video7top.site/SNgPpkqQ
301 Moved Permanently 0 B IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SNgPpkqQ HTTP/1.1
Host: video7top.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 27 Sep 2022 19:46:02 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Location: https://video7top.site/SNgPpkqQ
Pragma: no-cache
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 19:05:14 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: B_dm3OzQpKX_5z2XzDACV5it49RwaiB40w3Qz8Es8E8OqxeyhT9U4w==
Age: 2449
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12805
Expires: Tue, 27 Sep 2022 23:19:28 GMT
Date: Tue, 27 Sep 2022 19:46:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1017811d25642601e984edc1676d118d
c177c4f7a897584bf91347fa4990c83d6bfd0321
f35bb3a8c877dd8d3c5920f3c917722f12b157aff398e2ec30fab51fa6caa2ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8796
Expires: Tue, 27 Sep 2022 22:12:39 GMT
Date: Tue, 27 Sep 2022 19:46:03 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sCBuugDX4h83Oom01lrdEobKEmVoIOIG5jLe6AL3hGQCSQhyegDmJiH4HcqHhyQ/5gcwxKcJS2eN54m0GD2AmA==
x-amz-request-id: A7BGY540JMJM1T89
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 27 Sep 2022 18:47:34 GMT
age: 3509
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb27b7c45cc21d48dcb135052efd3dab
528278df2145f802864da6d1ff31dd14781feca3
4dcbbb0086fb2211974a815100fdbd3c7b6a21186816646e8ea506416535926e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4DCBBB0086FB2211974A815100FDBD3C7B6A21186816646E8EA506416535926E"
Last-Modified: Sun, 25 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 28 Sep 2022 01:46:03 GMT
Date: Tue, 27 Sep 2022 19:46:03 GMT
Connection: keep-alive
video7top.site/SNgPpkqQ
302 Found 0 B IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SNgPpkqQ HTTP/1.1
Host: video7top.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 27 Sep 2022 19:46:03 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Location: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Pragma: no-cache
Set-Cookie: _subid=376l60j7tr0uk;Expires=Friday, 28-Oct-2022 19:46:03 GMT;Max-Age=2678400;Path=/
e64fd=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE2NTVcIjoxNjY0MzA3OTYzfSxcImNhbXBhaWduc1wiOntcIjIzMlwiOjE2NjQzMDc5NjN9LFwidGltZVwiOjE2NjQzMDc5NjN9In0.KaH9z6b1fsi6O4iBCRaFJApA3APJ5ruYTUK7eCAlbOs;Expires=Thursday, 27-Jun-2075 03:32:06 GMT;Max-Age=1664523963;Path=/
_token=uuid_376l60j7tr0uk_376l60j7tr0uk633352fb75d534.89118744;Expires=Friday, 28-Oct-2022 19:46:03 GMT;Max-Age=2678400;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 19:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 19:51:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D2Wi92t_MFA24o6FjJ7TFqj5JYrPFreKwMrqE1tOSHGIXPX2Qg2t4Q==
Age: 2117
zerossl.ocsp.sectigo.com/
200 OK 316 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash d61969298d59292d4c9d2e5e8b1c465f
7cff9e94d80e3fd1ef04fcb449eb441b98f5fa0f
ad067cd311ffb7b94808e71ff2e92dbe5080d5fe375afac64d8821d352d9e4bf
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:03 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Sun, 25 Sep 2022 05:50:28 GMT
Expires: Sun, 02 Oct 2022 05:50:27 GMT
Etag: "7cff9e94d80e3fd1ef04fcb449eb441b98f5fa0f"
Cache-Control: max-age=381263,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be44ba43fac0-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5107
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:03 GMT
Last-Modified: Tue, 27 Sep 2022 18:20:56 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
news-komani.cc/revopush.js
200 OK 6.4 kB URL HTTP/2 news-komani.cc/revopush.js
IP
ASN #63023 AS-GLOBALTELEHOST
File type ASCII text, with CRLF line terminators
Hash ce269897a433e3b764e9d12d31c75257
70eae23aad447d7aeddbded507fcd782b14032e7
336e4d334b0f2c39b10ed0dbfb403079f4e3ee6c9f9c3b76952e32c81e06123f
