booru.eu/
301 Moved Permanently 707 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET / HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Fri, 03 Feb 2023 00:23:55 GMT
server: LiteSpeed
location: https://booru.eu/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10002
Expires: Fri, 03 Feb 2023 03:10:37 GMT
Date: Fri, 03 Feb 2023 00:23:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3292
Expires: Fri, 03 Feb 2023 01:18:47 GMT
Date: Fri, 03 Feb 2023 00:23:55 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 23:36:08 GMT
content-type: application/json
age: 2867
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4251
Expires: Fri, 03 Feb 2023 01:34:46 GMT
Date: Fri, 03 Feb 2023 00:23:55 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Is8Glalb+XEQJWzcWlpIoynZE5BGGYMT/w61QhxKFTSxQxs5xZl+TGrST+tf2MGh6UoXzC6XkhOwTbXrjbNaJw==
x-amz-request-id: F2AZHNENWR2M52FZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 00:23:19 GMT
age: 36
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 00:23:55 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 23:49:05 GMT
age: 2090
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
booru.eu/
200 OK 13 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15693)
Hash 46ebc46f9626ac682b3b19376a629164
83c1c0c92eff4771ce471642646e893fe9f37fe5
078ac61f4c6aa6a8636fa0ca0eecf253e941f214e5dce8e7f37f8905e519a44c
GET / HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-powered-by: SCore-develop/2.6.0
content-length: 13093
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 00:23:55 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8573
Expires: Fri, 03 Feb 2023 02:46:49 GMT
Date: Fri, 03 Feb 2023 00:23:56 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9c45ea25709afbea416f215ee34611b0
117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed
7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
booru.eu/data/cache/style.lib.danbooru2.1645259071.40cd750bba9870f18aada2478b24840a.css
200 OK 0 B URL HTTP/2 booru.eu/data/cache/style.lib.danbooru2.1645259071.40cd750bba9870f18aada2478b24840a.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /data/cache/style.lib.danbooru2.1645259071.40cd750bba9870f18aada2478b24840a.css HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Fri, 10 Feb 2023 00:23:56 GMT
content-type: text/css
last-modified: Sat, 19 Feb 2022 08:24:31 GMT
accept-ranges: bytes
content-length: 0
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-5368128-29
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-5368128-29
IP
File type ASCII text, with very long lines (1759)
Hash 7df4a56abdd29924759fc92f6124dd83
f3e0a850186e1816f7b245e46362857fe0fb6059
04e1915dd882e0e7ce0c7c4a4c7886d274ff496e0f5c429aaa89ec5397c7b46d
GET /gtag/js?id=UA-5368128-29 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booru.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 00:23:56 GMT
expires: Fri, 03 Feb 2023 00:23:56 GMT
cache-control: private, max-age=900
last-modified: Fri, 03 Feb 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43881
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64b0fe8e2f163f461708dc48185f2937
5b3701136353bb2faf8c7346c61d47ef70057f58
ede90ebf0efd64d2d32b77de392d0777bfe3ebf31a1c233cd0efb93a49620232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDE90EBF0EFD64D2D32B77DE392D0777BFE3EBF31A1C233CD0EFB93A49620232"
Last-Modified: Thu, 02 Feb 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8017
Expires: Fri, 03 Feb 2023 02:37:33 GMT
Date: Fri, 03 Feb 2023 00:23:56 GMT
Connection: keep-alive
syndication.realsrv.com/splash.php?idzone=4644886
200 OK 2.9 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4644886
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (720)
Hash 7b79dc660b8d9cbb056cab09963ebeae
fc2fc135b64527b5eb2d9299b34aa4a1cdba4e75
2c65edeacab6c47d1c92d82d648bee8813843ab066e1355afd9e97d40775617b
GET /splash.php?idzone=4644886 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263dc541c2169d6.60592607268260321%22%3B%7D; expires=Sun, 02 Feb 2025 00:23:56 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9c45ea25709afbea416f215ee34611b0
117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed
7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
booru.eu/data/cache/script.lib.danbooru2.1645259071.3adff132191c57976053df4d03699993.js
200 OK 47 kB URL HTTP/2 booru.eu/data/cache/script.lib.danbooru2.1645259071.3adff132191c57976053df4d03699993.js
IP
File type ASCII text, with very long lines (32029)
Hash 876d7335e82e52fc65291fa91fbd8a2d
99984048f8ba780475810bf86a00b780f1ac2b0b
91cf28a9a677cfba188ce5e0919328a5dafa5db551e9c6ec7e8da4dc4a80a793
GET /data/cache/script.lib.danbooru2.1645259071.3adff132191c57976053df4d03699993.js HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Fri, 10 Feb 2023 00:23:56 GMT
content-type: application/javascript
last-modified: Sat, 19 Feb 2022 08:24:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 46818
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/data/cache/style.main.danbooru2.1645259071.2fef036d0e4f82c9a71fd7b869625b9e.css
200 OK 2.7 kB URL HTTP/2 booru.eu/data/cache/style.main.danbooru2.1645259071.2fef036d0e4f82c9a71fd7b869625b9e.css
IP
Hash 3b0a649591610db99e870f8b89d7bd92
a0cbc993be0aa489bd07f2f56c1077e238889352
3a585a989347656e253a192c8228be031ae5ea95d4c0fe891c9f24e6fc014505
GET /data/cache/style.main.danbooru2.1645259071.2fef036d0e4f82c9a71fd7b869625b9e.css HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Fri, 10 Feb 2023 00:23:56 GMT
content-type: text/css
last-modified: Sat, 19 Feb 2022 08:24:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2673
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/data/cache/script.main.danbooru2.1645259071.188796649011eb3a0824181361c2ea5b.js
200 OK 2.6 kB URL HTTP/2 booru.eu/data/cache/script.main.danbooru2.1645259071.188796649011eb3a0824181361c2ea5b.js
IP
Hash 6756dc9aa6a13e9765bf6aae77b9df97
ba8323c47a6368ea01fae582929b671eac128904
7af0c5d4521e1a0bb575b1a30df4e410a5ed491236a3500b9e6d96d268989538
GET /data/cache/script.main.danbooru2.1645259071.188796649011eb3a0824181361c2ea5b.js HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Fri, 10 Feb 2023 00:23:56 GMT
content-type: application/javascript
last-modified: Sat, 19 Feb 2022 08:24:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2567
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/ec5bcb7487ff.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1039)
Hash 169b2f033d1f00f0de02a3e147b2551b
26140e92a885ffe358df7a80de7650877d8c1559
ff2ac3e9691f16e7553a59af51e3516af619389f4c10225cf8cb684f833726b1
GET /ec5bcb7487ff.js HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Fri, 10 Feb 2023 00:23:56 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 23:19:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1136
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/pop.js
200 OK 515 B IP
Hash 3d4316962e4719083375ab493c879ad1
eb592d38fc5b0fb24a8c8a4816145075220e2174
f031540026b2f77d21a710639cecf882718dc875eb455752859e80cd0e0a5091
GET /pop.js HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Fri, 10 Feb 2023 00:23:56 GMT
content-type: application/javascript
last-modified: Wed, 01 Feb 2023 19:39:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 515
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/648f9ae143fee0abec165526bf5b182e/thumb.jpg
200 OK 4.7 kB URL HTTP/2 booru.eu/_thumbs/648f9ae143fee0abec165526bf5b182e/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 175x192, components 3\012- data
Hash ca59f6941cc6caf7589634873e97cf32
5980cfc5046c25d3c4290dbfddfce6f63d54674f
ef230d0f55a9a07bf2ffc33a263c24d534b9fc3c02f73e3b4501a7836f1eaffe
GET /_thumbs/648f9ae143fee0abec165526bf5b182e/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Wed, 01 Feb 2023 11:34:20 GMT
accept-ranges: bytes
content-length: 4714
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/62ec6ff1c3d328390b5df71a947758dc/thumb.jpg
200 OK 5.7 kB URL HTTP/2 booru.eu/_thumbs/62ec6ff1c3d328390b5df71a947758dc/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 154x192, components 3\012- data
Hash 238db65964debefe6a75b380f1544451
d71b202d1b35353019ee71d9e149432cf18bc66d
aa138d37e9222d0e8ee29b8a926c4ddacab9dbaa05e4b56a0b4bac1ff91ba36a
GET /_thumbs/62ec6ff1c3d328390b5df71a947758dc/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Wed, 01 Feb 2023 11:31:30 GMT
accept-ranges: bytes
content-length: 5734
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/5df95821a5c0f8ecf78b2bf82a17351a/thumb.jpg
200 OK 5.8 kB URL HTTP/2 booru.eu/_thumbs/5df95821a5c0f8ecf78b2bf82a17351a/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 148x192, components 3\012- data
Hash f48e71e2b838e2e046bbd6c4f421d1d9
f6f9952fca78c64f4ff186952effe16b438ce1e4
4f54e322c3142ce44ade7a3005d3faee239ffcb2bd2b2a974b98140b79812146
GET /_thumbs/5df95821a5c0f8ecf78b2bf82a17351a/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Wed, 01 Feb 2023 11:26:24 GMT
accept-ranges: bytes
content-length: 5804
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a464027d50a862a86d20780c8323c490
b22f0161eec4841bea2a7801749d1c99b4baa4cd
03bc1591d6ddb260350e0262d69e04ebf601448ee854b40cd712931bb302591a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 14:35:30 GMT
Expires: Tue, 07 Feb 2023 14:35:29 GMT
Etag: "b22f0161eec4841bea2a7801749d1c99b4baa4cd"
Cache-Control: max-age=396092,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793705501bb1b4f3-OSL
booru.eu/_thumbs/73aa4ed383befdc55340c7aeb9f429ec/thumb.jpg
200 OK 4.6 kB URL HTTP/2 booru.eu/_thumbs/73aa4ed383befdc55340c7aeb9f429ec/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 128x192, components 3\012- data
Hash 99a4d9fe343b0454819f6d5b10e5185e
