xanimu.com/es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%C3%B3n-no-va/
301 Moved Permanently 384 B URL HTTP/1.1 xanimu.com/es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%C3%B3n-no-va/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b821605597ddd388d0ce3f9fca7202d
dc1a9b55994fefb33b9240f3afa33dbfa302dee6
3814db530bf9f11eed6756fcf79286447b8698c6a5e3e74bf8f438b4aa502997
GET /es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%C3%B3n-no-va/ HTTP/1.1
Host: xanimu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 16 Oct 2022 19:21:48 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://xanimu.com/es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisión-no-va/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQxLYQBJfoe2lVo9jp5lbJ7F77Yz6EU0WtTQlAZwZ04gGQntgidzAKCmonthE05EyOwRl9bAt2rRP2SkjmOfPLb0B1P9Mo%2BJj7G0Hm4KMIU3fFUwxMQNiJaxFpk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75b328deb9390b06-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 16 Oct 2022 18:50:36 GMT
Expires: Sun, 16 Oct 2022 19:24:12 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YIFXJ0BOjssXXhL9UxQkbeQca4BwfGd1bEr5w6x4yIxnWoFXTe23fw==
Age: 1872
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10ab470535c002d333b4f27d38b51091
ed3b0850c5d75881de410f7e8ca35e012e38bd38
31d6655d048ec8a62e00125766fea65cde04beae0b11f12ce7f722c9a5f7e232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31D6655D048EC8A62E00125766FEA65CDE04BEAE0B11F12CE7F722C9A5F7E232"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4308
Expires: Sun, 16 Oct 2022 20:33:36 GMT
Date: Sun, 16 Oct 2022 19:21:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57d0f62d9bd29668b94a513fa45d18e
d7cb263502e21f9235b4523a596e2138d22042ec
df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10864
Expires: Sun, 16 Oct 2022 22:22:52 GMT
Date: Sun, 16 Oct 2022 19:21:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jZHn7GgHU092AK1h7B5kodnJH3r/juzJTe0AwYaczxKsuRGu9mAC2Q5/g8slFesVkrJpvXhMEqU=
x-amz-request-id: 13JS630HPCNWM1XJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 16 Oct 2022 19:03:07 GMT
age: 1121
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 19:21:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash fcd861880e0e69f145c0a5bd4a7e2c9f
20440c2e42d55ac2a79fd75b4738610c0dd17cd2
b2a35357ad9d0b484b09aa289bb3efa72bd78ab2f91d36d3b66c730a92b67c56
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=153171
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:48 GMT
Etag: "634c0d1f-118"
Expires: Tue, 18 Oct 2022 13:54:39 GMT
Last-Modified: Sun, 16 Oct 2022 13:54:39 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash fcd861880e0e69f145c0a5bd4a7e2c9f
20440c2e42d55ac2a79fd75b4738610c0dd17cd2
b2a35357ad9d0b484b09aa289bb3efa72bd78ab2f91d36d3b66c730a92b67c56
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=153171
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:49 GMT
Etag: "634c0d1f-118"
Expires: Tue, 18 Oct 2022 13:54:40 GMT
Last-Modified: Sun, 16 Oct 2022 13:54:39 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 16 Oct 2022 19:07:43 GMT
Cache-Control: max-age=3600
Expires: Sun, 16 Oct 2022 19:15:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Cpl6PCM2cSEAxe1QTERPtsRrzD17W6AuRMeL37N1SAbtrHs_8_jEXQ==
Age: 846
ocsp.digicert.com/
200 OK 77 kB IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash 4113531247eda9680f30fede9acfa41c
9e48092c04dc0f054bd463e9b224618fe406f60c
c9b23a1fe7a842f3e3c70648bb96f696d5b632ad99aa03a4fbfac3743fc56bdf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1927
Cache-Control: max-age=159808
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:49 GMT
Etag: "634c1f86-117"
Expires: Tue, 18 Oct 2022 15:45:17 GMT
Last-Modified: Sun, 16 Oct 2022 15:13:10 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
a.realsrv.com/nativeads-v2.js
200 OK 16 kB URL HTTP/1.1 a.realsrv.com/nativeads-v2.js
IP
File type C source, ASCII text, with very long lines (58899), with no line terminators
Hash 5b86684f9134faf92b79b62658dbac0f
7e202065a4186ca1383f644a2032263f7e0bb75d
63e678de1e957dd29c9ddd9abe85553b6c63d3640914e34e2aff780b580caaa3
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 19:21:49 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 16524
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"5573ab9c54ae8fcb8c5f0205e02"
X-HW: 1665948109.dop229.sk1.t,1665948109.cds210.sk1.shn,1665948109.dop229.sk1.t,1665948109.cds219.sk1.c
Access-Control-Allow-Origin: *, *
ocsp.digicert.com/
200 OK 279 B IP
Hash 9bc6f2c0fa8667a82088461237a85b97
418344714a34bcf1773e5cf3a059d16a7dcb89a2
936a8e114549e0d1948e5498e735184de6eb74c2aaf340e1255934b05247df09
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1927
Cache-Control: max-age=159808
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:49 GMT
Etag: "634c1f86-117"
Expires: Tue, 18 Oct 2022 15:45:17 GMT
Last-Modified: Sun, 16 Oct 2022 15:13:10 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash cfc92c8f6ee7599505d969732542ac42
7f4804d49c8ccd76ccffa6b72d41b1df611eb090
406c057a8392b9fa0ab09efa8b3222a58ec5fc17fa73f55a1f093e3d1092b0e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2551
Cache-Control: max-age=134849
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:49 GMT
Etag: "634bbb97-1d7"
Expires: Tue, 18 Oct 2022 08:49:18 GMT
Last-Modified: Sun, 16 Oct 2022 08:06:47 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tdns6.gtranslate.net/tdn-bin/queue.js
403 Forbidden 51 kB URL HTTP/2 tdns6.gtranslate.net/tdn-bin/queue.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Hash 2a37eb43978e8262b53030b74406c27a
73bffa549ce8c5643aaf5b05721f0d07cae71fb6
731e77e04621d511ae2d54fe9da5506cb3e7ef5b59c1234967cfd44e72f432c4
GET /tdn-bin/queue.js HTTP/1.1
Host: tdns6.gtranslate.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sun, 16 Oct 2022 19:21:49 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1n6mbeG%2BLdjR%2B4J%2FKJwYu1z4crQEnWYpDFPVbtftITkGOGP983gFIrggLZ0NlTEeQ9l3hhuX3vyAunF%2BN6Q2sF4aR9uOSXHoGC7SjKC6DLKDmwsSfblIZu4QKrTat4%2Fu4cvnXDIcGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75b328e47a380af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.realsrv.com/splash.php?native-settings=1&idzone=4046528&cookieconsent=true&p=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F