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /revopush.js HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: application/javascript
content-length: 6448
last-modified: Tue, 06 Apr 2021 16:09:56 GMT
etag: "606c87d4-1930"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-komani.cc/53/css/style.css
200 OK 6.8 kB URL HTTP/2 news-komani.cc/53/css/style.css
IP
ASN #63023 AS-GLOBALTELEHOST
Hash e847018357e35201fc307010d2f273d4
dc937966829b556914867618c050d9a071cbff7f
a1f4e7ef79d0ff0e7daa8e33bbc20e8a77cfa2893f618fad12a81660ca9e90f4
Analyzer Verdict Alert quad9 Sinkholed
GET /53/css/style.css HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: uuid=04cebadb-cd5e-489f-ad02-36f3d4e30c90; fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: text/css
content-length: 6750
last-modified: Fri, 20 Aug 2021 13:24:46 GMT
etag: "611fad1e-1a5e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-komani.cc/53/images/spinning-circles2.svg
200 OK 503 B URL HTTP/2 news-komani.cc/53/images/spinning-circles2.svg
IP
ASN #63023 AS-GLOBALTELEHOST
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 14e6f9981fa27406176056df2451d27b
aa1b6fd6071391d0031bff2d74ae77347ec2fdb4
466d361db2f130d7e3d40a671c935e3e556c3a49567657afee2e44a0a390a84f
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /53/images/spinning-circles2.svg HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: uuid=04cebadb-cd5e-489f-ad02-36f3d4e30c90; fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: image/svg+xml
content-length: 503
last-modified: Fri, 20 Aug 2021 13:24:46 GMT
etag: "611fad1e-1f7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
news-komani.cc/53/js/device.js
200 OK 7.4 kB URL HTTP/2 news-komani.cc/53/js/device.js
IP
ASN #63023 AS-GLOBALTELEHOST
File type HTML document, ASCII text
Hash 46ce7a0522431a9a972b55b01bf0c1f1
263694d7c99de62fb4e9f4e9215ec9df92f16dc2
8b4fd7bcadd8d9e95b7aebae2f7b233dab0453cc931ba13add8a313dc3c61033
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /53/js/device.js HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: uuid=04cebadb-cd5e-489f-ad02-36f3d4e30c90; fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: application/javascript
content-length: 7364
last-modified: Fri, 20 Aug 2021 13:24:46 GMT
etag: "611fad1e-1cc4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/8.6.8/firebase-messaging.js
200 OK 11 kB URL HTTP/2 www.gstatic.com/firebasejs/8.6.8/firebase-messaging.js
IP
File type ASCII text, with very long lines (40876)
Hash 5df942bc55c20f421cf56876855ced51
61e1c33b26d5a693425a8c229f90b1ea39736f29
3fb9f58427a7229af7bfb3c37e2f9718ba1e8776c368a80c511c6e27466d4932
GET /firebasejs/8.6.8/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10869
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Sep 2022 00:44:44 GMT
expires: Sat, 23 Sep 2023 00:44:44 GMT
cache-control: public, max-age=31536000
age: 414080
last-modified: Thu, 01 Jul 2021 23:11:55 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/8.6.8/firebase-app.js
200 OK 7.0 kB URL HTTP/2 www.gstatic.com/firebasejs/8.6.8/firebase-app.js
IP
File type ASCII text, with very long lines (21892)
Hash 4cf323105e34d6644ca742121ff34994
e7f40348e00c7c9a6ff445fbac09ad59b93e7766
2591a5663417d2ab52269d94384f28940dd8d87b6aba1acc99fa9b52b9aa36b7
GET /firebasejs/8.6.8/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 6966
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 22:40:47 GMT
expires: Tue, 26 Sep 2023 22:40:47 GMT
cache-control: public, max-age=31536000
age: 75917
last-modified: Thu, 01 Jul 2021 23:11:47 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
news-komani.cc/sw.js
200 OK 2.4 kB IP
ASN #63023 AS-GLOBALTELEHOST
Hash 5d4515057d85e7ffe5e1748418c11dec
994504607457732bc23e4f43a7da05f14c18cb2c
9a5435a8a9ec97584dfa9831088842cdbeb0c262814908d3d32eebd3ae551448