b9daf7dfa9d3f3612f1dee9aeefefbc0700d061d
469db75e77e143502ba7f3f27b269649932e7ffb1448d49255e67492e3d3fec4
GET /_thumbs/73aa4ed383befdc55340c7aeb9f429ec/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Wed, 01 Feb 2023 11:23:45 GMT
accept-ranges: bytes
content-length: 4576
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/9d721164600ecb341f18d5360d1f7474/thumb.jpg
200 OK 6.3 kB URL HTTP/2 booru.eu/_thumbs/9d721164600ecb341f18d5360d1f7474/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x192, components 3\012- data
Hash 32322e4468af79a7fb1aaa5b98bf0a43
ecea9a3ca024875a932b8e43ba649bae6fec7cdc
65472d485a95dce858a2b4a1d14373ee3b7dacbf1c10878700994e63239645ea
GET /_thumbs/9d721164600ecb341f18d5360d1f7474/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Wed, 01 Feb 2023 11:21:13 GMT
accept-ranges: bytes
content-length: 6280
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tOWVszQS76NTCPqf8VbvJw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: H1IKUIFRf8Dfe+vKVRsJa5NC/Ao=
booru.eu/_thumbs/e94f64723065663b2e317f4651fda109/thumb.jpg
200 OK 8.1 kB URL HTTP/2 booru.eu/_thumbs/e94f64723065663b2e317f4651fda109/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 137x192, components 3\012- data
Hash 4526e82421e31c3860c1885a970acc61
6fd0966dfc39e1131aad44c21ba1b787cfb3310f
97194c6df773f5056d02955c00b87e5e2de4791494af08cff71a6a61b32fdb61
GET /_thumbs/e94f64723065663b2e317f4651fda109/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Sun, 29 Jan 2023 12:29:32 GMT
accept-ranges: bytes
content-length: 8069
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/bd0d284066440b3bbd2032397e25cb02/thumb.jpg
200 OK 5.5 kB URL HTTP/2 booru.eu/_thumbs/bd0d284066440b3bbd2032397e25cb02/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 128x192, components 3\012- data
Hash 1dc7fac4c9f66e2a991037f26bcd178f
4cb3ba0e5bb844107f056a137064f79e01fb961c
2552d2f8ce6b5e23ff3728fab74079ed71b4db86ce7e1b939287f53758d61bb6
GET /_thumbs/bd0d284066440b3bbd2032397e25cb02/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Sun, 29 Jan 2023 12:14:51 GMT
accept-ranges: bytes
content-length: 5510
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/09fa659fdf9627804481f709937f460e/thumb.jpg
200 OK 6.5 kB URL HTTP/2 booru.eu/_thumbs/09fa659fdf9627804481f709937f460e/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 192x133, components 3\012- data
Hash 1e2810d2354bfc2352fc99183013c965
880190206484862c4772e1e30cb917188436eccf
2ce1002fad818c738a107a8b9bbd5b55b0d3cd9cb4d1a2cc94c70d282c877695
GET /_thumbs/09fa659fdf9627804481f709937f460e/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Sun, 29 Jan 2023 12:11:28 GMT
accept-ranges: bytes
content-length: 6532
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/7bbf9ce5b9690d01e037b270869c1301/thumb.jpg
200 OK 7.0 kB URL HTTP/2 booru.eu/_thumbs/7bbf9ce5b9690d01e037b270869c1301/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 134x192, components 3\012- data
Hash c6dbcc3331a7f6e655b44e7d0f9b2edd
a5eea376df8d332af1cd4c9eff7f9e19266bbcda
063abfc28e318ba131080f9fbff3d267350e6c8ebfd03d2a550780a5364195a0
GET /_thumbs/7bbf9ce5b9690d01e037b270869c1301/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Sun, 29 Jan 2023 12:09:34 GMT
accept-ranges: bytes
content-length: 7041
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
booru.eu/_thumbs/4a2efdacc00d5d6a642402e29c0957ec/thumb.jpg
200 OK 5.8 kB URL HTTP/2 booru.eu/_thumbs/4a2efdacc00d5d6a642402e29c0957ec/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 117x192, components 3\012- data
Hash c165b22963cc923287d42a3317fb3794
c3334a3341418070aeac5b9dcec93822c54b3f69
371f34ccfccd8bf1003ae87d3e31523190e27d390e5e54b491a51c3e5e781d3f
GET /_thumbs/4a2efdacc00d5d6a642402e29c0957ec/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Sun, 29 Jan 2023 11:58:20 GMT
accept-ranges: bytes
content-length: 5755
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/fbf067151c38b66c9c5f5fd32db4656b/thumb.jpg
200 OK 7.8 kB URL HTTP/2 booru.eu/_thumbs/fbf067151c38b66c9c5f5fd32db4656b/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 137x192, components 3\012- data
Hash 6864090622bca84e32c7534362289115
ea5ef61eb9d554a993098068305f40e7306a3f58
75ae3664cecef36fe40eb739f780a9fff4c12b21e891f5f952e452d925bdfec9
GET /_thumbs/fbf067151c38b66c9c5f5fd32db4656b/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Thu, 26 Jan 2023 10:54:32 GMT
accept-ranges: bytes
content-length: 7789
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/c013fbe67ffdafaa5021dfceabf7d7e0/thumb.jpg
200 OK 6.6 kB URL HTTP/2 booru.eu/_thumbs/c013fbe67ffdafaa5021dfceabf7d7e0/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 128x192, components 3\012- data
Hash a7295fe38bf1e398c8c1368045460ce7
8baaec212ed48acde789f343e0456bfd687d192d
873a3d776ab48a6ce604125a4f006a8e5daca2b774e19e74da98e8ddb3f15d88
GET /_thumbs/c013fbe67ffdafaa5021dfceabf7d7e0/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Thu, 26 Jan 2023 10:23:26 GMT
accept-ranges: bytes
content-length: 6569
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/10c0a4cb030ddc40c1fbacb01efd8a19/thumb.jpg
200 OK 7.0 kB URL HTTP/2 booru.eu/_thumbs/10c0a4cb030ddc40c1fbacb01efd8a19/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 192x146, components 3\012- data
Hash 5051a62bfcad73acdab74cbeba2d96f1
617c0a6b74a926a0eb5a24001ef63c98a97e099c
7374900416e9c2a96fa941d258e269237cb82982a1f1baf7374fe6b5631444dd
GET /_thumbs/10c0a4cb030ddc40c1fbacb01efd8a19/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Thu, 26 Jan 2023 10:20:10 GMT
accept-ranges: bytes
content-length: 6971
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/6793c233823cf1f9b64d3805826a2727/thumb.jpg
200 OK 6.6 kB URL HTTP/2 booru.eu/_thumbs/6793c233823cf1f9b64d3805826a2727/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 143x192, components 3\012- data
Hash 5bf019e8da331f2d988b8ae582dc2baf
7d52b5c3fbebc19f8ef90cddc4c586f681f9f8dc
5a438aab02bf1f0b39186d6f2eb02f2392c615cbcd25155b3c77867dcc71807f
GET /_thumbs/6793c233823cf1f9b64d3805826a2727/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Thu, 26 Jan 2023 10:15:34 GMT
accept-ranges: bytes
content-length: 6619
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/02d082cf41045bc4312f694f7ea7811f/thumb.jpg
200 OK 6.3 kB URL HTTP/2 booru.eu/_thumbs/02d082cf41045bc4312f694f7ea7811f/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 133x192, components 3\012- data
Hash 4a5e040de87339d8b3643a5c270046fe
7d8c2c968cc9d97748a663807b3134403fb20890
1bca671c5a4eca0f9587c97d5f98028d2020cdb48b9ba657130c553e5830844c
GET /_thumbs/02d082cf41045bc4312f694f7ea7811f/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Mon, 23 Jan 2023 13:24:28 GMT
accept-ranges: bytes
content-length: 6333
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/2ca713326290fef40d64c633e92fb253/thumb.jpg
200 OK 6.7 kB URL HTTP/2 booru.eu/_thumbs/2ca713326290fef40d64c633e92fb253/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 192x147, components 3\012- data
Hash d0704433c38263ba15f1fdd251c4eeb3
982fd67f1f39aa664509865a2770829040edd959
17c3b99c7e581fe569f9801bc93d4a47319adbeb939481d3b9bfad92eeede93b
GET /_thumbs/2ca713326290fef40d64c633e92fb253/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Mon, 23 Jan 2023 13:18:45 GMT
accept-ranges: bytes
content-length: 6670
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/98e3f02f0771ad6d3573e0ed3308a1c9/thumb.jpg
200 OK 3.8 kB URL HTTP/2 booru.eu/_thumbs/98e3f02f0771ad6d3573e0ed3308a1c9/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 108x192, components 3\012- data
Hash d2aeb85f33b83f80f3934d76a5f2201d
f25c5330652aa2ee3c9cfb00e1177120ae0e8f92
818621ef20a2e9ba5728f7265ce45e5be46a79db4b47508788dc59924730da99
GET /_thumbs/98e3f02f0771ad6d3573e0ed3308a1c9/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Mon, 23 Jan 2023 12:23:51 GMT
accept-ranges: bytes
content-length: 3785
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/c04c97ef9fb0321d23437a3b0831a56e/thumb.jpg
200 OK 5.7 kB URL HTTP/2 booru.eu/_thumbs/c04c97ef9fb0321d23437a3b0831a56e/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 148x192, components 3\012- data
Hash 580c2994a9869af7c6030cefedab802e
273884534d0da9bf897245812e3441dd7dcad13b
8d3253b507e7ae22f382a55478d21d41961cbe4125e97a535148aae326d01829
GET /_thumbs/c04c97ef9fb0321d23437a3b0831a56e/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Mon, 23 Jan 2023 12:15:36 GMT
accept-ranges: bytes
content-length: 5693
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/61f700140171d56875a82bc7ea7437f0/thumb.jpg
200 OK 4.9 kB URL HTTP/2 booru.eu/_thumbs/61f700140171d56875a82bc7ea7437f0/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x192, components 3\012- data
Hash 9209dba6f6d15720cfaa1521cbf60a3f
f4ad846cda504a2378317538774425111fc958eb
53ea38856d8bb2d4329c4b9f585b8d8ccff177c9d781f89b6c0c40630ad356a5
GET /_thumbs/61f700140171d56875a82bc7ea7437f0/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Mon, 23 Jan 2023 12:12:33 GMT
accept-ranges: bytes
content-length: 4855
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
booru.eu/_thumbs/c7fbd0a928d0c4a1744c1a00136e2055/thumb.jpg
200 OK 6.0 kB URL HTTP/2 booru.eu/_thumbs/c7fbd0a928d0c4a1744c1a00136e2055/thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 164x192, components 3\012- data
Hash 3b37a822c1ef389916316a3248bca516
8bd9f4634fc3ecdf76ee98f61d02668873534f90
bf8c5999a314d6e3d204d10e15e3e60dac9a5dac44caf38f7bbcbb4b704df8ae
GET /_thumbs/c7fbd0a928d0c4a1744c1a00136e2055/thumb.jpg HTTP/1.1
Host: booru.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2629743
expires: Sun, 05 Mar 2023 00:23:56 GMT
last-modified: Thu, 26 Jan 2023 10:52:00 GMT
accept-ranges: bytes