200 OK 3.9 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4046528&cookieconsent=true&p=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (7373), with no line terminators
Hash 7b4694196fd11d1526119f1d51b9b401
8da006be17ec475986b6b74a09f1980b3d6a789e
dbd323f4863b5a154b61ff0db90a53c6a9c9b1219ec438d71d06d8dd9b93783f
GET /splash.php?native-settings=1&idzone=4046528&cookieconsent=true&p=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; expires=Tue, 15 Oct 2024 19:21:49 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=oslmroemnxgxaarbaamoxgeicxbmsbocnxgxaarlomabageioslmrxbrnxgxaarbcremcgeicxbmsbxcnxgxaarmbmaomgeicxbmsbcenxgxaarbaamoxgeislsaroornxgxaarlcbxelgeicxbmsboenxgxaarlcbxelgeimreaomxcnxgxaasaoabsrgeimreaobsonxgxaasaoabsrgeioslmrxbmnxgxaarooxcesgeimcclsoeenxgxaasamsoccgeimcclosconxgxaarelarcogeimrblelmonxgxaasamsoccgeimrblxembnxgxaasamsoccgeimrblxeecnxgxaasamsoccgeimrblxemcnxgxaasamsoccgeialbserecnxgxaareealbcgeioslmrxlsnxgxaaclllercgeicaormbbonxgxaareeamrcgeioslmrxlrnxgxaarbbocsogeimcclsxscnxgxaarexcoelgeimrerbmbbnxgxaasmeceesgeialbsereanxgxaacsxbrblgeialbserebnxgxaasborcsogeiccmblmmcnxgxaarlomabageimrblelxcnxgxaasblsoxxgeimcclsxoanxgxaarxcosomgeimrblelmbnxgxaasblsoxxgeimcclossanxgxaacmobexrgeimcclselenxgxaasblsoxxgeimcclsoeonxgxaacllaxbogeimccloscenxgxaaslcsrobgeimcclsxacnxgxaaslcsrobgeicaormlebnxgxaacxeermsgeimcersxranxgxaacxeermsgeisaeeasslnxgxaacxeermsgeimcersxacnxgxaacxeermsgeimcersxrenxgxaacxeermsgeiccmblmmbnxgxaarbbocsogeiccmblmmanxgxaarbaamoxgeislsarosxnxgxaacsremoegeiabeocmsbnxgxaacmobeeageimcclsxcanxgxaacmobexrgeimaecobxanxgxaacmobexrgeimcclsxsbnxgxaacmcrlolgeiccmblmmonxgxaarlcbxelgeialbserxonxgxaacmremaxgeimcclossbnxgxaacbmrobbgeicaormlxbnxgxaareeamrcgeimcclsxobnxgxaarooxcesgeimcclsxbcnxgxaacllaxbogeimrblelxanxgxaacllaxbogeimaecsxccnxgxaacllaxbogeimaecsxcanxgxaacllaxbogeimrblxeeanxgxaacllaxbogeicaormbbcnxgxaareeaabrgeicaormlxenxgxaareeaabrgeimcclsxsenxgxaarecxcergeimcclsxlcnxgxaarexcoelgeirbabxabbnxgxaarxbccllgeicaxsscmbnxgxaarxoxbxmgeimcclsxlanxgxaarooxcesgeialbserxenxgxaarxcelaxgeimccloscanxgxaarbcremcgeimcclsxaonxgxaarooxcesgeimrblxeeonxgxaarooxcesgeimcclsxlbnxgxaarsbmoxogeimcclsxlonxgxaarbcremcgeimocbmmacnxgxaarbaoceagxcceimxcbrxabnxgxaarbassrmgxcceimrracoranxgxaarbassrmgxcceimrceboxenxgxaarbassmsgxcceicloaxxoenxgxaarbassmsgxcceimrmbbrbenxgxaarbaroaagxcceimaoolcoonxgxaarbaralegxcceimrsreamcnxgxaarbaaoccgxcceimxxerrecnxgxaarbaamoxgxcceimxxerrebnxgxaarbaamoxgxcceimeembesonogxaarbaamoxgxcceimcssmlroncgxaarbamosrgxcceiallxlmscnxgxaarbamrcbgxcceimrbleaxonxgxaarbablcagxcceimrracorbnxgxaarbablcagxcceimrmbbrcenxgxaarbalsxcgxcceimrmbbraonxgxaarbalsxrgxcceimcssmlrcnsgxaarbalsrogxcceimxlbmxlcnogxaarbalsrogxcceimocbmmmbnogxaarbalbbegxcceimocbmmmenxgxaarbalbbegxcceimxlbmxloncgxaarbalbbxgxcceimxlbalsbnogxaarbmexrxgxcceimxeoxsbenagxaarbmexrogxcceimcssmlrenrgxaarbmexrogxcceimxeoxsacnrgxaarbmexrogxcceimxlbmoscnogxaarbmerlxgxcceimxlbmoobnogxaarbmerlxgxcceimxlbmosonsgxaarbmerlxgxcceimxlbmoconsgxaarbmerlxgxcceimxlbmosanogxaarbmerlxgxcceimsacexoonxgxaarbmxxsxgxcceimxlbmosenogxaarbmocsegxcceialxosmbanxgxaarbmocsegxcceialbbebsbnxgxaarbmocsegxcceimcoaxmxoncgxaarbmsmemgxcceimemlxmcbnxgxaarbmsmebgxcceimemlxbocnxgxaarbmsbaogxcceialbbebsanxgxaarbmcsxbgxcceimcoaxmxcnrgxaarbmcsxbgxcceimclsaoxbncgxaarbmcsxbgxcceixaoosscrnxgxaarbmcmlrgxcceixaoossalnxgxaarbmcmlagxcceicmarxbbonsgxaarbmrsscgxcceimxlbalcenogxaarbmrblegxcceimrbleaxenogxaarbmrlabgxcceimaoxcsmonsgxaarbmrlabgxcceialrexexbnxgxaarbmaommgxcceialrexeoonxgxaarbmaommgxcceialaroxrcnxgxaarbmaommgxcceimrrasxlenxgxaarbmmraagxcceialbbebrenrgxaarbmmalmgxcceiceecmorsnxgxaarbmmalmgxcceicloaxxaanxgxaarbmmlbcgxcceircleeobonxgxaarbmbxergxcceimrxccosencgxaarbmbxeagxcceicxmecmcanxgxaarbmbxeagxcceimrxccosonsgxaarbmbxeagxcceimxxrecsansgxaarbmbsaxgxcceimeembecenxgxaarbmbsaxgxcceimeembescnxgxaarbmbsaxgxcceimrracorcnxgxaarbmbsaxgxcceimrracoaenxgxaarbbesesgxcceicloaecocnxgxaarbbxbragxcceimxreaomcnxgxaarbbxbmegxcceimrxccosancgxaarbboseagxcceimrracoaonxgxaarbboseagxcceicloaxxxanxgxaarbbocsxgxcceimxxerrxenxgxaarbbocsogxcceimxeemlxcnsgxaarbborebgxcceimrsreamensgxaarbbslrmgxcceimaelrlabnxgxaarbbcmoagxcceimrsreabensgxaarbbarmrgxcceimrsreabonsgxaarbbbelbgxcceimrsreamonsgxaarbbbxsegxcceimcrxeoconxgxaarbbloxxgxcceimcrxeooanxgxaarbbloxxgxcceimrmaobxbnagxaarblxsxegxcceimrmbbrmonxgxaarblxloxgxcceimrmbbrsbnxgxaarblxloxgxcceimclxlloanxgxaarblrbmogxcceimaoxcsmcnsgxaarblrbmogxcceimcrxeoobnxgxaarbllcmbgxcceimrmbbrmcnxgxaarbllborgxcceimrmaobxanogxaarbllborgxcceicloaxxabnxgxaarleoxolgxcceiclxexroenxgxaarlesesegxcceimxcbrxmanxgxaarleccacgxcceiccblrxrbnxgxaarleroxxgxcceiccblrxaanxgxaarleroxxgxcceiclmcrxobnxgxaarlerbccgxcceiclsmrrmanxgxaarlemcoegeiclsmrbxonxgxaarlemcoegeiclsmarocnxgxaarlemcoegeiclsmarcanxgxaarlemcoegeiclxexroonxgxaarlelbsmgxcceimxlbalscnogxaarlxexcrgxcceimraeelabnxgxaarlxsbmcgxcceimraeelaanxgxaarlxsbmcgxcceimrmaoboenogxaarlxamxsgxcceimxlbmxbbnogxaarlocelmgxcceimxcbrxsenxgxaarlomabagxcceimxxerreanxgxaarlomabagxcceiclmcrxsanxgxaarlsecmegxcceimcrxeoscnxgxaarlsxalegxcceimcrxeoaonxgxaarlsxalegxcceimcrxeorcnxgxaarlsxalegxcceimcrxeocenxgxaarlsxalegxcceiclxexrxbnxgxaarlsosscgxcceiaaabacbonxgxaarlssxsegxcceimcrxeomcnxgxaarlssxsegxcceiallxlmccnxgxaarlssxsegxcceimcrxeoocnxgxaarlssxsegxcceimcrxeocbnxgxaarlssxsegxcceimcrxeosbnxgxaarlssxsegxcceiallxlmconxgxaarlssxsegxcceimcrxeoronxgxaarlssaelgxcceimcrxeomanxgxaarlssaelgxcceimcrxeoaenxgxaarlssaelgxcceirrmlllronxgxaarlsbblbgxcceimxcbrxscnxgxaarlsbblbgxcceirreacmsbnxgxaarlsbblbgxcceimrmbbrmanxgxaarlcxmmegxcceimeelaclanogxaarlccabagaeimrcesxaonxgxaarlccabmgxcceimeelaclonsgxaarlccabmgaeimeelaclcnxgxaarlccabmgaeicloaecoanxgxaarlcrsrxgxcceiclxexrocnxgxaarlcmelsgxcce; expires=Mon, 17 Oct 2022 19:21:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C39365225%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 17 Oct 2022 19:21:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C41873820%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 17 Oct 2022 19:21:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C71986934%7C100644%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 17 Oct 2022 19:21:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 17 Oct 2022 19:21:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fepi5YQu0oC6l86m2aezPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qnMmGNGJ70u/RrggupzQJPvXg6U=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7966182ef0cfea459b00cbadace7168b