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /sw.js HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: application/javascript
content-length: 2378
last-modified: Wed, 14 Jul 2021 13:33:14 GMT
etag: "60eee79a-94a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
news-komani.cc/favicon.ico
200 OK 1.2 kB URL HTTP/2 news-komani.cc/favicon.ico
IP
ASN #63023 AS-GLOBALTELEHOST
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 183cab2f5d4582ef71ae37efc8d458dd
7c230eba9c1ce7900ea9bbf53dde00ea068dc995
c96fb13d89231c5a743ca1826064cd884ed4ec629fd66f15c0dbcf173dfbbf3e
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Sat, 20 Jul 2019 16:00:28 GMT
etag: "5d333a9c-47e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5I/B8kezJ8o+L4WCr/y+5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hrLVCxg3qEgxcOPaiTbYfoD6dZE=
news-komani.cc/traffback.php?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1&land=53
200 OK 51 B URL HTTP/2 news-komani.cc/traffback.php?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1&land=53
IP
ASN #63023 AS-GLOBALTELEHOST
File type ASCII text, with no line terminators
Hash 0c265c26c95a87c905dfd76b8ede3c2d
6358322c92ba54bbd52a75a7f1e823f36ba6bd9e
da4711364064b598e09bc204c8ac3d69b8e3fc9445b130d8e79eb9855dcbf041
Analyzer Verdict Alert quad9 Sinkholed
GET /traffback.php?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1&land=53 HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8630
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 19:46:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8630
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 19:46:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8630
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 19:46:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 19:30:15 GMT
age: 950
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bs6HOUmHOoYKDuzBoVHhcr8d4HP4bBmwUF3EtOmwKXo7ozhfaIYEvw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:39:07 GMT
age: 79618
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46e31aa06b8e86a9a5f9ba1cc3feca08
75df3341e30281fcbf78c7074980356fdf0be8e2
d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5319
x-amzn-requestid: 74191b02-ebea-48bd-8522-f05bf8080f31
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlOKFtsIAMFyGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bf4-1f2daa9d7906bf9812e10953;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Y0gjPs-l9_JD9F-LSH_i1uL2Nz0UcWCG-9PmDmRH8cN_cNAeSchJTA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:39:00 GMT
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
content-type: image/jpeg
age: 79625
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14218a43c5e5bbce546735a780c8ccce
61676358cdbb2373bc644e66f8a84fbc8cc5daf6
905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:37:50 GMT
age: 65295
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 79628
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IWzfDNFlgYdqYnbQ9uWfOvqb5zl3I3mgTZrT5pU5P3EvetMRDN5P7w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:06:47 GMT
age: 67158
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash f364e3281cb16df893a718c1d9e315f7
50124d0a56bedde2364afa028329dec4e4224b50
ff17b2212583392c7cce177f3e1fb70943bdfaa061161ec22e7b48a52e7e781c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:05 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 00:10:43 GMT
Expires: Mon, 03 Oct 2022 00:10:42 GMT
Etag: "50124d0a56bedde2364afa028329dec4e4224b50"
Cache-Control: max-age=447276,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be52bdbc0b65-OSL
777.deeginews.com/dannig/common-player/index.html?var={your_source_subid}&ymid={your_clickid}&mrc=1&zoneid=1897439&tbz=1897441
200 OK 6.6 kB URL HTTP/2 777.deeginews.com/dannig/common-player/index.html?var={your_source_subid}&ymid={your_clickid}&mrc=1&zoneid=1897439&tbz=1897441