content-length: 6047
date: Fri, 03 Feb 2023 00:23:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
syndication.realsrv.com/cimp.php?t=imp&data=H4sIAAAAAAAAA01PS2pEMQy7Si8wD/kTJ5511y209AB9L8l2oDAwCx++zutiGsVYyChWGCwXcN4X8ivLtVg4bY5NeaOi8fb+EUqx324/923cQ8zAFkReXaMSqnOoqba2VIRUKmIU5gUEzmFqgQQXUV1sA8RKi4r4+nw9ixIWAjy4IPlaG4zQ5Hgs9/S9mn83HqQk0oezm46eChenZcIzZjo9v9JguvaVnPIZ4g8XOlsexJP9h53vZSzV1UJ27UWO6XJwrXb0aQrsZrXOObT/AiY5Pb5JAQAA&d=inst
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=imp&data=H4sIAAAAAAAAA01PS2pEMQy7Si8wD/kTJ5511y209AB9L8l2oDAwCx++zutiGsVYyChWGCwXcN4X8ivLtVg4bY5NeaOi8fb+EUqx324/923cQ8zAFkReXaMSqnOoqba2VIRUKmIU5gUEzmFqgQQXUV1sA8RKi4r4+nw9ixIWAjy4IPlaG4zQ5Hgs9/S9mn83HqQk0oezm46eChenZcIzZjo9v9JguvaVnPIZ4g8XOlsexJP9h53vZSzV1UJ27UWO6XJwrXb0aQrsZrXOObT/AiY5Pb5JAQAA&d=inst
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=imp&data=H4sIAAAAAAAAA01PS2pEMQy7Si8wD/kTJ5511y209AB9L8l2oDAwCx++zutiGsVYyChWGCwXcN4X8ivLtVg4bY5NeaOi8fb+EUqx324/923cQ8zAFkReXaMSqnOoqba2VIRUKmIU5gUEzmFqgQQXUV1sA8RKi4r4+nw9ixIWAjy4IPlaG4zQ5Hgs9/S9mn83HqQk0oezm46eChenZcIzZjo9v9JguvaVnPIZ4g8XOlsexJP9h53vZSzV1UJ27UWO6XJwrXb0aQrsZrXOObT/AiY5Pb5JAQAA&d=inst HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Origin: https://booru.eu
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263dc541c2169d6.60592607268260321%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://booru.eu
Access-Control-Allow-Credentials: true
Set-Cookie: impressions=oslmrxbrnxgxamrscrmeogeicxbmsbcenxgxamrseoscsgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamreseallgeicxbmsbocnxgxamrolmocogeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamrscrmeogeioslmrxlrnxgxamslescrogeimmccrbxenxgxamrescroogeislsaroornxgxamccolacbgeioslmroemnxgxamrsxxxmrgeioslmrxlsnxgxamroamsoegeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamrsxxxmrgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamrescroogeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamrsarxclgeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamrescroogeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamrolmocogeimcclsxlcnxgxamreaccbbgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamreollxsgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamrescroogeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeialbserxonxgxamclarlmmgeimcclosscnxgxamreaccbbgeimaecobronxgxamrescroogeimaecobeenxgxamrescroogeimcclosccnxgxamrescroogeimaecoboonxgxamrescroogeimrblxelenxgxamrescroogeimblelambncgxamrsexccmgxcceimlxoblmonxgxamrsexccmgxcceimlxoblabnxgxamrsexccmgxcceimblelabonxgxamrsexccmgxcceimblelaabnxgxamrsexccmgxcceimblelamenogxamrsexccmgxcceiceecmorsnxgxamrsexccmgxcceimcssmlrcnsgxamrseoscsgxcceimclsaoxbncgxamrseoscsgxcceimeembescnogxamrseoscsgxcceialaroxrcnxgxamrserbeegxcceimexexabbnxgxamrserbesgxcceimbroosxcnxgxamrselcmrgxcceimsmxmosenxgxamrsxeecrgxcceicxmecmcanxgxamrsxeecbgxcceimxlbmosonogxamrsxxxmrgxcceimrxccosonxgxamrsxamrrgxcceiallxlmscnxgxamrsxleelgxcceimeembecenxgxamrsomsecgxcceimxeemblcnxgxamrsomsergxcceimrbleaebnxgxamrsseeoagxcceimbeelllanxgxamrssoeomgxcceicloaxxabnxgxamrssoalagxcceimxlbmxlcnxgxamrssomelgxcceimcssmlrenxgxamrsssoabgxcceimeembesonxgxamrsscsbagxcceimxlbmosancgxamrsrooalgxcceimcssmlronogxamrsrooalgxcceimmraexsenxgxamrsrcaccgxcceimmraexxanxgxamrsrcaccgxcceimboslabcnxgxamrsarxclgxcceimxeoxsacnxgxamrsarxclgxcceimbbcemoanrgxamrsamobsgxcceimxlbmoconxgxamrsamobcgxcceimbclraronrgxamrsmcxsogxcceimxlbmoobnogxamrsmcxsogxcceimesoasbanxgxamrsboxccgxcceimxesoxcbnxgxamrsboxccgxcceialrexeoonxgxamrsbsbsagxcce; expires=Sat, 04 Feb 2023 00:23:56 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22110.0199%22%7D; expires=Sun, 02 Feb 2025 00:23:56 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/images/close-icon-circle.png
200 OK 405 B URL HTTP/2 s3t3d2y8.afcdn.net/images/close-icon-circle.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash bc8bf5d1633e548e9a178bf29be30b7b
bd290b6eabd73d2c95db053620797503e9178484
94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb
GET /images/close-icon-circle.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: image/png
content-length: 405
last-modified: Wed, 29 Jun 2022 13:13:10 GMT
etag: "62bc4fe6-195"
expires: Fri, 30 Jun 2023 18:46:41 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195204
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRSvtEP/GLcdAQ
x-77-nzt-ray: af5856306aad0c781c54dc6399a6d91f
x-cache: HIT
x-age: 18724632
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
200 OK 34 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
IP
ASN #60068 Datacamp Limited
File type GIF image data, version 87a, 300 x 250\012- data
Hash de7b5f0f330a7334443954ee85688796
52210feda06ede630d29bcaf5699abb8b60b13af
ee98bc0aac6d6d7e8bfd0eedc2b5783abdafeeb831ff3acaaa92bc47b6c8e33e
GET /library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booru.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: image/gif
content-length: 33476
last-modified: Wed, 04 Jul 2018 11:47:03 GMT
etag: "5b3cb3b7-82c4"
expires: Fri, 30 Jun 2023 11:16:46 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195242
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRRMISj/8rYdAQ
x-77-nzt-ray: af5856306aad0c781c54dc63ac67ac21
x-cache: HIT
x-age: 18724594
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 21 Nov 2022 05:24:20 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"637b0b84-eae"
Content-Encoding: gzip
syndication.exosrv.com/ads-iframe-display.php?idzone=2902768&type=300x250&p=https%3A//booru.eu/&dt=1675383864853&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
200 OK 1.3 kB URL HTTP/1.1 syndication.exosrv.com/ads-iframe-display.php?idzone=2902768&type=300x250&p=https%3A//booru.eu/&dt=1675383864853&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1208)
Hash b737c9bab622e630debbafe442362135
739e21b5bfbbe9850a4ffc366f44e4fdb8f4cb92
1a9a3f4a2e8ec0fcca61e81eef63513c13b63cfcd946c7f09cd8d77e673e43c1
GET /ads-iframe-display.php?idzone=2902768&type=300x250&p=https%3A//booru.eu/&dt=1675383864853&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263dc541c8ad0c5.12198315288755096%22%3B%7D; expires=Sun, 02 Feb 2025 00:23:56 GMT; path=; domain=.exosrv.com; Secure; SameSite=none
impressions=oslmrxbrnxgxamrscrmeogeicxbmsbcenxgxamrseoscsgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamreseallgeicxbmsbocnxgxamrolmocogeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamrscrmeogeioslmrxlrnxgxamslescrogeimmccrbxenxgxamrescroogeislsaroornxgxamccolacbgeioslmroemnxgxamrsxxxmrgeioslmrxlsnxgxamroamsoegeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamrsxxxmrgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamrescroogeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamrsarxclgeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamrescroogeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamrolmocogeimcclsxlcnxgxamreaccbbgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamreollxsgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamrescroogeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeialbserxonxgxamclarlmmgeimcclosscnxgxamreaccbbgeimaecobronxgxamrescroogeimaecobeenxgxamrescroogeimcclosccnxgxamrescroogeimaecoboonxgxamrescroogeimrblxelenxgxamrescroogeimblelambncgxamrsexccmgxcceimlxoblmonxgxamrsexccmgxcceimlxoblabnxgxamrsexccmgxcceimblelabonxgxamrsexccmgxcceimblelaabnxgxamrsexccmgxcceimblelamenogxamrsexccmgxcceiceecmorsnxgxamrsexccmgxcceimcssmlrcnsgxamrseoscsgxcceimclsaoxbncgxamrseoscsgxcceimeembescnogxamrseoscsgxcceialaroxrcnxgxamrserbeegxcceimexexabbnxgxamrserbesgxcceimbroosxcnxgxamrselcmrgxcceimsmxmosenxgxamrsxeecrgxcceicxmecmcanxgxamrsxeecbgxcceimxlbmosonogxamrsxxxmrgxcceimrxccosonxgxamrsxamrrgxcceiallxlmscnxgxamrsxleelgxcceimeembecenxgxamrsomsecgxcceimxeemblcnxgxamrsomsergxcceimrbleaebnxgxamrsseeoagxcceimbeelllanxgxamrssoeomgxcceicloaxxabnxgxamrssoalagxcceimxlbmxlcnxgxamrssomelgxcceimcssmlrenxgxamrsssoabgxcceimeembesonxgxamrsscsbagxcceimxlbmosancgxamrsrooalgxcceimcssmlronogxamrsrooalgxcceimmraexsenxgxamrsrcaccgxcceimmraexxanxgxamrsrcaccgxcceimboslabcnxgxamrsarxclgxcceimxeoxsacnxgxamrsarxclgxcceimbbcemoanrgxamrsamobsgxcceimxlbmoconxgxamrsamobcgxcceimbclraronrgxamrsmcxsogxcceimxlbmoobnogxamrsmcxsogxcceimesoasbanxgxamrsboxccgxcceimxesoxcbnxgxamrsboxccgxcceialrexeoonxgxamrsbsbsagxcceialrexexbnxgxamrsbsbsagxcce; expires=Sat, 04 Feb 2023 00:23:56 GMT; path=/; domain=.exosrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 280 B IP
Hash a276193a48c4e77877da81e099a3b504
a641e796e689acb14da9d8f820f6d3795bc69a06
07f6df38eec3e8357decd9388da978f0a43519a76d96be8d03be1a8b6cd64f67
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 00:23:56 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 04:43:15 GMT
Expires: Thu, 09 Feb 2023 04:43:14 GMT
Etag: "a641e796e689acb14da9d8f820f6d3795bc69a06"
Cache-Control: max-age=533357,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79370552cd40b4f3-OSL
static.a-ads.com/a-ads-banners/425767/300x250?region=eu-central-1
200 OK 553 kB URL HTTP/2 static.a-ads.com/a-ads-banners/425767/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 300 x 250\012- data
Size 553 kB (552597 bytes)
Hash 5c0fd175092e25b5de58f290130b733e
000b2ac0d1c8995e66b7b4ae791669d68f0ab5c0
3f58e323e0745728f7fd308f10db7937e3a8a5489eeae60b9bbb74f43a51390c
GET /a-ads-banners/425767/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: image/gif
content-length: 552597
x-amz-id-2: 2vk1bWGkLBlEueKS0ybbthGK5NL90v0cN5I3sTlA4deiWpkCg5pl2Wc53eN74LDf7rywTsslF34=
x-amz-request-id: 004QBVH6H9MEHSHC
x-amz-replication-status: COMPLETED
last-modified: Mon, 14 Nov 2022 10:39:43 GMT
etag: "5c0fd175092e25b5de58f290130b733e"
cache-control: max-age=315360000
x-amz-version-id: pn1p08TBgSXsvFMFjZkGq2BsNKxSewr9