01ca93e5c9fe675e1ad5dcc8a6363658aaa3b0d5
b77c9516e688f46f8feb6a122255111e18ba6d8ed0d37d510b45135e8bc76ca8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B77C9516E688F46F8FEB6A122255111E18BA6D8ED0D37D510B45135E8BC76CA8"
Last-Modified: Sat, 15 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11850
Expires: Sun, 16 Oct 2022 22:39:20 GMT
Date: Sun, 16 Oct 2022 19:21:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7966182ef0cfea459b00cbadace7168b
01ca93e5c9fe675e1ad5dcc8a6363658aaa3b0d5
b77c9516e688f46f8feb6a122255111e18ba6d8ed0d37d510b45135e8bc76ca8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B77C9516E688F46F8FEB6A122255111E18BA6D8ED0D37D510B45135E8BC76CA8"
Last-Modified: Sat, 15 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11850
Expires: Sun, 16 Oct 2022 22:39:20 GMT
Date: Sun, 16 Oct 2022 19:21:50 GMT
Connection: keep-alive
conventforgotten.com/b4/3f/a5/b43fa56c405a635bc400a6f829f35b4f.js
200 OK 29 kB URL HTTP/1.1 conventforgotten.com/b4/3f/a5/b43fa56c405a635bc400a6f829f35b4f.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 8310c3e73d8b38fdc1365fa19f82d16c
4103ff8870d36cfefe6f07926edae4ecb969bcf1
548d86265b270a0cabaac02277005c2155613b55e6f199926154fb7de8e25173
Analyzer Verdict Alert quad9 Sinkholed
GET /b4/3f/a5/b43fa56c405a635bc400a6f829f35b4f.js HTTP/1.1
Host: conventforgotten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 673374dd526bc2a9a4f8db57fbd29353
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
conventforgotten.com/28/83/46/2883462d75650babb3e80c1a875e5b66.js
200 OK 13 kB URL HTTP/1.1 conventforgotten.com/28/83/46/2883462d75650babb3e80c1a875e5b66.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37140), with no line terminators
Hash 532df893af28ebf01bafb0222f00e684
afb8ab3012ba7a6602662dda5bcd500c5cb1bd1e
16e46d20b00f1b4432dc1032accde88e4bd28cd43c5f013f7f71b839feeb5aa9
Analyzer Verdict Alert quad9 Sinkholed
GET /28/83/46/2883462d75650babb3e80c1a875e5b66.js HTTP/1.1
Host: conventforgotten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 242dd82c0a4121303cc63b67c0f5be90
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash a5b04d6d3c126a01d5aa922574230332
fd3383c24dac377a75ca3160503bb31b8019df4a
621df3b5055828325b8cc517cf359ea5ca002fd5fad771cca767e15bde7fa330
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "621DF3B5055828325B8CC517CF359EA5CA002FD5FAD771CCA767E15BDE7FA330"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4092
Expires: Sun, 16 Oct 2022 20:30:02 GMT
Date: Sun, 16 Oct 2022 19:21:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 17cb64f6dc22ca42c36153502b52ef32
b5f15abe06564980326d39741174deca96801d83
ba41176c879263336a826471440bf497bb9625285d51fdac05714b85342fea7b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4242
Cache-Control: max-age=89372
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:50 GMT
Etag: "634b0358-118"
Expires: Mon, 17 Oct 2022 20:11:22 GMT
Last-Modified: Sat, 15 Oct 2022 19:00:40 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
conventforgotten.com/pixel/purst?dl=0&th=0&sc=0&rs=1857&rd=1857&fd=971&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 conventforgotten.com/pixel/purst?dl=0&th=0&sc=0&rs=1857&rd=1857&fd=971&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1857&rd=1857&fd=971&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: conventforgotten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f0413efff3fc4435819eea0892565002
68f2cbf9d99cbc2f3500c911fe2906ea03a6d72f
f5ebdb13ab4ad27844b4ad00d4bb79c9238bd02937bdab5dc83d0802d956895f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151666
Date: Sun, 16 Oct 2022 19:21:50 GMT
Etag: "634bf982-1d7"
Expires: Tue, 18 Oct 2022 13:29:36 GMT
Last-Modified: Sun, 16 Oct 2022 12:30:58 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3yruO0JIjjMY-aXi5rcaOf62Rsr3PoyDFihZnKOqyjTn1hg49VvxLA==
Age: 3518
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f0413efff3fc4435819eea0892565002
68f2cbf9d99cbc2f3500c911fe2906ea03a6d72f
f5ebdb13ab4ad27844b4ad00d4bb79c9238bd02937bdab5dc83d0802d956895f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=153114
Date: Sun, 16 Oct 2022 19:21:50 GMT
Etag: "634bf982-1d7"
Expires: Tue, 18 Oct 2022 13:53:44 GMT
Last-Modified: Sun, 16 Oct 2022 12:30:58 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A9SRODvNW-MBBUV-SZ1inBLGQWXmO9uxGyc5CtoXUkn2tUy0z66y4w==
Age: 4966
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 785dcece3c7190f4a692fdc3b19a05c8
db8f07b6afe276a7ba3b2151a8ef251caa7a7db5
bbb6420618c2a4e65ee577d07a71e0bb8bbf47d638eb6491141fb678ba74e985
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xanimu.com
access-control-allow-credentials: true
set-cookie: uid_id2=83f2f5c1-64b6-441f-aff8-b7b05f1eb7c5:2:1; expires=Wed, 13 Oct 2032 19:21:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 08a9f7ce80e9b535bf82029ab4770e45
a06aea0d056e73051a6144041f4befbd911d817e
a531e395c1d950338333ce48176a395ef8b9dea5a1468dce39323123abee9084
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xanimu.com
access-control-allow-credentials: true
set-cookie: uid_id2=b52886c6-9cba-4962-9f6d-ed8f7f6ac165:1:1; expires=Wed, 13 Oct 2032 19:21:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
a.realsrv.com/ad-provider.js
200 OK 24 kB URL HTTP/1.1 a.realsrv.com/ad-provider.js
IP
Hash e4ff5ec1ba691522f28a5d6976c28a06
6814536ab07ae6bc77bc0f0844cf18cfdf9f3629
6db82238878ff1f7693dc53c2b6b21c7e01422dd07bd4f3c7d878a5e5a5c9b3c
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 19:21:50 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 23795
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"7a6fef28e10ffbf7c5d56577798"
X-HW: 1665948109.dop229.sk1.t,1665948109.cds210.sk1.shn,1665948109.dop229.sk1.t,1665948110.cds219.sk1.c
Access-Control-Allow-Origin: *, *