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1913)
Hash a2a3308172a9036912891a909172e625
166003f8a5f86ecafe12dfbf2dfdd8188bc19457
887508b4625112e0edeba18ef3da53e5bf28922ea059e100b0c22a8f328e194a
GET /dannig/common-player/index.html?var={your_source_subid}&ymid={your_clickid}&mrc=1&zoneid=1897439&tbz=1897441 HTTP/1.1
Host: 777.deeginews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news-komani.cc/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:05 GMT
content-type: text/html; charset=utf-8
content-length: 6604
server: nginx/1.16.1
last-modified: Wed, 22 Dec 2021 16:47:12 GMT
etag: a2a3308172a9036912891a909172e625
x-timestamp: 1640191631.97886
x-trans-id: tx9ebe72d2cebe4739a3248-0061c43777
x-openstack-request-id: tx9ebe72d2cebe4739a3248-0061c43777
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:05 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5238dafa70d20e22a74b1b168b4bb10b
71e4572a5414ddeb0f8b2a83a0345793f26d238f
af4bb44a706e41df3dcfc68007fbe9f96807340a8d85c3d1d47a9280db7b5612
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:31:28 GMT
Expires: Mon, 03 Oct 2022 06:31:27 GMT
Etag: "71e4572a5414ddeb0f8b2a83a0345793f26d238f"
Cache-Control: max-age=470120,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be544a91b515-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5238dafa70d20e22a74b1b168b4bb10b
71e4572a5414ddeb0f8b2a83a0345793f26d238f
af4bb44a706e41df3dcfc68007fbe9f96807340a8d85c3d1d47a9280db7b5612
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:31:28 GMT
Expires: Mon, 03 Oct 2022 06:31:27 GMT
Etag: "71e4572a5414ddeb0f8b2a83a0345793f26d238f"
Cache-Control: max-age=470120,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be544c801c06-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5238dafa70d20e22a74b1b168b4bb10b
71e4572a5414ddeb0f8b2a83a0345793f26d238f
af4bb44a706e41df3dcfc68007fbe9f96807340a8d85c3d1d47a9280db7b5612
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:31:28 GMT
Expires: Mon, 03 Oct 2022 06:31:27 GMT
Etag: "71e4572a5414ddeb0f8b2a83a0345793f26d238f"
Cache-Control: max-age=470120,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be544907b511-OSL
123.selornews.com/dannig/common-player-arrow/img/icon4.png
200 OK 7.0 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon4.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ad7f32c1c0df7b4975cc41bda4ac435
81d57e996ee6cd9e122592e68ffa3d55c1ba10ff
c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /dannig/common-player-arrow/img/icon4.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 7032
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: 7ad7f32c1c0df7b4975cc41bda4ac435
x-timestamp: 1621260766.57654
x-trans-id: tx215c904acc1b4d098b48b-0061c43773
x-openstack-request-id: tx215c904acc1b4d098b48b-0061c43773
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
123.selornews.com/dannig/common-player-arrow/img/icon5.png
200 OK 3.3 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon5.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e1a7582b5da63e10485d63f97abc9a0
ca3ee3067f96c732f455bc7c99ec5100194f13f6
196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /dannig/common-player-arrow/img/icon5.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 3264
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: 1e1a7582b5da63e10485d63f97abc9a0
x-timestamp: 1621260766.74516
x-trans-id: tx08562062e0c7405e8c2e5-0061c43776
x-openstack-request-id: tx08562062e0c7405e8c2e5-0061c43776
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
123.selornews.com/dannig/common-player-arrow/img/icon7.png
200 OK 3.3 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon7.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash b512735542cb07b3b2dcf153a7dfe456
93bde8875412ce266600e2af1c37123483a50376
e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /dannig/common-player-arrow/img/icon7.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 3283