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 280 B IP
Hash a276193a48c4e77877da81e099a3b504
a641e796e689acb14da9d8f820f6d3795bc69a06
07f6df38eec3e8357decd9388da978f0a43519a76d96be8d03be1a8b6cd64f67
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 00:23:57 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 04:43:15 GMT
Expires: Thu, 09 Feb 2023 04:43:14 GMT
Etag: "a641e796e689acb14da9d8f820f6d3795bc69a06"
Cache-Control: max-age=533356,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79370552cd0ab50b-OSL
www.google.com/s2/favicons?domain=https://erotic-beauties.com
301 Moved Permanently 340 B URL HTTP/2 www.google.com/s2/favicons?domain=https://erotic-beauties.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 77307008745cfda4494e78d9badc6051
fc2336d7db466d9488720cf6b3bcd1cc8a09e146
21449d050a4bb50414e1a64b8bff758360a8d8f9875a4104c81110e70ff3fa82
GET /s2/favicons?domain=https://erotic-beauties.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-beauties.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 340
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://jennylist.xyz
301 Moved Permanently 333 B URL HTTP/2 www.google.com/s2/favicons?domain=http://jennylist.xyz
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 03d4fd1e82a182a0c0e16344f6c18b78
2d89235bc4e714b90ce50e9782c6e749cbdd46c8
b5400336f92e4f610a5fd820dbcc77c40c59589304da60a33f9cd10245379ae5
GET /s2/favicons?domain=http://jennylist.xyz HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://jennylist.xyz&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://zehnporn.com
301 Moved Permanently 332 B URL HTTP/2 www.google.com/s2/favicons?domain=http://zehnporn.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 395bef94f04810db9ee97f4c72a91b1b
0d96d72ea7bdf6cf1ac76e044cef5e62c08b8542
be8054b48d12e53ab2ccd1089aaa30bc7b05545902ec6d81e08c4e404936a557
GET /s2/favicons?domain=http://zehnporn.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://zehnporn.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://www.lindylist.org
301 Moved Permanently 337 B URL HTTP/2 www.google.com/s2/favicons?domain=http://www.lindylist.org
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 81cb5643b63147c4d14f9efa05b70545
f57f050411e6a4fb7233eae9e004a1d54125e55d
f73a67744f636e22ad6d5e93f234bbc22cee7d151cb5c912bcd1970849ff2ef0
GET /s2/favicons?domain=http://www.lindylist.org HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.lindylist.org&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 337
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/s2/favicons?domain=http://abellalist.com
301 Moved Permanently 334 B URL HTTP/2 www.google.com/s2/favicons?domain=http://abellalist.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 3134e98ca97d4f00d2a256197cd22748
d4aa0f4f81b0de4f54e0dfea480520a6ba330346
2156a7803ac659520e4466d33e3910a935774bad871a1f84c6fd3ef583f50c49
GET /s2/favicons?domain=http://abellalist.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://abellalist.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 334
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 02 Feb 2023 23:45:20 GMT
expires: Fri, 03 Feb 2023 01:45:20 GMT
cache-control: public, max-age=7200
age: 2317
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://doseofporn.com
301 Moved Permanently 334 B URL HTTP/2 www.google.com/s2/favicons?domain=http://doseofporn.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash b173328be130daf20f08c14ba73314dc
5faba7f478335244f86ee5833326af47aed3fa83
5616dae0dde31af89d7cf8e7d733fddf29df21a3a94820c2085302b61c152bfb
GET /s2/favicons?domain=http://doseofporn.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://doseofporn.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 334
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://lizardporn.com
301 Moved Permanently 334 B URL HTTP/2 www.google.com/s2/favicons?domain=http://lizardporn.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash f9dc5e214e0a558e64fcf8c0a4ed3801
5b53efa0c04f4f4189fddb0b81ccf1b848492c0e
33abe02b5eb0fa02cea14c27aa1204358b0f6b0deeb793a047f1aeffd325b6aa
GET /s2/favicons?domain=http://lizardporn.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://lizardporn.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 334
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.realsrv.com/popunder1000.js
200 OK 37 kB URL HTTP/2 a.realsrv.com/popunder1000.js
IP
ASN #60068 Datacamp Limited
Hash c2477373441b9c5662e4a5de4985f07e
6fa2dbba6417d77df65eb80b9f5415a319f865be
7d1d1329d7d3edbe9ec48fad05fbe36391818261889d6769c2ab57c344972fc3
GET /popunder1000.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263dc541c2169d6.60592607268260321%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: application/javascript
etag: W/"d866557387aa14b697929065b92"
expires: Thu, 02 Feb 2023 18:45:48 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675385202
server: CDN77-Turbo
x-77-nzt: AblMCQ1Kshb/2iQAAA
x-77-nzt-ray: c0a4cc28c7f94a751c54dc638b7c0c22
x-cache: HIT
x-age: 9434
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://redporn.tv
301 Moved Permanently 331 B URL HTTP/2 www.google.com/s2/favicons?domain=https://redporn.tv
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 79f8a4be5479a6945e97472f0d7a5e47
65ee9d42ec72fc58d62d0d24cde70305a65f40b7
e264e877072c6e9a34f13478a29bd1df573c2aa8a343e740e6c0209999e60424
GET /s2/favicons?domain=https://redporn.tv HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://redporn.tv&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 331
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/s2/favicons?domain=https://bravotube.tv
301 Moved Permanently 333 B URL HTTP/2 www.google.com/s2/favicons?domain=https://bravotube.tv
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 143aaec2b7ff324bd9bcd27a890854c3
c36f2c0b9af61207e1e6e27d58b802356e8e9d71
07803ee32f0a91b7a689b59d8847146caea6e18dc050c0a6a4a99c0542fe8efc
GET /s2/favicons?domain=https://bravotube.tv HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://bravotube.tv&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/s2/favicons?domain=https://fapvid.net
301 Moved Permanently 331 B URL HTTP/2 www.google.com/s2/favicons?domain=https://fapvid.net
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 7b17869c95992b704ab6412191ec9e37
70ca46437ec865ccd7b4d025e2063db2fcefff01
ef6116d455ce1939849e37f35c9c944a7f6b202f1900441c03687e21ac21ae3d
GET /s2/favicons?domain=https://fapvid.net HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fapvid.net&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 331
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.glasyxabe.pro/eea814/d0a1ea8b6825.js
200 OK 26 kB URL HTTP/2 www.glasyxabe.pro/eea814/d0a1ea8b6825.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d8e3cc87600d6e2649d28fad28747abf
d38930590f4a39178d66d0529012b8a0ccf4c73a
4847a535b28a9d4a283436e437092dda55777364c421c1f528ac94bc8d93d17d
Analyzer Verdict Alert quad9 Sinkholed
GET /eea814/d0a1ea8b6825.js HTTP/1.1
Host: www.glasyxabe.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315358564, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnfDP99yEHNfh/s/vR6hhueV5poQosFRHg7MChOCzn8QdY=
x-served-from: l1
x-vhostid: 74, 21919
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://www.imperiodefamosas.com
301 Moved Permanently 344 B URL HTTP/2 www.google.com/s2/favicons?domain=http://www.imperiodefamosas.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 82dad2754103ea5a006f1fd2fcf28e04
fa5c1f2e9065e77b9e1cbbe1683b568da6ba7801
7bdb2af006348a444002b3c0317154279a80aa9c733da77677d95e83d89d7f41
GET /s2/favicons?domain=http://www.imperiodefamosas.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.imperiodefamosas.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 344
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://anyxxx.me
301 Moved Permanently 330 B URL HTTP/2 www.google.com/s2/favicons?domain=https://anyxxx.me
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash ca2f2d5b1a4fdee76e317b50f5d296fb
63abbc310c74fa7e0a97b3be722c6cb57abd17d7
7c102611eae5a88219552444a58461ea624e56b536ee317347695594bedf3df3
GET /s2/favicons?domain=https://anyxxx.me HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://anyxxx.me&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 330
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 608df7a6e71e4e3008bee31c3153eec7
c917a8425a17a5573a3b897872d99e7fb6a575ec
18717c2d3e1c51799dc8a26f011bc4ac107b9130a8ce1ac074ed7fd8d71157f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18717C2D3E1C51799DC8A26F011BC4AC107B9130A8CE1AC074ED7FD8D71157F4"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15099
Expires: Fri, 03 Feb 2023 04:35:36 GMT
Date: Fri, 03 Feb 2023 00:23:57 GMT
Connection: keep-alive
www.glasyxabe.pro/eea814/d0a1ea8b6825.js
200 OK 26 kB URL HTTP/2 www.glasyxabe.pro/eea814/d0a1ea8b6825.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 14e50de947f186598792b08edd5e352f
53f26aeb96e5752cbb9a725b0bb1cab0e1dc70e2
a3aa7fe05067ea03b11c2a69eda6519943c1b295a20e0c9b9f993464e50d0c20
Analyzer Verdict Alert quad9 Sinkholed
GET /eea814/d0a1ea8b6825.js HTTP/1.1
Host: www.glasyxabe.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Content-type: text/plain
Origin: https://booru.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315358564, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnfDP99yEHNfh/s/vR6hhueV5poQosFRHg7MChOCzn8QdY=
x-served-from: l1
x-vhostid: 74, 21896
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://erotic-art.net
301 Moved Permanently 335 B URL HTTP/2 www.google.com/s2/favicons?domain=https://erotic-art.net
