 2022 18:27:42 GMT
Connection: keep-alive

                                        
                                            GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F18%2F52%2F6a%2F18526a6becad408914fcf53d946360f0%2F1651134763.html&l=1558&fd=329 HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Cookie: u_pl=17548143; uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec876aa79f7ac526b92bb5f08170e901d5=[3527115]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Flive-message%2F3-2%2Fcss%2Fstyle.css&l=8924&fd=50 HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Cookie: u_pl=17548143; uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec876aa79f7ac526b92bb5f08170e901d5=[3527115]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "56F869E4731A71A8978D29D285DB3D7337E5EB8844D081C1CBEF639B2B26F6A7"
Last-Modified: Sun, 28 Aug 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4301
Expires: Tue, 30 Aug 2022 19:39:23 GMT
Date: Tue, 30 Aug 2022 18:27:42 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   1589
Md5:    28a99533032415b06f9ee45cfc247865
Sha1:   726d9b8553fc00634aa9a959216626a6b39fde6a
Sha256: 6f46f365b4f7b1ab84d08d1cabc49afc88c1223b6cccc044d078763323f6f4a6

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            GET /sfp.js HTTP/1.1 
Host: addresseepaper.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.234.254
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 30 Aug 2022 18:27:39 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 016bcb231193b4012ae394e8d2b923a2
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 30 Aug 2022 18:27:39 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2FvHfU3lmOtgAcmXv3UqFwt0Tw1WkBbEMEHN7CaimZEUti8Os6bDVkLppxC5Uv102o1fGt5IIOHGmDy7KSjU%2BvUvlErfaO0mScETYAGN2iz0nUvIS%2F1W64rTiiW6Mn2zL9%2Bkoac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742f94ead86c742f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size:   43083
Md5:    d80f0f5652c06bbffa7aa793965c482e
Sha1:   986d101f5027e79233fe508ed3a0bdd7f9859eab
Sha256: 26312e0a716f605a7d48eaf8995ce9a104c90dcf2f47310d8713d4576565b9dd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /si/ea/f0/94/eaf0942638a7a317f57c1878d002acf8/1657118897.jpg HTTP/1.1 
Host: cdn.cloudimagesb.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         45.133.44.10
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 30 Aug 2022 18:27:42 GMT
content-length: 19490
server: nginx/1.17.6
last-modified: Wed, 06 Jul 2022 14:48:25 GMT
etag: "62c5a0b9-4c22"
expires: Thu, 01 Sep 2022 18:27:42 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Size:   19490
Md5:    230de911f731c4f23dabb009a70c0eda
Sha1:   5d479defd4a1232e6b74381dd24eaf851b558c8f
Sha256: ee4c1628ce37108fd1ecf632577ccd6ccf4969c08956d564567016605114d7fd
                                        
                                            GET /sb/ssp/utility/live-message/3-2/css/animate.css HTTP/1.1 
Host: cdn.sb4you1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.183.56
HTTP/2 200 OK
content-type: text/css
                                        
date: Tue, 30 Aug 2022 18:27:42 GMT
last-modified: Thu, 28 Apr 2022 08:29:13 GMT
etag: W/"626a5059-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 92046
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2FRtw0sesu7sNPwMvW%2FVP5LorEiDB8yfYSbWM67x%2BQ4qhnvAzpiKizQwyqG5aWgHySo9U40kEtp059Djzc6ylwn%2FZ32ArG2w%2BlCHTeX7%2Ffyuzf5eqXH5DSwBxt4dIpWGCkc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742f94ff1917b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4847
Md5:    c91016401e0a0b7b3d7572de48c76597
Sha1:   12fb634abb5e708b4f55d1489055b4f626d3cdd1
Sha256: 2472e286e0bf6f54cef9d99e9c63301c873fa02bc4e3979e1a18587a6d973120
                                        