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:48 GMT
etag: b512735542cb07b3b2dcf153a7dfe456
x-timestamp: 1621260767.43555
x-trans-id: tx935449a99ad24e399a39e-0061c43774
x-openstack-request-id: tx935449a99ad24e399a39e-0061c43774
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
123.selornews.com/dannig/common-player-arrow/img/icon8.png
200 OK 4.1 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon8.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash f92d6474ebc6a3a0b576749cfb4afe98
0f4ce3dcf04873b8098c01d20c44967fb9fce0cc
3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /dannig/common-player-arrow/img/icon8.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 4064
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:48 GMT
etag: f92d6474ebc6a3a0b576749cfb4afe98
x-timestamp: 1621260767.46514
x-trans-id: tx4e1ca880eef04158bb33c-0061c43773
x-openstack-request-id: tx4e1ca880eef04158bb33c-0061c43773
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
123.selornews.com/dannig/common-player-arrow/img/icon1.png
200 OK 7.3 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon1.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 3d0ab5834c8bf7134e4d21fa3288317f
c31d1a6b9df206f67ea194f4c424cdc372a423c2
0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /dannig/common-player-arrow/img/icon1.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 7252
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: 3d0ab5834c8bf7134e4d21fa3288317f
x-timestamp: 1621260766.56573
x-trans-id: txefc825b0ed8b472cb9d85-0061c43774
x-openstack-request-id: txefc825b0ed8b472cb9d85-0061c43774
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
123.selornews.com/dannig/common-player-arrow/img/icon2.png
200 OK 4.6 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon2.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash c947d439eb93367f1af5b2a3d222f057
5b4c10820d39e624bc6df72a113679da80a8e44e
aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /dannig/common-player-arrow/img/icon2.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 4576
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: c947d439eb93367f1af5b2a3d222f057
x-timestamp: 1621260766.58366
x-trans-id: tx066d39b603164a8d80c52-0061c43773
x-openstack-request-id: tx066d39b603164a8d80c52-0061c43773
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
123.selornews.com/dannig/common-player-arrow/img/icon3.png
200 OK 7.8 kB URL HTTP/2 123.selornews.com/dannig/common-player-arrow/img/icon3.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f3cc830da0b1fdf66bda7d1d734747b
94588f041eec3a78a8780c8124c56a1434a89277
ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /dannig/common-player-arrow/img/icon3.png HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: image/png
content-length: 7847
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:51 GMT
etag: 8f3cc830da0b1fdf66bda7d1d734747b
x-timestamp: 1621260770.61859
x-trans-id: txf1afb96819d048d789705-0061c43777
x-openstack-request-id: txf1afb96819d048d789705-0061c43777
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5238dafa70d20e22a74b1b168b4bb10b
71e4572a5414ddeb0f8b2a83a0345793f26d238f
af4bb44a706e41df3dcfc68007fbe9f96807340a8d85c3d1d47a9280db7b5612
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:31:28 GMT
Expires: Mon, 03 Oct 2022 06:31:27 GMT
Etag: "71e4572a5414ddeb0f8b2a83a0345793f26d238f"
Cache-Control: max-age=470120,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be5448110b65-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5238dafa70d20e22a74b1b168b4bb10b
71e4572a5414ddeb0f8b2a83a0345793f26d238f
af4bb44a706e41df3dcfc68007fbe9f96807340a8d85c3d1d47a9280db7b5612
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:31:28 GMT
Expires: Mon, 03 Oct 2022 06:31:27 GMT