region1.analytics.google.com/g/collect?v=2&tid=G-Q5Y5X5J5LT>m=2oeaa0&_p=1328335936&_gaz=1&cid=1238147360.1665948114&ul=en-us&sr=1280x1024&_s=1&sid=1665948113&sct=1&seg=0&dl=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F&dt=Minecraft%20Belleza%20es%20follada%20por%20Mega%20Beauty%20Futa%20(comisi%C3%B3n)%20(no%20Va)%20-%20XAnimu.com&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-Q5Y5X5J5LT>m=2oeaa0&_p=1328335936&_gaz=1&cid=1238147360.1665948114&ul=en-us&sr=1280x1024&_s=1&sid=1665948113&sct=1&seg=0&dl=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F&dt=Minecraft%20Belleza%20es%20follada%20por%20Mega%20Beauty%20Futa%20(comisi%C3%B3n)%20(no%20Va)%20-%20XAnimu.com&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q5Y5X5J5LT>m=2oeaa0&_p=1328335936&_gaz=1&cid=1238147360.1665948114&ul=en-us&sr=1280x1024&_s=1&sid=1665948113&sct=1&seg=0&dl=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F&dt=Minecraft%20Belleza%20es%20follada%20por%20Mega%20Beauty%20Futa%20(comisi%C3%B3n)%20(no%20Va)%20-%20XAnimu.com&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://xanimu.com
date: Sun, 16 Oct 2022 19:21:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-KW71G5FMEX>m=2oeaa0&_p=1328335936&_gaz=1&cid=1238147360.1665948114&ul=en-us&sr=1280x1024&ir=1&_eu=Q&_s=1&sid=1665948113&sct=1&seg=0&dl=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F&dt=Minecraft%20Belleza%20es%20follada%20por%20Mega%20Beauty%20Futa%20(comisi%C3%B3n)%20(no%20Va)%20-%20XAnimu.com&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-KW71G5FMEX>m=2oeaa0&_p=1328335936&_gaz=1&cid=1238147360.1665948114&ul=en-us&sr=1280x1024&ir=1&_eu=Q&_s=1&sid=1665948113&sct=1&seg=0&dl=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F&dt=Minecraft%20Belleza%20es%20follada%20por%20Mega%20Beauty%20Futa%20(comisi%C3%B3n)%20(no%20Va)%20-%20XAnimu.com&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-KW71G5FMEX>m=2oeaa0&_p=1328335936&_gaz=1&cid=1238147360.1665948114&ul=en-us&sr=1280x1024&ir=1&_eu=Q&_s=1&sid=1665948113&sct=1&seg=0&dl=https%3A%2F%2Fxanimu.com%2Fes%2F27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%25C3%25B3n-no-va%2F&dt=Minecraft%20Belleza%20es%20follada%20por%20Mega%20Beauty%20Futa%20(comisi%C3%B3n)%20(no%20Va)%20-%20XAnimu.com&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://xanimu.com
date: Sun, 16 Oct 2022 19:21:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f05f7d85c5d7c2aa09651804f80a019
cd118fbc41657bfdf0fcfb9e3a4a2813f3b08e5b
76a6c1ae0a435403ac10b6478f029bb8b871dbdcc2a2c7e3e97b56982a9767e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-Q5Y5X5J5LT&cid=1238147360.1665948114>m=2oeaa0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-Q5Y5X5J5LT&cid=1238147360.1665948114>m=2oeaa0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Q5Y5X5J5LT&cid=1238147360.1665948114>m=2oeaa0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://xanimu.com
date: Sun, 16 Oct 2022 19:21:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 17cb64f6dc22ca42c36153502b52ef32
b5f15abe06564980326d39741174deca96801d83
ba41176c879263336a826471440bf497bb9625285d51fdac05714b85342fea7b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4242
Cache-Control: max-age=89372
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:50 GMT
Etag: "634b0358-118"
Expires: Mon, 17 Oct 2022 20:11:22 GMT
Last-Modified: Sat, 15 Oct 2022 19:00:40 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash c39b56b419f8042acf72492ba4e1f74e
6cb79ff18960dad3af30f2d670fc5cd1105773ef
718add868b7ea4ed11eca90148f2a1280aa7003d4425a072c1005ec756d62973
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Fri, 14 Oct 2022 05:10:11 GMT
Expires: Fri, 21 Oct 2022 05:10:10 GMT
Etag: "6cb79ff18960dad3af30f2d670fc5cd1105773ef"
Cache-Control: max-age=380299,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75b328ebdea80b45-OSL
stats.g.doubleclick.net/g/collect?v=2&tid=G-KW71G5FMEX&cid=1238147360.1665948114>m=2oeaa0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-KW71G5FMEX&cid=1238147360.1665948114>m=2oeaa0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-KW71G5FMEX&cid=1238147360.1665948114>m=2oeaa0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://xanimu.com
date: Sun, 16 Oct 2022 19:21:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash a5b04d6d3c126a01d5aa922574230332
fd3383c24dac377a75ca3160503bb31b8019df4a
621df3b5055828325b8cc517cf359ea5ca002fd5fad771cca767e15bde7fa330
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "621DF3B5055828325B8CC517CF359EA5CA002FD5FAD771CCA767E15BDE7FA330"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4092
Expires: Sun, 16 Oct 2022 20:30:02 GMT
Date: Sun, 16 Oct 2022 19:21:50 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f05f7d85c5d7c2aa09651804f80a019
cd118fbc41657bfdf0fcfb9e3a4a2813f3b08e5b
76a6c1ae0a435403ac10b6478f029bb8b871dbdcc2a2c7e3e97b56982a9767e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img1.cdnxsalty10.com/5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb.jpg
200 OK 27 kB URL HTTP/1.1 img1.cdnxsalty10.com/5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb.jpg
IP
ASN #50833 FIBER TELECOM s.r.o.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash e6931f54d97fc0dea35f61775124bf98
e6336ff574be28b8d7b9faaee9e51b405b1ae78c
86653f56947176ecab0aecbd9062074eb34d7c71b09801c9307db469226ee5dd
GET /5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb.jpg HTTP/1.1
Host: img1.cdnxsalty10.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: image/jpeg
Content-Length: 27389
Last-Modified: Wed, 24 Feb 2021 07:31:55 GMT
Connection: keep-alive
ETag: "603600eb-6afd"
Accept-Ranges: bytes
s3t3d2y8.afcdn.net/library/60352/c515ed0670813435dcf1c184c193d7bd26a3dc32.webp
200 OK 6.6 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/60352/c515ed0670813435dcf1c184c193d7bd26a3dc32.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c59fa61aec38dd4bc769e1bb24302a78
c515ed0670813435dcf1c184c193d7bd26a3dc32
89180831cbf551ac1f9c26812b1731370f8b5bb564341142d10d79bb5a95687b
GET /library/60352/c515ed0670813435dcf1c184c193d7bd26a3dc32.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: image/webp
content-length: 6618
last-modified: Wed, 27 Oct 2021 17:58:12 GMT
etag: "61799334-19da"
expires: Fri, 30 Jun 2023 11:36:31 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195927
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1zqMH/97mNAA
x-77-nzt-ray: XBkR+WRKS7k
x-cache: HIT
x-age: 9288183
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/676799/5bf61c22cf650dc4383111ca76fd6b6636afb8e0.webp