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 8c7da4f25e0a0d8d63ef217b230792eb
08167c04c986bfe23ab3982adc50dd0632fd01e3
7a992bee63eddda7dfff43ca75019c9edfbc0a317703f6f5cb2ab15a9079e14d
GET /s2/favicons?domain=https://erotic-art.net HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-art.net&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 335
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://amabitch.com
301 Moved Permanently 332 B URL HTTP/2 www.google.com/s2/favicons?domain=http://amabitch.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash f888514583c2eabe1c228063050162fc
9373785d8fe5bb5a861c7e7453e7369388e5563b
c6af399c512d59ddd365a095478828db81e3e5ed5594469ab2f64272b55b780f
GET /s2/favicons?domain=http://amabitch.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://amabitch.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://www.hentaipins.com
301 Moved Permanently 339 B URL HTTP/2 www.google.com/s2/favicons?domain=https://www.hentaipins.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash d810857d4255cba5d4c7c229b4234d91
347dccd77214bcaa3e617fc52f06162d732f8c45
7e0b97c65f51f8952fb2fb79627d55d1a01975e0fa3731d3071bf7e41dfcdd8e
GET /s2/favicons?domain=https://www.hentaipins.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.hentaipins.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 339
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://www.a-shemaletube.com
301 Moved Permanently 341 B URL HTTP/2 www.google.com/s2/favicons?domain=http://www.a-shemaletube.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash f4ead0cff3439112fd125af32fcadfaf
d765c55db03b7e6591d483cda258aaac623aec9d
01920d526676e3045c8102e4ddc72a39f837d959e04fbb3c45423eefbeee183b
GET /s2/favicons?domain=http://www.a-shemaletube.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.a-shemaletube.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 341
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.a-ads.com/1637015?size=300x250
200 OK 5.1 kB URL HTTP/2 ad.a-ads.com/1637015?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Hash 95e680c1cb140a7862b72ad27c6277fe
17193ccd0a06bd5f7db2d9b56aa641cdeead4cf5
611be51d45b6d5ba63fb52ca6d89019c88cecd30ea0b6df67ccde02fa85e8cc3
GET /1637015?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://booru.eu/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://4ksex.me
301 Moved Permanently 329 B URL HTTP/2 www.google.com/s2/favicons?domain=https://4ksex.me
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash c93ebc24ec5ead2b1e4009fa05ecf5b7
b8bb38d7c5ceb17bf0e0d07f966e0d9bb1fbf5bc
a5bd87088acc2a9e5791367a28fd78e10297f82ee2a6317d9916df7541c0e108
GET /s2/favicons?domain=https://4ksex.me HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://4ksex.me&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 329
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://porndude.me
301 Moved Permanently 332 B URL HTTP/2 www.google.com/s2/favicons?domain=https://porndude.me
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 502b1ff851e7878b8a8bca8cc94cdaf5
5d1bdfeecef6b97a60d171d12d057587140a07cd
58306341d93c87e31d75fc4432518d98e9599c03e1961a015410443cbb4dc630
GET /s2/favicons?domain=https://porndude.me HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://porndude.me&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=http://kendralist.com
301 Moved Permanently 334 B URL HTTP/2 www.google.com/s2/favicons?domain=http://kendralist.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash dd4b6d829658d3e71d9a84bde4bb6e8a
a1ff5bc0e7ef2fdf94e05c3c648449100edfd2f5
5aa56f859983be032c104535cad14f78c1d97389cb69c46b47e18eabbca99a34
GET /s2/favicons?domain=http://kendralist.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://kendralist.com&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 334
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/s2/favicons?domain=https://niceporn.tv
301 Moved Permanently 332 B URL HTTP/2 www.google.com/s2/favicons?domain=https://niceporn.tv
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash a7e69dd70bd75738d414fc27ec30da7d
19ab0a7482bda2ab355384d1dbf9b61435a934b5
752b856a6aaa14e1a217ce2b7555b9a5e41216578d68b1e28638323920fbc5fb
GET /s2/favicons?domain=https://niceporn.tv HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://niceporn.tv&size=16
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 00:23:57 GMT
expires: Fri, 03 Feb 2023 00:53:57 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1245014845&t=pageview&_s=1&dl=https%3A%2F%2Fbooru.eu%2F&ul=en-us&de=UTF-8&dt=Hentai%20Booru%20-%20Anime%20and%20Hentai%20pictures&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1226156294&gjid=270243037&cid=1106209489.1675383866&tid=UA-5368128-29&_gid=2003532555.1675383866&_r=1&_slc=1>m=2ou210&z=746268760
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1245014845&t=pageview&_s=1&dl=https%3A%2F%2Fbooru.eu%2F&ul=en-us&de=UTF-8&dt=Hentai%20Booru%20-%20Anime%20and%20Hentai%20pictures&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1226156294&gjid=270243037&cid=1106209489.1675383866&tid=UA-5368128-29&_gid=2003532555.1675383866&_r=1&_slc=1>m=2ou210&z=746268760
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j99&a=1245014845&t=pageview&_s=1&dl=https%3A%2F%2Fbooru.eu%2F&ul=en-us&de=UTF-8&dt=Hentai%20Booru%20-%20Anime%20and%20Hentai%20pictures&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1226156294&gjid=270243037&cid=1106209489.1675383866&tid=UA-5368128-29&_gid=2003532555.1675383866&_r=1&_slc=1>m=2ou210&z=746268760 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Content-Type: text/plain
Content-Length: 0
Origin: https://booru.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://booru.eu
date: Fri, 03 Feb 2023 00:23:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:14:20 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 1047495121
content-type: text/javascript
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.a-ads.com/a-ads-banners/426614/728x90?region=eu-central-1
200 OK 367 kB URL HTTP/2 static.a-ads.com/a-ads-banners/426614/728x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 728 x 90\012- data
Size 367 kB (367194 bytes)
Hash 94501fecb0e1ddeefd6b6acd9425ff4f
415ad3c87a12cfe4312072756938a3c631197f2c
c74f5e6d8b7fea6fb023f7d84ae88eb946ff4b2f0da00dd61b12c2c097401c7b
GET /a-ads-banners/426614/728x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 00:23:57 GMT
content-type: image/gif
content-length: 367194
x-amz-id-2: BiF77gYaRwPBNLrTJFGIaCiYfq+roFgPXhdJt5EiopnSQ/gjEylkdSZHJSfd21h30l9VFyEo8Xs=
x-amz-request-id: J0HNQ3994GY1CTKE
x-amz-replication-status: COMPLETED
last-modified: Sun, 20 Nov 2022 16:37:44 GMT
etag: "94501fecb0e1ddeefd6b6acd9425ff4f"
cache-control: max-age=315360000
x-amz-version-id: QQMdnn_ApkR6jiWCDa0h5EypcW7U5mVo
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://jennylist.xyz&size=16
200 OK 499 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://jennylist.xyz&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash acc83780c7ae97e1a9ef832dacf5ea40
08b988d9f4fb13822f71a41df80d75d3e9a60294
e23e92e4dabf3d873f4b0b4ae6973d1fea4c72d7ba9900bee6dc9ea6ef1c8086
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://jennylist.xyz&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://jennylist.xyz/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 10:14:23 GMT
expires: Fri, 03 Feb 2023 10:14:23 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2017 12:34:19 GMT
content-type: image/png
age: 569374
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.imperiodefamosas.com&size=16
200 OK 564 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.imperiodefamosas.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 1e8217c58c0d9975fbfc1e61e33a8b36
711de190de4dac7f82cbd4f41a0526f78422d60f
4dc2b4f0f5560a7cbfc105fab7189785555f11d7b4c47bb9b561277b03aaabdc
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.imperiodefamosas.com&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://www.imperiodefamosas.com/icon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 05:21:49 GMT
expires: Fri, 03 Feb 2023 05:21:49 GMT
cache-control: public, max-age=604800
last-modified: Tue, 18 Jun 2019 15:34:40 GMT
content-type: image/png
age: 586928
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://redporn.tv&size=16
200 OK 283 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://redporn.tv&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 572b540d3f5957f286dda63f04482fe8
84ca44273bfc7af52ba050f51d8699351c184532
38ea2d6e4d2304779e48356f49d8e6c7f137ee8415a7a926b167744b1329fa1e
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://redporn.tv&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://redporn.tv/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 283
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 22:21:17 GMT
expires: Fri, 03 Feb 2023 22:21:17 GMT
cache-control: public, max-age=604800
last-modified: Wed, 06 Nov 2019 10:05:49 GMT
content-type: image/png
age: 525760
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://beeg.porn&size=16
200 OK 212 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://beeg.porn&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 49028be9b7c3984685ed6fa1753e57f2
93727f259d3bf836d1a0ba208f4d3c162ff78804
897d330a089566224e60cc3a855eab21d2eac4096b34bdb1281cb3bf17027204
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://beeg.porn&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://beeg.porn/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 212
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 02:40:18 GMT
expires: Mon, 06 Feb 2023 02:40:18 GMT
cache-control: public, max-age=604800