Etag: "71e4572a5414ddeb0f8b2a83a0345793f26d238f"
Cache-Control: max-age=470120,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516be544a8bfac0-OSL
123.selornews.com/script.js?slug=common-player-arrow
200 OK 6.4 kB URL HTTP/2 123.selornews.com/script.js?slug=common-player-arrow
IP
ASN #39572 DataWeb Global Group B.V.
File type C source, ASCII text, with very long lines (349)
Hash 87ed65e4f6ca32b7320cfd6ef7134079
cd4d768c712dba07bf4d94be9ee2a77c4021ad44
808c9a6b91e4ee90a02147d0103af8148ed2dac8932ef766274b5c2b43cbe34c
GET /script.js?slug=common-player-arrow HTTP/1.1
Host: 123.selornews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://777.deeginews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 6400
server: nginx/1.16.1
last-modified: Fri, 17 Jun 2022 14:53:17 GMT
etag: 87ed65e4f6ca32b7320cfd6ef7134079
x-timestamp: 1655477596.31301
cache-control: max-age=172800
x-trans-id: tx4895d4d89d9c49979dfc5-0062ac9591
x-openstack-request-id: tx4895d4d89d9c49979dfc5-0062ac9591
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
expires: Thu, 29 Sep 2022 19:46:06 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
news-komani.cc/traffback.php?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1&land=53
200 OK 51 B URL HTTP/2 news-komani.cc/traffback.php?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1&land=53
IP
ASN #63023 AS-GLOBALTELEHOST
File type ASCII text, with no line terminators
Hash 0c265c26c95a87c905dfd76b8ede3c2d
6358322c92ba54bbd52a75a7f1e823f36ba6bd9e
da4711364064b598e09bc204c8ac3d69b8e3fc9445b130d8e79eb9855dcbf041
Analyzer Verdict Alert quad9 Sinkholed
GET /traffback.php?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1&land=53 HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:07 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
video7top.site/CGYjSWMt
302 Found 0 B IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /CGYjSWMt HTTP/1.1
Host: video7top.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news-komani.cc/
Connection: keep-alive
Cookie: _subid=376l60j7tr10c; e64fd=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE2NTVcIjoxNjY0MzA3OTYzLFwiOTQ5XCI6MTY2NDMwNzk2NCxcIjE1MzFcIjoxNjY0MzA3OTY3fSxcImNhbXBhaWduc1wiOntcIjIzMlwiOjE2NjQzMDc5NjMsXCIxNDBcIjoxNjY0MzA3OTY0fSxcInRpbWVcIjoxNjY0MzA3OTYzfSJ9.YI_aJgNlvZWINMFzfqh8dbq--e4e7tNLnl1mIuhc5yQ; _token=uuid_376l60j7tr10c_376l60j7tr10c633352ff18d389.27030883
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 27 Sep 2022 19:46:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Location: https://cuddlethehyena.com/1911642/
Pragma: no-cache
Set-Cookie: _subid=376l60j7tr10d;Expires=Friday, 28-Oct-2022 19:46:07 GMT;Max-Age=2678400;Path=/
e64fd=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE2NTVcIjoxNjY0MzA3OTYzLFwiOTQ5XCI6MTY2NDMwNzk2NCxcIjE1MzFcIjoxNjY0MzA3OTY3LFwiMTU0M1wiOjE2NjQzMDc5Njd9LFwiY2FtcGFpZ25zXCI6e1wiMjMyXCI6MTY2NDMwNzk2MyxcIjE0MFwiOjE2NjQzMDc5NjQsXCIyMTlcIjoxNjY0MzA3OTY3fSxcInRpbWVcIjoxNjY0MzA3OTYzfSJ9.jc47BFj_nBKAavBKg0GLn5RuMFR3CVI0Yf44jhduPR0;Expires=Tuesday, 25-Jun-2075 15:32:14 GMT;Max-Age=1664394367;Path=/
_token=uuid_376l60j7tr10d_376l60j7tr10d633352ff22add5.96862959;Expires=Friday, 28-Oct-2022 19:46:07 GMT;Max-Age=2678400;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
cuddlethehyena.com/?r=dir&zoneid=1911642&pb=3d8c9ef02d6cf4dc7802f50cdf5ae0ce1664315167&psp=SHM5bAEp_1O5ucwN0R-YIU8JywfdL3Xf0NzKJE8Kyrt_uzSW4DQ0EXW_JCZKTZ0x2QZxmdFD5vvY_7a9WjQfHeF-vyJmutCDEoBWH6FmnfnSUNtGJWYZvCm1mwiu7ilzrkv53FUC2Cq3DfAKYTmfKkh4I1GlaAB4CzriwezhqxZ6MOr6GBAJ5GC5yb-W4Nw-UmjTWkUHs23t5i_0GyVuxM-WGAbicDX_IGsvF7bHHu41Cuq615ElgO-ba2BqH7Htd4ME--Mb7JvYMDRgBV18aVDM27dAHuhTXbDRVq0yhsDnNOf2H7Xq_CqQg4odUPhvce9ovwjOgEGTUveiTdDxaaqeDxiGnvLmxQSWYyoHR7HoKQKuq5-qFkXcFput5ha-MZg0kM2ac-r2TMkB36F9m4zMX0EmMXxLDhzgpjQWyJqBwyghxyJS7WJnTURNR6lP2WXtqkUcZvPE5dH5mSRKT7VwzHvPZSbEorzw2Cg4HAB4j4NTlER6VVlebcJQXey9qn9J36G1gR6yI8kMcFHLyIx3uQhdGEVSXlv-8-msdlElXr4RoxtbGF8K5zNcT2AtksNTsvWI68Ulp79xmIXWhrDZKOv_tw==&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&0&pload=361&rlp=%5B0%2C3%2C53%2C28%2C0%2C233%2C141%2C66%5D