200 OK 9.3 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/676799/5bf61c22cf650dc4383111ca76fd6b6636afb8e0.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ca29603d5be96102eccf5969c9d97ed5
5bf61c22cf650dc4383111ca76fd6b6636afb8e0
05811c682cb9ec752ac71553f7e44362d5956e4b5b11fb1cfd981ec9bdeacf16
GET /library/676799/5bf61c22cf650dc4383111ca76fd6b6636afb8e0.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: image/webp
content-length: 9310
last-modified: Thu, 04 Nov 2021 10:09:14 GMT
etag: "6183b14a-245e"
expires: Fri, 30 Jun 2023 11:13:09 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195228
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3vZ/T/sryNAA
x-77-nzt-ray: Kw1AGKPo0D4
x-cache: HIT
x-age: 9288882
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e456e1fcd5b9782e95a8a4beafdaa6f7
08383e72ee30f54920b69f036aa7050b9906cf65
652ef2a4170f9f3331fa3efbbf4f76a170be4d96c0b22a8ad23b490ccab9b534
GET /library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: image/webp
content-length: 10274
last-modified: Wed, 03 Nov 2021 19:29:43 GMT
etag: "6182e327-2822"
expires: Fri, 30 Jun 2023 11:10:59 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195216
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2Exrr/vryNAA
x-77-nzt-ray: iA9A+0Gg6TQ
x-cache: HIT
x-age: 9288894
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/692514/4f21adca1dfb82c3261a90a26301527507ed706a.webp
200 OK 7.0 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/692514/4f21adca1dfb82c3261a90a26301527507ed706a.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd72b82dec36f9fe35a568a62e6a15a1
4f21adca1dfb82c3261a90a26301527507ed706a
17e170d5f29f67bd170fe209830d057a1c66a54528066a6226f195cd7b77423e
GET /library/692514/4f21adca1dfb82c3261a90a26301527507ed706a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: image/webp
content-length: 6986
last-modified: Wed, 03 Nov 2021 21:07:03 GMT
etag: "6182f9f7-1b4a"
expires: Wed, 30 Aug 2023 14:57:41 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693417070
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ33YYr/4A4+AA
x-77-nzt-ray: NIXcy/dmhTY
x-cache: HIT
x-age: 4067040
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash c39b56b419f8042acf72492ba4e1f74e
6cb79ff18960dad3af30f2d670fc5cd1105773ef
718add868b7ea4ed11eca90148f2a1280aa7003d4425a072c1005ec756d62973
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Fri, 14 Oct 2022 05:10:11 GMT
Expires: Fri, 21 Oct 2022 05:10:10 GMT
Etag: "6cb79ff18960dad3af30f2d670fc5cd1105773ef"
Cache-Control: max-age=380299,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75b328ebec43b4fd-OSL
zerossl.ocsp.sectigo.com/
200 OK 894 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash c91d728b536be177222584c4050738cf
5d73140d524a1c5cd377868f43df11ed27356bf7
20c7413d1162958617398c51a6f577a877488947d72f9e7a91d1fb6b962dfc61
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Thu, 13 Oct 2022 19:34:34 GMT
Expires: Thu, 20 Oct 2022 19:34:33 GMT
Etag: "09fa027090c889556d8b5bb3e7fcb96539a9fef0"
Cache-Control: max-age=345762,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75b328ebe9bd0b69-OSL
img1.cdnxsalty10.com/video.mp4?q=eyJhbGciOiJIUzI1NiJ9.eyJsaW5rIjoiaHR0cHM6Ly8yLmNkbnhzYWx0eTkuY29tOjgwODEvNS8zL2UvNTNlMTE3ZmItM2I1OS00NjUxLWFlNzEtMmM2MzhmMjllZWRiXzcyMHAubXA0IiwiY3RpbWUiOjE2NjU4MzgzMDZ9.X1xi0cpQgaZ35_VxDkWVWl8dTKMHSwb98UzhcUfT0RA
302 Found 0 B URL HTTP/1.1 img1.cdnxsalty10.com/video.mp4?q=eyJhbGciOiJIUzI1NiJ9.eyJsaW5rIjoiaHR0cHM6Ly8yLmNkbnhzYWx0eTkuY29tOjgwODEvNS8zL2UvNTNlMTE3ZmItM2I1OS00NjUxLWFlNzEtMmM2MzhmMjllZWRiXzcyMHAubXA0IiwiY3RpbWUiOjE2NjU4MzgzMDZ9.X1xi0cpQgaZ35_VxDkWVWl8dTKMHSwb98UzhcUfT0RA
IP
ASN #50833 FIBER TELECOM s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video.mp4?q=eyJhbGciOiJIUzI1NiJ9.eyJsaW5rIjoiaHR0cHM6Ly8yLmNkbnhzYWx0eTkuY29tOjgwODEvNS8zL2UvNTNlMTE3ZmItM2I1OS00NjUxLWFlNzEtMmM2MzhmMjllZWRiXzcyMHAubXA0IiwiY3RpbWUiOjE2NjU4MzgzMDZ9.X1xi0cpQgaZ35_VxDkWVWl8dTKMHSwb98UzhcUfT0RA HTTP/1.1
Host: img1.cdnxsalty10.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Sun, 16 Oct 2022 19:21:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://2.cdnxsalty9.com:8081/5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb_720p.mp4
cdnxsalty.com/static-storage/5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb_preview.vtt
200 OK 6.6 kB URL HTTP/1.1 cdnxsalty.com/static-storage/5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb_preview.vtt
IP
ASN #24940 Hetzner Online GmbH
Hash 93e5f284a35708b0aeb81509367da61c
3db7521d25ce21403c7fd4a611c31039ac3d2601
94e52cfa0a8b741b8d08b404eb428ef041316be35c4c573f735114bc2a96388d
GET /static-storage/5/3/e/53e117fb-3b59-4651-ae71-2c638f29eedb_preview.vtt HTTP/1.1
Host: cdnxsalty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 19:21:50 GMT
Server: Apache/2.4.38 (Debian)
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 600
Last-Modified: Mon, 31 Aug 2020 19:27:51 GMT
ETag: "19d4-5ae3165f8fbc0"
Accept-Ranges: bytes
Content-Length: 6612
Connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11891
Expires: Sun, 16 Oct 2022 22:40:02 GMT
Date: Sun, 16 Oct 2022 19:21:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11891
Expires: Sun, 16 Oct 2022 22:40:02 GMT
Date: Sun, 16 Oct 2022 19:21:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11891
Expires: Sun, 16 Oct 2022 22:40:02 GMT
Date: Sun, 16 Oct 2022 19:21:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11891
Expires: Sun, 16 Oct 2022 22:40:02 GMT
Date: Sun, 16 Oct 2022 19:21:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6432c2bf0bab32f918d931dd98a6e1e4
bba4f37b146e5aea2b6490f8f7da63fa61ffc849
bde0d98cb1dcd70f22cd2aee5860eb0cd824d1bb12ab18245ab8eed06a79cf1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7337
x-amzn-requestid: 43a16c4d-c5b9-4d01-8ba4-e811b09e96b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WYqEwVoAMFe5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d104-121eda8b7a73518849342e7a;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HUtvwwtoxo38w1ZiKkBZJL0dL3G7aCdUNzvcUhJ7CZ_Taj_tMyfjAQ==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 05:03:21 GMT
age: 51510
etag: "bba4f37b146e5aea2b6490f8f7da63fa61ffc849"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af2b9dc-3279-48a4-b300-2aca0a094dd4.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af2b9dc-3279-48a4-b300-2aca0a094dd4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ac5c50f8ffe0da11f1adb9f67d811cf