last-modified: Fri, 15 Nov 2019 20:00:37 GMT
content-type: image/png
age: 337419
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://doseofporn.com&size=16
200 OK 491 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://doseofporn.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash cd808f3a4f59452a2a1fef221708ae98
d4db7708fd513fa9114fb3e778a01e9650578be3
57fd9cb57628850b56563dc1ab0949be33353cfa6c92e27ed86b1e1cf0d63c46
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://doseofporn.com&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://doseofporn.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 491
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 11:12:06 GMT
expires: Wed, 08 Feb 2023 11:12:06 GMT
cache-control: public, max-age=604800
age: 133911
last-modified: Thu, 29 Oct 2020 10:46:08 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://niceporn.tv&size=16
200 OK 205 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://niceporn.tv&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 1225e3807d6f671d1c728aa090b8afca
bc6b16cbdcc786788df549928c503e944737072b
48a22e814a57399c87d77d1f0b2de40e4426425a37ba63338ad610644d1364eb
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://niceporn.tv&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://niceporn.tv/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 04:41:01 GMT
expires: Thu, 09 Feb 2023 04:41:01 GMT
cache-control: public, max-age=604800
last-modified: Sat, 16 Nov 2019 04:54:39 GMT
content-type: image/png
age: 70976
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://foxporns.net&size=16
200 OK 207 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://foxporns.net&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 6731c23d1cfcd9d2ae3f0fd6954d7486
d08b9db9d552bd33bcdb86700f846b770fa0ccf8
baf65f13470240d49dcab6c974530a8880e8840910ec3b518175ce892083847d
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://foxporns.net&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://foxporns.net/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 207
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 12:54:23 GMT
expires: Wed, 08 Feb 2023 12:54:23 GMT
cache-control: public, max-age=604800
age: 127774
last-modified: Thu, 07 Nov 2019 09:50:56 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://bravotube.tv&size=16
200 OK 350 B URL HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://bravotube.tv&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash ac6597858db257b47d42066f43163835
c0a8077f5248ad9747d8eba56fbbe361d32c0a72
450945cf9b40a89dc2b0b2017ad3f53014707c1be19a865c58409e516d74498c
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://bravotube.tv&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://bravotube.tv/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 350
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 01:10:49 GMT
expires: Tue, 07 Feb 2023 01:10:49 GMT
cache-control: public, max-age=604800
age: 256388
last-modified: Wed, 30 Oct 2019 07:40:44 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://tophentaicomics.com&size=16
200 OK 430 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://tophentaicomics.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 8c8f8b3e0f672790019b1a157c8ab70f
009ba834746d8688e39ee421fffcbb2614cd6d40
d4dab306f590e651f9d2ac8f639902f7a87ce9d50bfe84ea7a14da48c7ba63c3
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://tophentaicomics.com&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://tophentaicomics.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 430
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 02:45:43 GMT
expires: Thu, 09 Feb 2023 02:45:43 GMT
cache-control: public, max-age=604800
last-modified: Mon, 24 Feb 2020 03:04:54 GMT
content-type: image/png
age: 77894
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.tophentaigallery.com&size=16
200 OK 729 B URL HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.tophentaigallery.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 55e6b6a8b4a2abfc70f704c6c20ba8f2
b7575016a369425ed575a39265dedc474e4a5cf3
8986622d0667b1e2c68df8afde59aa983f7b787f5b8ad63264c72abcea38c5af
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.tophentaigallery.com&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://www.tophentaigallery.com/wp-content/uploads/fbrfg/favicon-16x16.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 729
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 19:35:38 GMT
expires: Wed, 08 Feb 2023 19:35:38 GMT
cache-control: public, max-age=604800
age: 103699
last-modified: Tue, 02 Jun 2020 23:49:47 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://porndude.me&size=16
200 OK 599 B URL HTTP/2 t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://porndude.me&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash e27b0c124fc02fa6f157e5f2f5a7ba34
202fa6cafe7e8b8060481368d6e873ace71d010a
98cf1a464df37aa5cfa48f743a31b51133fa440f9bf3b1b2d688c08d8ba0c0cc
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://porndude.me&size=16 HTTP/1.1
Host: t2.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://porndude.me/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 599
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 05:14:30 GMT
expires: Fri, 03 Feb 2023 05:14:30 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Dec 2019 15:51:53 GMT
content-type: image/png
age: 587367
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://abellalist.com&size=16
200 OK 681 B URL HTTP/2 t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://abellalist.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash a957d58db0d5989f27f199161b3554d9
ec6949910bed3492359b9c599805699e65998d95
88d66123f7391035bcd13137ad2d1478e26ca75e6022e0368df03eb824ab3801
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://abellalist.com&size=16 HTTP/1.1
Host: t2.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: http://abellalist.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 681
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 04:13:30 GMT
expires: Sun, 05 Feb 2023 04:13:30 GMT
cache-control: public, max-age=604800
age: 418227
last-modified: Wed, 28 Oct 2020 10:57:20 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://amabitch.com&size=16
200 OK 117 B URL HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://amabitch.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash e1f61caaa134b59ee043be007d6b1ee8
7ff95451d68e50b634350130e75d22eccbf9bd71
0c19ec204dc214ce320df1fbb1f7ce08c809e582f82d297ed8171995f2e55e98
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://amabitch.com&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: http://amabitch.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 20:28:48 GMT
expires: Wed, 08 Feb 2023 20:28:48 GMT
cache-control: public, max-age=604800
age: 100509
last-modified: Wed, 29 Nov 2017 12:34:19 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://lizardporn.com&size=16
200 OK 346 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://lizardporn.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash f77d90e03ea42ae0aed3bb041b7bbae0
ca91522889cfa452a6461a2c18836bca622a3657
a3f10bd8e4dfd389a8063485a6d8d94ab4ded8698426c5ae225033451942d4c2
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://lizardporn.com&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://lizardporn.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 346
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 13:25:56 GMT
expires: Wed, 08 Feb 2023 13:25:56 GMT
cache-control: public, max-age=604800
age: 125881
last-modified: Tue, 18 Jun 2019 18:05:11 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.lindylist.org&size=16
200 OK 764 B URL HTTP/2 t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.lindylist.org&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash c37dd96a9b07341f29b53e53a550d663
502cb75f0cbfa12740fd4b207eda4946a16ced13
21d38514a383c080d2dae8692efcf6c865e14c93fb0a77cccee236a17f456519
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.lindylist.org&size=16 HTTP/1.1
Host: t2.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://www.lindylist.org/wp-content/uploads/2018/04/favicon.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 02:25:13 GMT
expires: Mon, 06 Feb 2023 02:25:13 GMT
cache-control: public, max-age=604800
age: 338324
last-modified: Wed, 25 Apr 2018 14:18:33 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fapvid.net&size=16
200 OK 247 B URL HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fapvid.net&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 5d915b2d91492953f5ad8daed65a54ae
aff50598e1fc0e370aaba497d561a6312593f3f1
aedd41a86a885effc5c7c39bb21429ee99e382fbc13d38e9f756d27c3a276a6b
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://fapvid.net&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://fapvid.net/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 247
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 18:55:12 GMT
expires: Wed, 08 Feb 2023 18:55:12 GMT
cache-control: public, max-age=604800
age: 106125
last-modified: Sun, 02 Dec 2018 20:40:46 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://zehnporn.com&size=16
200 OK 282 B URL HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://zehnporn.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash da7e0d6755818988be67f3db7744b531
9a07aeed91ba0207db3a3cb98056f59afd8220c7
9161ae9ad8f36dce65b04a021cf0ea86bdb8a84d4a7544b7f58fe179a3077a4e
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://zehnporn.com&size=16 HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://zehnporn.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 282