200 OK 2.3 kB URL HTTP/2 cuddlethehyena.com/?r=dir&zoneid=1911642&pb=3d8c9ef02d6cf4dc7802f50cdf5ae0ce1664315167&psp=SHM5bAEp_1O5ucwN0R-YIU8JywfdL3Xf0NzKJE8Kyrt_uzSW4DQ0EXW_JCZKTZ0x2QZxmdFD5vvY_7a9WjQfHeF-vyJmutCDEoBWH6FmnfnSUNtGJWYZvCm1mwiu7ilzrkv53FUC2Cq3DfAKYTmfKkh4I1GlaAB4CzriwezhqxZ6MOr6GBAJ5GC5yb-W4Nw-UmjTWkUHs23t5i_0GyVuxM-WGAbicDX_IGsvF7bHHu41Cuq615ElgO-ba2BqH7Htd4ME--Mb7JvYMDRgBV18aVDM27dAHuhTXbDRVq0yhsDnNOf2H7Xq_CqQg4odUPhvce9ovwjOgEGTUveiTdDxaaqeDxiGnvLmxQSWYyoHR7HoKQKuq5-qFkXcFput5ha-MZg0kM2ac-r2TMkB36F9m4zMX0EmMXxLDhzgpjQWyJqBwyghxyJS7WJnTURNR6lP2WXtqkUcZvPE5dH5mSRKT7VwzHvPZSbEorzw2Cg4HAB4j4NTlER6VVlebcJQXey9qn9J36G1gR6yI8kMcFHLyIx3uQhdGEVSXlv-8-msdlElXr4RoxtbGF8K5zNcT2AtksNTsvWI68Ulp79xmIXWhrDZKOv_tw==&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&0&pload=361&rlp=%5B0%2C3%2C53%2C28%2C0%2C233%2C141%2C66%5D
IP
Hash c00cd95c611635ef8de5d479e6161510
bd8fb1d73edf1c74c58b6f2ad2662792e6f6275f
2a968dea2d69e0f08dfab819aba2617936528fc5253e75349138bb060c44202b
Analyzer Verdict Alert quad9 Sinkholed
GET /?r=dir&zoneid=1911642&pb=3d8c9ef02d6cf4dc7802f50cdf5ae0ce1664315167&psp=SHM5bAEp_1O5ucwN0R-YIU8JywfdL3Xf0NzKJE8Kyrt_uzSW4DQ0EXW_JCZKTZ0x2QZxmdFD5vvY_7a9WjQfHeF-vyJmutCDEoBWH6FmnfnSUNtGJWYZvCm1mwiu7ilzrkv53FUC2Cq3DfAKYTmfKkh4I1GlaAB4CzriwezhqxZ6MOr6GBAJ5GC5yb-W4Nw-UmjTWkUHs23t5i_0GyVuxM-WGAbicDX_IGsvF7bHHu41Cuq615ElgO-ba2BqH7Htd4ME--Mb7JvYMDRgBV18aVDM27dAHuhTXbDRVq0yhsDnNOf2H7Xq_CqQg4odUPhvce9ovwjOgEGTUveiTdDxaaqeDxiGnvLmxQSWYyoHR7HoKQKuq5-qFkXcFput5ha-MZg0kM2ac-r2TMkB36F9m4zMX0EmMXxLDhzgpjQWyJqBwyghxyJS7WJnTURNR6lP2WXtqkUcZvPE5dH5mSRKT7VwzHvPZSbEorzw2Cg4HAB4j4NTlER6VVlebcJQXey9qn9J36G1gR6yI8kMcFHLyIx3uQhdGEVSXlv-8-msdlElXr4RoxtbGF8K5zNcT2AtksNTsvWI68Ulp79xmIXWhrDZKOv_tw==&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&0&pload=361&rlp=%5B0%2C3%2C53%2C28%2C0%2C233%2C141%2C66%5D HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=220927144655b5ebac43264dc79e1f17159e
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:07 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-route-id: redirect.dl
set-cookie: OACCAP=ABUJpQAAAAAAAAAB; Path=/; Expires=Thu, 27 Oct 2022 19:46:07 GMT; Secure; SameSite=None
OACBLOCK=ABUJpQAAAABjMywQ; Path=/; Expires=Thu, 27 Oct 2022 19:46:07 GMT; Secure; SameSite=None
OXCCLK=ABUJpQAAAAAAAAAB; Path=/; Expires=Wed, 28 Sep 2022 19:46:07 GMT; Secure; SameSite=None
OXPCLK=AAHk%2BwAAAAAAAAAB; Path=/; Expires=Wed, 28 Sep 2022 19:46:07 GMT; Secure; SameSite=None
ppucnt=1; Path=/; Expires=Wed, 28 Sep 2022 19:46:07 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
bongacams.com/track?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642
302 Found 138 B URL HTTP/2 bongacams.com/track?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642
IP
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /track?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642 HTTP/1.1
Host: bongacams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 27 Sep 2022 19:46:07 GMT
content-type: text/html
content-length: 138
location: https://trkbng.com/hit.php?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642
x-bc: ded7848
x-zone: 5a-web44
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=NXCx0mDEp3oLspJRayFKC5sxg6cG0ZZ4cuw8cH9Nshc-1664307967-0-AQCI19KnzFhmcBQOrCEN1xLbVcbM5vdTPz3H9G1Sb3wYozsqOZyDC08HHr18Sk9dvXhrEgwWz92dyQfYhSR7SMc=; path=/; expires=Tue, 27-Sep-22 20:16:07 GMT; domain=.bongacams.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7516be5dfe1cb500-OSL
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 471 B IP
Hash b94eb59cd7358ed11bdd16af2310ac66
4fd258d9a029195709a29a85c205dbb0c3c1f6df