2b586d1c26208d6fe7df3a4cec286e28f21807ca
12414dcf4afa766503c9328fe626c2d1317a0d6838887e0dd30e9b56e85ea3d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af2b9dc-3279-48a4-b300-2aca0a094dd4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8120
x-amzn-requestid: 42dc2299-203a-4269-a252-e239978fe80d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7EhLHX0IAMF89g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347813a-1357899758d9403e4b920418;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 03:08:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: N64ALU7tuIg6L--gmnkJq08f3A2Vn0Cl3wlRBLim7RhWN_VnCftrng==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 03:49:28 GMT
age: 55943
etag: "2b586d1c26208d6fe7df3a4cec286e28f21807ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg
IP
Hash bff678517cf71715e7cb18fcd26ecc31
d5f21e0dfc1b57405d6f7c6c42b35a741c70d766
9d729183b21cc926b2a27b8b8e3ae33e050d0fc574930f0f63af5cea2e0e4f30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7075
x-amzn-requestid: 254a8860-b3bf-4e8d-a08d-31effa209a6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5iGQqIAMFmkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a3-1a2820f550f35bf830444c22;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: psWLknan4sVucDaNcLURe-XRPs5FKeJ0Il7ZGWvBxV2rgpTrQvbyVw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:41:19 GMT
etag: "41548e231e2358d3453e7630f0d07a645cc25ddc"
content-type: image/jpeg
age: 78032
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df5f38c3dc43ccc382d0274bffb6b350
9a305072cce8bb61ca3753bb98b999695fb4706e
20ff21892e65787fecbadca0f59c05e54dee3a1359271839dab0ee5c9e796ab0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6367
x-amzn-requestid: 485c3cf9-d305-4540-8eef-8304d1103ccc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5EHbOoAMFWsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a0-2ac206d826bf23193740e74c;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j4GFPRLOwyEGJVrC4uk01vi858DLWzDtUNZkfmbJ1ybrMV4xEdOIVg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:50:24 GMT
age: 77487
etag: "9a305072cce8bb61ca3753bb98b999695fb4706e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
IP
Hash 2d866fa5518428cbd57d09639e8fff81
fb4aefb2227a59864ae4655938775dc653c8725c
b0e0467d8b8281ef1a161b71785a91f94bfc629157fa7b6578ccdf08ff6aac64
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7082
x-amzn-requestid: 5e98988f-faad-4e52-a49f-28d5a77b15d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL46HFloAMFSag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b269f-6759e36c79241479181c1d05;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p2Ytir5IhFSnRKz3OJ3J6_SieMyoFAAysH8-jBf_Bh_xfKEDRGy18g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 78295
etag: "2050cee63f8005c5d9ac1a817730ada51b323f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e20daa74ab04b1b9859672acfc070f7e
d291947f161c928e6c6682a05835478b5f0cffc5
ebbe051930f46dd25de2a4c5795f3bdddf1513c0657cdc986c48f3dfdc90f575
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9260
x-amzn-requestid: dfd8deb0-fc73-4321-b024-330b2a3d1759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aENyFH9RoAMF24w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b29a6-0aaf75c43b51d5775bc48a95;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:44:06 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YVZ4EN-w7lmXTXKTy_A-9P0TW0zAqSa7j5_G2M1XnS-j3EfJSEFplw==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:58:49 GMT
age: 76982
etag: "d291947f161c928e6c6682a05835478b5f0cffc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aed118e6a59324e2d52302879dbf1e2e
d171fcebf3ddbe36321cf3c09118d61c25336769
1faa3148720a9bf4a16b908984c46e9524d90aa29bf9cda421ba4ea3076e9854
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1FAA3148720A9BF4A16B908984C46E9524D90AA29BF9CDA421BA4EA3076E9854"
Last-Modified: Fri, 14 Oct 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2754
Expires: Sun, 16 Oct 2022 20:07:45 GMT
Date: Sun, 16 Oct 2022 19:21:51 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 16 Oct 2022 18:41:09 GMT
expires: Sun, 16 Oct 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 2442
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q5Y5X5J5LT&cid=1238147360.1665948114>m=2oeaa0&aip=1&z=365448389
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q5Y5X5J5LT&cid=1238147360.1665948114>m=2oeaa0&aip=1&z=365448389
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-Q5Y5X5J5LT&cid=1238147360.1665948114>m=2oeaa0&aip=1&z=365448389 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 19:21:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-KW71G5FMEX&cid=1238147360.1665948114>m=2oeaa0&aip=1&z=1292976933
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-KW71G5FMEX&cid=1238147360.1665948114>m=2oeaa0&aip=1&z=1292976933
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-KW71G5FMEX&cid=1238147360.1665948114>m=2oeaa0&aip=1&z=1292976933 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 19:21:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 695cea3df950db7392b70395df1d8b05
b7fe7c9dd9f38fd23ad37dd92b9085f35a6fe823
4bad472e725699f54c9983fe6cb3ce0783b831ea2877b1a22f80197b953cfaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 19:21:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 443e50b1fe44256dcfe0d6197ab4cdfb
Strict-Transport-Security: max-age=0; includeSubdomains
syndication.realsrv.com/v1/api.php
200 OK 5.7 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash 6764ebb92eae3680c54d2e75cf1a952b
71244f1c0743fdb2258c9e5089374d8ad6cf0015
53a967227a87ec75352f10b2b42bfaa4e94fa0084655d3713cd1a65f24825bde
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 388