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 18:38:13 GMT
expires: Thu, 09 Feb 2023 18:38:13 GMT
cache-control: public, max-age=604800
last-modified: Thu, 20 Jun 2019 00:33:33 GMT
content-type: image/png
age: 20744
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://kendralist.com&size=16
200 OK 766 B URL HTTP/2 t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://kendralist.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 95b2781fc13ce79531edc508f02f1a9f
b8cee0b0562a625e4766a8faea6fda1a6d70a49a
fc4233e2d274f0cf8e66ed2befdeddbf0b043487b30f4b232a5a93c79b36c03b
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://kendralist.com&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://kendralist.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 766
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 19:19:10 GMT
expires: Tue, 07 Feb 2023 19:19:10 GMT
cache-control: public, max-age=604800
age: 191087
last-modified: Sat, 08 Jun 2019 20:58:06 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.a-shemaletube.com&size=16
200 OK 323 B URL HTTP/2 t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.a-shemaletube.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 8cf8c229a851ed8338f28181cc3853e9
f238e5bad888cdf4f54b3bbfeeec3f1f171aff2c
b6e0f6c5b2431d02e2209814c732d15bef03162b725f1e1eca6649c743056dc7
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://www.a-shemaletube.com&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: http://www.a-shemaletube.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 323
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 06:29:27 GMT
expires: Fri, 03 Feb 2023 06:29:27 GMT
cache-control: public, max-age=604800
last-modified: Wed, 11 Apr 2018 01:58:35 GMT
content-type: image/png
age: 582870
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://anyxxx.me&size=16
200 OK 279 B URL HTTP/2 t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://anyxxx.me&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 867b7763cb66e3b52e1cab9f44e457ed
1286d804ffe272238c8c7ed575c64e9c67f0814b
f973e57a107e1664720b3a88ce9a55afea5338e2caca4a1bd5c4e3edac091437
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://anyxxx.me&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://anyxxx.me/i/favicon/apple-icon-60x60.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 279
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 05:37:26 GMT
expires: Thu, 09 Feb 2023 05:37:26 GMT
cache-control: public, max-age=604800
age: 67591
last-modified: Sun, 26 Jul 2020 15:31:28 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-art.net&size=16
200 OK 469 B URL HTTP/2 t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-art.net&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 95c4cf5e8e9ee50007a9bd83c4fe22c0
56fcfc8414104e4ea3eae246cbc857a098f62887
20adb840a0c7fd8a4ba78a8010fb338476e419f0e6c55443422ebb29530d2cb2
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-art.net&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://erotic-art.net/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 469
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 10:10:08 GMT
expires: Sun, 05 Feb 2023 10:10:08 GMT
cache-control: public, max-age=604800
age: 396829
last-modified: Mon, 24 Aug 2020 14:52:53 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://4ksex.me&size=16
200 OK 251 B URL HTTP/2 t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://4ksex.me&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 6454f2ca99394771716926162f4417a1
416746b57c0c98010d2937a859e515b0d3646156
64aec517c700b9fd83e06246efc0a7506b39582be8c991cc5557f45a9195cf6d
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://4ksex.me&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://4ksex.me/i/favicon/apple-icon-57x57.png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 251
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 12:00:55 GMT
expires: Mon, 06 Feb 2023 12:00:55 GMT
cache-control: public, max-age=604800
age: 303782
last-modified: Sun, 20 Oct 2019 13:04:33 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.hentaipins.com&size=16
200 OK 280 B URL HTTP/2 t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.hentaipins.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 7ec234701b41d6a15298b72791bd5047
41f25462d5a67e37b192f8c300de1d097297f2a7
d2af905f719b9b8edb8dd477e3d3290964473f5e903e6f563edc59ee76adc820
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.hentaipins.com&size=16 HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://www.hentaipins.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 03:50:55 GMT
expires: Fri, 03 Feb 2023 03:50:55 GMT
cache-control: public, max-age=604800
last-modified: Wed, 11 Apr 2018 01:14:08 GMT
content-type: image/png
age: 592382
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-beauties.com&size=16
200 OK 743 B URL HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-beauties.com&size=16
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 68dbd37533c1ee0b9052ca95e0a9a1b5
df69d79ddd051a58765dd7f248a01fc3f796e95e
bf7ffbde63f0b3e112a51f16d272d051386bc00355356450d492c54e3afbaa15
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://erotic-beauties.com&size=16 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-location: https://erotic-beauties.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 743
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 02:45:43 GMT
expires: Thu, 09 Feb 2023 02:45:43 GMT
cache-control: public, max-age=604800
last-modified: Fri, 15 Jan 2021 10:01:22 GMT
content-type: image/png
age: 77894
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
poweredby.jads.co/adshow.php?adzone=985939
200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=985939
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (406), with CRLF, LF line terminators
Hash 1ed5eb5390cd51883f2e15f1f6d75390
6f921f2c95ffa6ffd316ddfc009c5c0ec1db8875
f7ebbc6646636976f21d06c9bd5e341657b7f454c56ef58ae9fa3353667bf118
GET /adshow.php?adzone=985939 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=fa08bff6663c6500e488a567b182f494; expires=Sat, 03-Feb-2024 00:23:56 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps8666=1; expires=Sat, 04-Feb-2023 00:23:56 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjEwMjE2ODk7aToxNjc1NjQzMDM2O30%3D; expires=Mon, 06-Feb-2023 00:23:56 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Mon, 06-Feb-2023 00:23:56 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 00:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.jads.co/network/user152224/37612-1592932943-0999209001592932943.gif
200 OK 213 kB URL HTTP/2 i.jads.co/network/user152224/37612-1592932943-0999209001592932943.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Size 213 kB (212632 bytes)
Hash 012decb71d8bad9f6061a61dee965520
dafe0e44c60dc1a25f14190418e2b61a4c5742db
558ec999be71ca03dc51567bbcfa575e23ca5732d558455f07d3ffd260fc39f1
GET /network/user152224/37612-1592932943-0999209001592932943.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=fa08bff6663c6500e488a567b182f494; imps8666=1; juicy_data_1=YToxOntpOjEwMjE2ODk7aToxNjc1NjQzMDM2O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:57 GMT
etag: "1592932944"
cache-control: max-age=17040684
content-length: 212632
content-type: image/gif
last-modified: Tue, 23 Jun 2020 17:22:24 GMT
accept-ranges: bytes
x-hw: 1675383837.dop065.sk1.t,1675383837.cds015.sk1.hn,1675383837.cds238.sk1.c
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=980177
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=980177
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1320), with CRLF, LF line terminators
Hash 9b14c10f182cf464904a1d6f20b2d652
dbff95d6870471f49f321b1c57d9d3b6533b86e3
e10673c4f548d7d17cfcadcb7cf085f9ae5396477cb41cd9671637f9c3e32231
GET /adshow.php?adzone=980177 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=fa08bff6663c6500e488a567b182f494; expires=Sat, 03-Feb-2024 00:23:56 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps26903=1; expires=Sat, 04-Feb-2023 00:23:57 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE1MTM1OTY7aToxNjc1NjQzMDM2O30%3D; expires=Mon, 06-Feb-2023 00:23:56 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Mon, 06-Feb-2023 00:23:56 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
s4.histats.com/stats/0.php?3924221&@f16&@g1&@h1&@i1&@j1675383865687&@k0&@l1&@mHentai%20Booru%20-%20Anime%20and%20Hentai%20pictures&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-85816634&@b3:1675383866&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fbooru.eu%2F&@w
200 OK 49 B URL HTTP/1.1 s4.histats.com/stats/0.php?3924221&@f16&@g1&@h1&@i1&@j1675383865687&@k0&@l1&@mHentai%20Booru%20-%20Anime%20and%20Hentai%20pictures&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-85816634&@b3:1675383866&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fbooru.eu%2F&@w
IP
File type ASCII text, with no line terminators
Hash 7a758864c751d807e95d348b09a214d6
406514555a85923fdb9e69295d814cd379594537
2b711e891bd9a3fad172666b6d95eed712cf76e34dd49da2a36b05ce01ef6cd4
GET /stats/0.php?3924221&@f16&@g1&@h1&@i1&@j1675383865687&@k0&@l1&@mHentai%20Booru%20-%20Anime%20and%20Hentai%20pictures&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-85816634&@b3:1675383866&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fbooru.eu%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 00:23:57 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 49
Connection: close
poweredby.jads.co/adshow.php?adzone=292997
200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=292997