                                            GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Flive-message%2F3-2%2Fjs%2Fscript.js&l=1173&fd=15 HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Cookie: u_pl=17548143; uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec876aa79f7ac526b92bb5f08170e901d5=[3527115]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Aug 2022 19:34:08 GMT
expires: Thu, 24 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 514415
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Aug 2022 19:34:08 GMT
expires: Thu, 24 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 514415
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   47823
Md5:    1a3d199fe872335e3bc7f50e4a2abdf2
Sha1:   d1c5bc7be9292e92d8850b0352c999f2ed4d9b73
Sha256: af122ec4293e0f3e7df234799737231da47b5f8a70b890a83c0ef885b81892ff
                                        
                                            GET /pixel/sbs?c=1 HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Cookie: u_pl=17548143; uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec876aa79f7ac526b92bb5f08170e901d5=[3527115]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:43 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSS4scVRi9FQdEAhI1G8FoL1xEcGaqqrv6YRaDYxwNTh4kPrJS7qsmN3OrbnFvPTrjJhiQLCcLt1JzepKghmB%2BgFG7g4INwnTczMJZuHErBLKW7hkcPFB8X91zFuc73%2FflVrFHfBR09%2FRZs6G0povRgt84eTkITjVWVVr0G%2F1u%2B7N261TDlm%2F12gv%2BG433JF83i6Ef%2BH7gB40VZWVs%2BotTEiq71wsWev5CK1wIohb69v%2F%2FrvDgqAdR7pEXocRk7pF3HIoPkSbfn5ZuPTfZm%2B8mhaa5sSjF3Y%2FS9dRUKZLDNrYe4vTugRrG7aw8hElvz%2BzClP8JmZoQ79eHYOndA5Ng5fbMJ9OQKZg4iqocQuohFB2CmxtQYocAXODceaTJnXPGVvTaPkun7ITMPX0CVU3I3J%2FHkSb3l7XqNy4ZXeTKpA79uIbqD6HWhsiKEfKNI1DVCDz%2FAkr8ThafriJNts87baDE7uvdSIRBK4jmO0HTn2%2B1Qj7f5UE03wxYjzd9GQY8mgWk1BAqHkLLTVDnoZh%2BykMReygyD4nYbfAgCDq%2B4NTv9jhvio5kbeEHtBMHNPDbXRR8OsMm8mwTXG%2BC2%2BvI7HWsq1s70V%2BwxU9wV2o44cHlBKWoUUmCyhFUlKBSBFVOUJX1baFd6Oo7QruCBQc1PKjNemDytS162%2BRrMiVb2R55YZqdd3RksC53G91Om9JOL%2B5QHoVt1gsZi2K%2FG3R82fMDEcGpGsodmU26oSbkxP3PkakJefbvJhgdwekRuDoGWpwArQad0Ae9Mmh1fWyk9zNpS2k31FW6wE0CYWpk%2BRzya96W3iMvz7YY7Ywh%2BXhpL54B3NbIbI2r6hHBmr45uGgqsn3RVI48OJ%2FlKlEbdLrhSznN5dy3H8hrlbHizGm3%2Bc3bfEpM23sfSpev0lSodM2R75aVENKuGMsl%2BeGM%2B0SyC4W7slzYtMhWL7yzcibJrHROmXQIOj3Wl94HVxPy3LKcHe8rJ0soO4QtaiTFmBwAyozAs%2Btw2Xjpj97lY%2BzsYzgzB6sPNSzzUBX1wIbs8FGrCQmf%2FAYtx0sPfnnt06%2BO%2FgzKajh5GAST4x%2F%2F2ddvuZtYs6%2BC5jeQJjVKW6PUNajehCueGeSZHS89bs4Apr0B09bbZtrqW%2FsBO7XbaPqiw2QsO0y2olYsuWBRxHwec9YU3S5H7ib8%2BY%2B%2F%2FhcAAP%2F%2FAQAA%2F%2F%2BuV5%2FxiwQAAA%3D%3D HTTP/1.1 
Host: unwillingsnick.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Cookie: u_pl=17548143; uid_id2=85d21415-7130-442c-8c15-31b9c30e21c5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec876aa79f7ac526b92bb5f08170e901d5=[3527115]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 18:27:43 GMT
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9e1a1fd3e729ab235bed60b93c927efa
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    132d6af1b46048b45cf86cdee7991d31
Sha1:   eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /sb/au/18/52/6a/18526a6becad408914fcf53d946360f0/1651134763.html HTTP/1.1 
Host: cdn.barscreative1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         45.133.44.4
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Tue, 30 Aug 2022 18:27:42 GMT
server: nginx/1.17.6
last-modified: Sat, 07 May 2022 03:21:27 GMT
etag: W/"6275e5b7-616"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 30 Aug 2022 19:27:42 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   492
Md5:    3f0fe6e62d7bab7ac7d253b9547709d3
Sha1:   568810a7fb28c234338845f0ca9d91223ccc6e58
Sha256: 3dfad62e6d1557c95777fefc1135d0cf0cdb655ed1e6a1b0987590942eea7677
                                        