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02QMWoEMQxFr5ILzCDJkmxvnTqBhBzAGc9Ait0UYWEC//CRXYT1x/gXkv6ThUQWpoX9ie0ifDFG5bXSqrKyKV5e36CMs92+rvd1+76iMFclOIuSI1dVz1BSNyIwEyyVIi7ILqwpF7AhgUJiSXW4lYhRCB/vz/NySJCITrEYMlORBRqeztHatkRH7bnVwzbjI5H15IdV5X3vvo/CR0pCzsGJIBgskZilzhT618LziUOYrv383jbgoWTIZlOKUTrYTFvN5iU26/a5m1iTPvYcX1HV/wCaYOUzUwEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02QMWoEMQxFr5ILzCDJkmxvnTqBhBzAGc9Ait0UYWEC//CRXYT1x/gXkv6ThUQWpoX9ie0ifDFG5bXSqrKyKV5e36CMs92+rvd1+76iMFclOIuSI1dVz1BSNyIwEyyVIi7ILqwpF7AhgUJiSXW4lYhRCB/vz/NySJCITrEYMlORBRqeztHatkRH7bnVwzbjI5H15IdV5X3vvo/CR0pCzsGJIBgskZilzhT618LziUOYrv383jbgoWTIZlOKUTrYTFvN5iU26/a5m1iTPvYcX1HV/wCaYOUzUwEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA02QMWoEMQxFr5ILzCDJkmxvnTqBhBzAGc9Ait0UYWEC//CRXYT1x/gXkv6ThUQWpoX9ie0ifDFG5bXSqrKyKV5e36CMs92+rvd1+76iMFclOIuSI1dVz1BSNyIwEyyVIi7ILqwpF7AhgUJiSXW4lYhRCB/vz/NySJCITrEYMlORBRqeztHatkRH7bnVwzbjI5H15IdV5X3vvo/CR0pCzsGJIBgskZilzhT618LziUOYrv383jbgoWTIZlOKUTrYTFvN5iU26/a5m1iTPvYcX1HV/wCaYOUzUwEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22634c59cdacaf34.030663753761694261%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22110.0199%22%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/811940/0ac596de310e080a4ecf203d49b65f356036c0c8.mp4
206 Partial Content 28 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/811940/0ac596de310e080a4ecf203d49b65f356036c0c8.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 390dd11945c600a641ba99d72b4b6df6
0ac596de310e080a4ecf203d49b65f356036c0c8
926a186d91d88fb01c59a7e0ef75dbd1f692199d43f26230d90d7ce365ca3ca6
GET /library/811940/0ac596de310e080a4ecf203d49b65f356036c0c8.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 16 Oct 2022 19:21:51 GMT
content-type: video/mp4
content-length: 28511
last-modified: Mon, 12 Sep 2022 13:13:47 GMT
etag: "631f308b-6f5f"
expires: Tue, 19 Sep 2023 05:06:38 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1697103823
server: CDN77-Turbo
x-77-nzt: AblMCQ3xrNH/gM0FAA
x-77-nzt-ray: kIKIFvSvaVE
x-cache: HIT
x-age: 380288
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-28510/28511
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/811940/50aadbb9ad8e4de0266b4d806c2ed5e78e3e61fa.mp4
206 Partial Content 34 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/811940/50aadbb9ad8e4de0266b4d806c2ed5e78e3e61fa.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash ceb44b09ceb731c43a3aae63550c39c8
50aadbb9ad8e4de0266b4d806c2ed5e78e3e61fa
bf05c4e65fcf322990016e14c3db13f5dd0683e6c699e61f8fe8308cd07f7b3b
GET /library/811940/50aadbb9ad8e4de0266b4d806c2ed5e78e3e61fa.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 16 Oct 2022 19:21:51 GMT
content-type: video/mp4
content-length: 33735
last-modified: Mon, 12 Sep 2022 13:13:46 GMT
etag: "631f308a-83c7"
expires: Tue, 12 Sep 2023 13:59:01 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1694528819
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0E4x3/HBgtAA
x-77-nzt-ray: Vjjx2TJiRkw
x-cache: HIT
x-age: 2955292
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-33734/33735
X-Firefox-Spdy: h2
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OwWpEIQz8lf7Ak0xMou655xa29ANEfdDDbg+lsIV8fPVtWepgHIaZOEzMG2iDPUFPjJPCC0KhIByg4i+vZxf4rV4/Lt+hfV7cOBrgBhYyT0XE0rRkcBQHyGOBFstLSzFjiurRaYI1iiwWiIg9k7+/PR8XE0w+5/pw0Rlzuq1UbZH20lMtuzbFHkl7tF2LYIxuYxn/F6QDCADyWvsnLGw4nnnID1a/fq7N/WG413N9pOBpVFXtSVuH0p6Ni6k01DpSG0a/00adV0MBAAA=
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OwWpEIQz8lf7Ak0xMou655xa29ANEfdDDbg+lsIV8fPVtWepgHIaZOEzMG2iDPUFPjJPCC0KhIByg4i+vZxf4rV4/Lt+hfV7cOBrgBhYyT0XE0rRkcBQHyGOBFstLSzFjiurRaYI1iiwWiIg9k7+/PR8XE0w+5/pw0Rlzuq1UbZH20lMtuzbFHkl7tF2LYIxuYxn/F6QDCADyWvsnLGw4nnnID1a/fq7N/WG413N9pOBpVFXtSVuH0p6Ni6k01DpSG0a/00adV0MBAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01OwWpEIQz8lf7Ak0xMou655xa29ANEfdDDbg+lsIV8fPVtWepgHIaZOEzMG2iDPUFPjJPCC0KhIByg4i+vZxf4rV4/Lt+hfV7cOBrgBhYyT0XE0rRkcBQHyGOBFstLSzFjiurRaYI1iiwWiIg9k7+/PR8XE0w+5/pw0Rlzuq1UbZH20lMtuzbFHkl7tF2LYIxuYxn/F6QDCADyWvsnLGw4nnnID1a/fq7N/WG413N9pOBpVFXtSVuH0p6Ni6k01DpSG0a/00adV0MBAAA= HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22634c59cdacaf34.030663753761694261%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22110.0199%22%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/623611/b15895baaf99a97c8834ba6bec7f8db1fef4fe99.jpg
200 OK 23 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/b15895baaf99a97c8834ba6bec7f8db1fef4fe99.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 441547a9707a39c963c3711eb1bde65f
b15895baaf99a97c8834ba6bec7f8db1fef4fe99
62aecdb0f6d107e9245712c74358f209336d3d33a6c90857b44bc10e3fc9b8c6
GET /library/623611/b15895baaf99a97c8834ba6bec7f8db1fef4fe99.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:51 GMT
content-type: image/jpeg
content-length: 22647
last-modified: Mon, 25 May 2020 13:39:38 GMT
etag: "5ecbca9a-5877"
expires: Fri, 30 Jun 2023 11:55:59 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195206
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2Ao7T/ybyNAA
x-77-nzt-ray: 3b+c3bZmKb4
x-cache: HIT
x-age: 9288905
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/d072faccd5bf786646901428e54895921ab50f73.jpg
200 OK 34 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/d072faccd5bf786646901428e54895921ab50f73.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash b91c96358753ce1ab4086e875c84c4e8
d072faccd5bf786646901428e54895921ab50f73
3be413c893134d87bd9a4532d47ad5726d31893c10330b23e8c6fb7935d307c5
GET /library/623611/d072faccd5bf786646901428e54895921ab50f73.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:51 GMT
content-type: image/jpeg
content-length: 34098
last-modified: Thu, 14 May 2020 09:51:02 GMT
etag: "5ebd1486-8532"
expires: Fri, 30 Jun 2023 11:33:09 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195214
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1ijZP/wbyNAA
x-77-nzt-ray: 2nTBg1KXOm8
x-cache: HIT
x-age: 9288897
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 56 kB URL HTTP/2 creepingbrings.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash de2ec8a111ab45d2997cdfeb75082fc3
6e6f6a3b81b7dc399540561d55e5364ae80258a0
9a57d56b987f98877e656ab1cc54a7e6bdc6836deb7973eb29215805f5acabb8
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: eb3d7dd9798894fb4bbfae1e44b9a8d3