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (392), with CRLF, LF line terminators
Hash d3bdd8c527bbca5a24a6c0ca68a2ffe9
e2ad4a0b79acfce91a17baff87595d0e7ee742b9
20769c55076a178c2231f8bc451903c7f6f5d6507c8e0d7e45c66bba538f39ac
GET /adshow.php?adzone=292997 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 00:23:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=fa08bff6663c6500e488a567b182f494; expires=Sat, 03-Feb-2024 00:23:56 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps32597=1; expires=Sat, 04-Feb-2023 00:23:57 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjEyMDkxOTk7aToxNjc1NjQzMDM2O30%3D; expires=Mon, 06-Feb-2023 00:23:56 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Mon, 06-Feb-2023 00:23:56 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/1x1.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=fa08bff6663c6500e488a567b182f494; imps8666=1; juicy_data_1=YToxOntpOjE1MTM1OTY7aToxNjc1NjQzMDM2O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps26903=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:57 GMT
etag: "1457030838"
cache-control: max-age=11841429
content-length: 43
content-type: image/gif
last-modified: Thu, 03 Mar 2016 18:47:18 GMT
accept-ranges: bytes
x-hw: 1675383837.dop065.sk1.t,1675383837.cds015.sk1.hn,1675383837.cds264.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user118116/26903-1670620903-0778592001670620903.gif
200 OK 3.5 MB URL HTTP/2 i.jads.co/network/user118116/26903-1670620903-0778592001670620903.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Size 3.5 MB (3515936 bytes)
Hash 8dcea27e02c4bb1a1fa8663c5dbae0f9
058fc0bcac17b66fb5693180b294860e0772a345
745e07244c36c3a7a484df41da6ff5c7544823b308f457f09d61bca7ea522ca2
GET /network/user118116/26903-1670620903-0778592001670620903.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=fa08bff6663c6500e488a567b182f494; imps8666=1; juicy_data_1=YToxOntpOjE1MTM1OTY7aToxNjc1NjQzMDM2O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps26903=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:57 GMT
etag: "1670620904"
cache-control: max-age=26822826
content-length: 3515936
content-type: image/gif
last-modified: Fri, 09 Dec 2022 21:21:44 GMT
accept-ranges: bytes
x-hw: 1675383837.dop065.sk1.t,1675383837.cds015.sk1.hn,1675383837.cds212.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user500/32597-1626983034-0081497001626983034.gif
200 OK 677 kB URL HTTP/2 i.jads.co/network/user500/32597-1626983034-0081497001626983034.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Size 677 kB (677419 bytes)
Hash ef656342ec474d1c7fc39b72509ed45f
b183b4d3d734aeda43a87459e6e3de8d4b432c4d
b7f341516ee3024aec964b04530ed1efe32f87b0a68589c2afa4a074d5cb1be0
GET /network/user500/32597-1626983034-0081497001626983034.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=fa08bff6663c6500e488a567b182f494; imps8666=1; juicy_data_1=YToxOntpOjEyMDkxOTk7aToxNjc1NjQzMDM2O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps26903=1; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:57 GMT
etag: "1626983034"
cache-control: max-age=13368147
content-length: 677419
content-type: image/gif
last-modified: Thu, 22 Jul 2021 19:43:54 GMT
accept-ranges: bytes
x-hw: 1675383837.dop065.sk1.t,1675383837.cds015.sk1.hn,1675383837.cds003.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2552
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Fri, 03 Feb 2023 00:23:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2552
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Fri, 03 Feb 2023 00:23:58 GMT
Connection: keep-alive
ad.a-ads.com/1573979?size=728x90
200 OK 5.2 kB URL HTTP/2 ad.a-ads.com/1573979?size=728x90
IP
ASN #24940 Hetzner Online GmbH
Hash e456c22260dc18e613a5558043b20661
2963344d3a0880391698f4e9f0ae1f779ad81aef
4ea9ac17ce1404bc18037bbc8b051e7f6e4bba1666b540ea928bd74fd12e83e6
GET /1573979?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 00:23:57 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://booru.eu/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2552
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Fri, 03 Feb 2023 00:23:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2552
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Fri, 03 Feb 2023 00:23:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 6a1fd567-b34d-4787-aa05-5b7db3fc51c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflRBHU4IAMFnsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c06-2d1ec3206d2ebeb4780a84b4;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:11:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUloQ6xaRWpnvMRh7kFvFIWhFotmILLZHfD_YK01RmrQ2vmYKVh46w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 08:18:46 GMT
age: 57912
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 352e4166a431e781e56cc7f169c7f8ca
866b76c34076cf2e18c6a071336fcf4f581f3c4d
75ba13b601f4b00c5b091eb29e7f6739ffee3e127bd6d3c4b35cc967bb6d354a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9779
x-amzn-requestid: 101b984b-9c04-4d07-b1fe-3d888f4bcd49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftcNRFV_oAMF2_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba721-72679ba0378015034e17b8ca;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 12:05:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p74tt3doRE9DKoD5cpPKriYPFEQhq7f3Xf8vhgNNz7QhZNIvdc6NQQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:05:18 GMT
age: 18896
etag: "866b76c34076cf2e18c6a071336fcf4f581f3c4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9647681-964b-428d-89fe-5c4bc8cadebe.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9647681-964b-428d-89fe-5c4bc8cadebe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae0083daa88e6b26c6525c51348d266c
676f55b22fdeee4f7737a48cb2b89d86aa371aae
89f6903260704061faf849549fd95e6f9cbbfcbbf93eaa17d32b96c5e4244d53
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9647681-964b-428d-89fe-5c4bc8cadebe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7159
x-amzn-requestid: 1d159649-0d8c-4806-8f42-585b985972ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuwSKF61IAMF5qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2da7-18fc268c5a719c1d19079001;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:39:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VyQrwAb5tjqPPPQbxf9Ee_zB1UvrnMPGjOHeRKEzyH6BBDazPUkXSA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:47:02 GMT
age: 9416
etag: "676f55b22fdeee4f7737a48cb2b89d86aa371aae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a53e95-81db-4f71-84bc-169a72e11b24.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a53e95-81db-4f71-84bc-169a72e11b24.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4242d4999b7b033873b81a482c319c2
bc4c004065ce9f558f210d508844c123a85737a1
ab35a5c1a7c1a0a548aee3b9c301893799680ec1922c13e7a16d44ca457cd91d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a53e95-81db-4f71-84bc-169a72e11b24.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7237
x-amzn-requestid: f6aa0d26-8df4-40fe-8984-1aac7c76097e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVr4jEdeIAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2269c-58a038d6491d8f461e9168d4;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:07:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v2-PiZSoEbRhvxbdT2TUmJk9hDT08qpRhT6DhdEIU6nd3s2qL969Xg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:59:04 GMT
age: 8694
etag: "bc4c004065ce9f558f210d508844c123a85737a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:28:50 GMT
age: 6908
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kathesygri.com/c.DS9p6gbR2A5xlASoWpQP9INUDLUxzYNrTzkewpM-Cw0_0/NHTDMy1XO/TXAYxW
200 OK 28 kB URL HTTP/2 kathesygri.com/c.DS9p6gbR2A5xlASoWpQP9INUDLUxzYNrTzkewpM-Cw0_0/NHTDMy1XO/TXAYxW
IP
File type Unicode text, UTF-8 text, with very long lines (5600)
Hash 2fd3feda074f86f02a42d901cb9ac916
2a9df53ab4e8e383b56b0d9ebe702305af18a513
cf216161c22ba849b6531f0aa3bfd8c44a6b7b56faa89766852c298f2e20fa43
GET /c.DS9p6gbR2A5xlASoWpQP9INUDLUxzYNrTzkewpM-Cw0_0/NHTDMy1XO/TXAYxW HTTP/1.1
Host: kathesygri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
last-modified: Fri, 03 Feb 2023 00:23:56 GMT
access-control-allow-credentials: true
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE2NzUzODM4MzYsInpvbmVzIjp7IjQ0Mzk5MTciOls0NDM5OTE3LDEsMTY3NTMwNzkyNl0sIjQ1MzU5MDAiOls0NTM1OTAwLDEsMTY3NTM4MzgzNl19fQ==; max-age=1706919836; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
ads.exosrv.com/ads.js
200 OK 0 B IP
ASN #60068 Datacamp Limited
GET /ads.js HTTP/1.1
Host: ads.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:56 GMT
content-type: application/javascript
etag: W/"b60fdcc211f42a1f246a8c80b56"
expires: Thu, 02 Feb 2023 18:45:33 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675385203
server: CDN77-Turbo
x-77-nzt: AblMCRQydvH/2SQAAA
x-77-nzt-ray: af585630e5a8e3761c54dc639a92720a
x-cache: HIT
x-age: 9433
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
toplist.cz/dot.asp?id=1153685
200 OK 0 B URL HTTP/2 toplist.cz/dot.asp?id=1153685
IP
GET /dot.asp?id=1153685 HTTP/1.1
Host: toplist.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booru.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 00:23:56 GMT
server: Apache/2.4.29 (Ubuntu) mod_fcgid/2.3.9
pragma: no-cache
cache-control: private,no-cache,no-store,must-revalidate,max-age=0
expires: Thu, 02 Dec 2004 16:00:00 GMT
p3p: CP="NON DSP ADM DEV PSD CUSo OUR IND STP PRE NAV UNI"
x-w: 4
content-type: image/gif; charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
193.35.224.251
116.202.214.170
95.211.229.245
88.86.101.2
46.105.201.240
23.36.77.32
185.76.9.24
104.18.32.68
149.56.240.129