                                            GET /sfp.js HTTP/1.1 
Host: creepingbrings.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.234.232
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 30 Aug 2022 18:27:38 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: ee2f41bdfc1c6a1265e79fa593ef781b
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 30 Aug 2022 18:27:38 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OkjsXwy3H5rcnwedtUwuUhj4mT05Q54I82p%2B0%2F%2BW5yB%2FeIBc1V%2FZ5l22iYUUXJL4GRNrxy64Yi22weYDhKCc39HArIZkIcsqWuzkIBpRjK7i1W45Fjr3nMyNySUc5b4dlNLd7oU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742f94e58c87718c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/html; charset="utf-8"
                                        
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-fb-debug: hFHPkqUoJdLrtM/1oHOFxAcfDNxyKHICNh/yeSYre6fbzPJSnX2UHkC9YNlyEB+hTmPv1lntSmA9wm4npDObJw==
date: Tue, 30 Aug 2022 18:27:39 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /widget?id=956924928916070420&theme=dark HTTP/1.1 
Host: discord.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tube.perverzija.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         162.159.137.232
HTTP/2 200 OK
content-type: text/html
                                        
date: Tue, 30 Aug 2022 18:27:37 GMT
cf-ray: 742f94df195d0b45-OSL
cache-control: public, max-age=14400
last-modified: Mon, 06 Jun 2022 20:56:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
permissions-policy: interest-cohort=()
set-cookie: __dcfduid=6c894da0289111eda658173f1aad6d92; Expires=Sun, 29 Aug 2027 18:27:37 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax __sdcfduid=6c894da1289111eda658173f1aad6d92feeaf2e2a2cd485103e054b051716e3b9f5a77bdcaec93bf4fd0607d70001b17; Expires=Sun, 29 Aug 2027 18:27:37 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
x-build-id: 658afa3e9b2fd84f7825b019e925af528bcb2f76
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pIxpMyXMJ41NcoekSfwwANb1Pmj90fBhd5tXHRr9xDDoUaq5M65JM94jnLSNbpI75QItxu%2F1mPHgJg%2BEUPNrz0PANakkVsu1%2Fv9RYAIxXX976KCcDz7GEHqiibxp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sb/ssp/utility/live-message/3-2/css/style.css HTTP/1.1 
Host: cdn.sb4you1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tube.perverzija.com
Connection: keep-alive
Referer: https://tube.perverzija.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.183.56
HTTP/2 200 OK
content-type: text/css
                                        
date: Tue, 30 Aug 2022 18:27:42 GMT
last-modified: Thu, 28 Apr 2022 08:29:13 GMT
etag: W/"626a5059-22dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 92046
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zDx%2FX3of46pvQT3YoeGcNqpC%2FLnzj6fD4qNdfShXzWjor0E1wpC%2FkQv7sGnWPZxUdYzn9cQczDE7pXLghaViw%2F90yElXSyS%2FmcIWDqFwrQaCLEuFh7i8CeIohmKxtBgI920%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742f94ff190eb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---