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 16 Oct 2022 19:21:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GtJJY9FAseknXQWVFbQyLnbdYwCpVzHmVeZUvrSLYidYvXHAD41ad5128nTw2%2Fuv47IoVIZqHi0%2BKWo1tx60Z3WbEAICpffgouepY2R9qPGliIXPNLMyiijhhHcNFsSLaD8E5cI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75b328ea9b2a72e2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02PTUoEMRCFr+IFOtR/klm7VlA8QKd7Ai5mXIjQwju8SS9k6lHUW9TPV0IiC9PC8cR+Eb44o3KqlEwSu+Hl9Q3GONb75+0nbV83FOZqhGAxCuRqFhlGFk4GZoJrKRKCHMKmOcAOBQ2Jq9l0iYhRCB/vz2fykECJDnEafl5FFoyFoGOOrptSr3tea/fNuSv5rtG9Gl+ve1xn4yMlIefBiUEwWSgplTiv0L8WPssIwunW79/7Bjy0TPk5pGOVTbZWNaSVtm51N9FWexEdbzbtba8l/wEqaMTDUwEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02PTUoEMRCFr+IFOtR/klm7VlA8QKd7Ai5mXIjQwju8SS9k6lHUW9TPV0IiC9PC8cR+Eb44o3KqlEwSu+Hl9Q3GONb75+0nbV83FOZqhGAxCuRqFhlGFk4GZoJrKRKCHMKmOcAOBQ2Jq9l0iYhRCB/vz2fykECJDnEafl5FFoyFoGOOrptSr3tea/fNuSv5rtG9Gl+ve1xn4yMlIefBiUEwWSgplTiv0L8WPssIwunW79/7Bjy0TPk5pGOVTbZWNaSVtm51N9FWexEdbzbtba8l/wEqaMTDUwEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA02PTUoEMRCFr+IFOtR/klm7VlA8QKd7Ai5mXIjQwju8SS9k6lHUW9TPV0IiC9PC8cR+Eb44o3KqlEwSu+Hl9Q3GONb75+0nbV83FOZqhGAxCuRqFhlGFk4GZoJrKRKCHMKmOcAOBQ2Jq9l0iYhRCB/vz2fykECJDnEafl5FFoyFoGOOrptSr3tea/fNuSv5rtG9Gl+ve1xn4yMlIefBiUEwWSgplTiv0L8WPssIwunW79/7Bjy0TPk5pGOVTbZWNaSVtm51N9FWexEdbzbtba8l/wEqaMTDUwEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22634c59cdacaf34.030663753761694261%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22110.0199%22%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OQWoDMQz8Sj+wRiNLsp1zzym05AGudw09JD2UQAJ6fO1tCfFgeRhm5GFiXkAL7AV6YBwUXhAKBeEAFT++vbvAb/Xydb6G9n1242iAG1jIPBURS8OSMXQHyGOBFstTSzGzONSj0wBrFJksEBF7Jj99vO4XA0w+5vxw0hFzus1UbZF6WVMtXZuiR9I1Wtci2LbVtml8Lkg7EKIizbX/wsSC/RmHfGf1535p7g/DXz3XRwpeoTknstzzirJZba2x5lJT/4T09AutC+yeQwEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OQWoDMQz8Sj+wRiNLsp1zzym05AGudw09JD2UQAJ6fO1tCfFgeRhm5GFiXkAL7AV6YBwUXhAKBeEAFT++vbvAb/Xydb6G9n1242iAG1jIPBURS8OSMXQHyGOBFstTSzGzONSj0wBrFJksEBF7Jj99vO4XA0w+5vxw0hFzus1UbZF6WVMtXZuiR9I1Wtci2LbVtml8Lkg7EKIizbX/wsSC/RmHfGf1535p7g/DXz3XRwpeoTknstzzirJZba2x5lJT/4T09AutC+yeQwEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01OQWoDMQz8Sj+wRiNLsp1zzym05AGudw09JD2UQAJ6fO1tCfFgeRhm5GFiXkAL7AV6YBwUXhAKBeEAFT++vbvAb/Xydb6G9n1242iAG1jIPBURS8OSMXQHyGOBFstTSzGzONSj0wBrFJksEBF7Jj99vO4XA0w+5vxw0hFzus1UbZF6WVMtXZuiR9I1Wtci2LbVtml8Lkg7EKIizbX/wsSC/RmHfGf1535p7g/DXz3XRwpeoTknstzzirJZba2x5lJT/4T09AutC+yeQwEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22634c59cdacaf34.030663753761694261%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22110.0199%22%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01Py0pEMQz9FX/glpw0adNZu1ZQ/IDa24KLGRcyMEI+3vYqgzkkOYSTFxPzBtqQHqAnxknhBaFQEA5Q8afnFxf4rV4+ztfQPs+eOCbAE1goeS4iKU+JgaM5QB4LtCRbtRyNyaEenSZYo8higYjYjfzt9fFwTEzljGvhojI53VZXbZFG2XMtQ5tiRNI9pqFF0Pue+hL+P5AOIKhZXmP/CgsbjjSN/GD16/vS3O+C3/Nc713wPF9sfZrlknMXksI2rNiufbzX9gNiCWwyQwEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01Py0pEMQz9FX/glpw0adNZu1ZQ/IDa24KLGRcyMEI+3vYqgzkkOYSTFxPzBtqQHqAnxknhBaFQEA5Q8afnFxf4rV4+ztfQPs+eOCbAE1goeS4iKU+JgaM5QB4LtCRbtRyNyaEenSZYo8higYjYjfzt9fFwTEzljGvhojI53VZXbZFG2XMtQ5tiRNI9pqFF0Pue+hL+P5AOIKhZXmP/CgsbjjSN/GD16/vS3O+C3/Nc713wPF9sfZrlknMXksI2rNiufbzX9gNiCWwyQwEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01Py0pEMQz9FX/glpw0adNZu1ZQ/IDa24KLGRcyMEI+3vYqgzkkOYSTFxPzBtqQHqAnxknhBaFQEA5Q8afnFxf4rV4+ztfQPs+eOCbAE1goeS4iKU+JgaM5QB4LtCRbtRyNyaEenSZYo8higYjYjfzt9fFwTEzljGvhojI53VZXbZFG2XMtQ5tiRNI9pqFF0Pue+hL+P5AOIKhZXmP/CgsbjjSN/GD16/vS3O+C3/Nc713wPF9sfZrlknMXksI2rNiufbzX9gNiCWwyQwEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xanimu.com
Connection: keep-alive
Referer: https://xanimu.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4046528%7C44789772%7C0%7C%7C110%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cac30f9d7a9f5c51f305d36f5941eed6e%7C0%7Cxanimu.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 19:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xanimu.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22634c59cdacaf34.030663753761694261%22%3B%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22634c59cdacaf34.030663753761694261%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22110.0199%22%7D; expires=Tue, 15 Oct 2024 19:21:51 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
xanimu.com/es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%C3%B3n-no-va/
200 OK 0 B URL HTTP/2 xanimu.com/es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%C3%B3n-no-va/
IP
GET /es/27726-minecraft-belleza-toma-follada-por-la-mega-belleza-futa-comisi%C3%B3n-no-va/ HTTP/1.1
Host: xanimu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:49 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding,Cookie,X-Forwarded-Proto
x-gt-origurl: /27726-minecraft-beauty-takes-fucked-by-the-mega-beauty-futa-commission-no-va/
x-gt-server: kars
content-language: es
x-gt-cache-status: HIT-TRANS
x-gt-cache-age: 71659
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
referrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade
x-frame-options: SAMEORIGIN, SAMEORIGIN
cross-origin-resource-policy: cross-origin, cross-origin
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cross-origin-embedder-policy: unsafe-none, unsafe-none
expires: Sun, 16 Oct 2022 12:51:50 GMT
x-download-options: noopen, noopen
cross-origin-opener-policy: unsafe-none, unsafe-none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XU%2FCrKvyhIYmA3drKEFm78%2BDioaDJV0zoT0YI%2FuwJPbNLjflQ4VzYEJK6aDRkMXfp13nJkxalmqy0Ufsu8xgltxtPbzKraknFy8tNAzz5T24qDRozxLlD4owY8E%3D"}],"group":"cf-nel","max_age":604800}
pragma: public
cache-control: max-age=48256, public
x-gt-delivered-by: GTranslate v8.2.3 in 0ms visit https://gtranslate.io
last-modified: Sat, 15 Oct 2022 12:51:50 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75b328e1de69b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 0 B URL HTTP/2 addresseepaper.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xanimu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 19:21:50 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 3fa7266b0a35cb4cd0a27e498da524a5
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 16 Oct 2022 19:21:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bxK1A3vOQDlYcHiOP6Qf74Sm5YFW2nRZi76moYUjZBNsvy9DGaU3zjjV2X5D2ddmQUyWhED6LIU6zXkXCOzW%2Bx3gkQ4SBq0hocdrdQ1YU1qGZvGRGb3JrFDXEDOVMZ0JpuiDKwM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75b328ea79a571d5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.72.17
104.21.234.233
52.29.95.124
23.36.76.226
93.184.220.29
185.76.9.19
95.211.229.247
91.224.59.150