896be85385270e4ca5a178aa381e42edad3e4a4ce1dd4d4ebc9584f64bd9f7e8
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 19:46:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 15:56:33 GMT
Expires: Sat, 01 Oct 2022 15:56:32 GMT
Etag: "4fd258d9a029195709a29a85c205dbb0c3c1f6df"
Cache-Control: max-age=604090,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 872
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7516be5ecbb9b512-OSL
ocsp.digicert.com/
200 OK 280 B IP
Hash 1087c84edf93cb39c6724b61f9e714ea
2eecb7bcb4573a9046f9be48e84b5601ee13552d
8dbe4f1c7c90ff11e903e5e30ea2efd28fbb9b63dfae2515b4c75c2a6ef336da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6449
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:07 GMT
Last-Modified: Tue, 27 Sep 2022 17:58:39 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 725f1864d9566a9b83a410a9f4cf64dd
79c4165a1229696c5492966aad2df317da7881e0
7f02b042ad820fba688ed3da1834bc7beb478752864df2c3f87dd7d2b476b0a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:32:19 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 725f1864d9566a9b83a410a9f4cf64dd
79c4165a1229696c5492966aad2df317da7881e0
7f02b042ad820fba688ed3da1834bc7beb478752864df2c3f87dd7d2b476b0a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:32:19 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 725f1864d9566a9b83a410a9f4cf64dd
79c4165a1229696c5492966aad2df317da7881e0
7f02b042ad820fba688ed3da1834bc7beb478752864df2c3f87dd7d2b476b0a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:32:19 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 725f1864d9566a9b83a410a9f4cf64dd
79c4165a1229696c5492966aad2df317da7881e0
7f02b042ad820fba688ed3da1834bc7beb478752864df2c3f87dd7d2b476b0a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4330
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:33:59 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
i.bcicdn.com/images/frontend/free_tokens/navbar_panel/1x/title/no.png
200 OK 1.1 kB URL HTTP/2 i.bcicdn.com/images/frontend/free_tokens/navbar_panel/1x/title/no.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 80 x 58, 8-bit colormap, non-interlaced\012- data
Hash 533fabde7633feb1fc89ec1cf97ade51
39d3d45d62a36919f5f80577b555528007b216a7
4258268716f85951c4208f0313082cb4e2f95c4d27608faae7be36647a36ad65
GET /images/frontend/free_tokens/navbar_panel/1x/title/no.png HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/png
content-length: 1121
last-modified: Wed, 19 May 2021 10:11:37 GMT
etag: "60a4e459-461"
expires: Wed, 19 Oct 2022 13:47:20 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: EXPIRED
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712716
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6908c50b3d-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-10874655-24
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-10874655-24
IP
File type ASCII text, with very long lines (2039)
Hash 575313c2de84630186170920067d8d89
2b8fa2cb81733d14f451338f25ed342d4f6f94a8
64ddc596e73564538e9294a60d854b6ef9ec7ae90ca7eb79a4c25f8ecca5faf4
GET /gtag/js?id=UA-10874655-24 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 19:46:09 GMT
expires: Tue, 27 Sep 2022 19:46:09 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.bcicdn.com/097/3e5/13a/5e69f7bd4e2005ca9d6b35b20170e0c6_thumb_medium.jpg
200 OK 8.0 kB URL HTTP/2 i.bcicdn.com/097/3e5/13a/5e69f7bd4e2005ca9d6b35b20170e0c6_thumb_medium.jpg
IP
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 232x174, components 3\012- data
Hash c02d97c262b3ad440bba50aa253fe21e
68cf9f376e2e583c1df6dff4c7395702b1cf352f
8e9a703fead2bb564c5faa85ae4eab54bdf106040e6c86243d51481b4f0c4d60
GET /097/3e5/13a/5e69f7bd4e2005ca9d6b35b20170e0c6_thumb_medium.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/jpeg
content-length: 8036
access-control-allow-origin: *
cache-control: max-age=2592000
cf-bgj: h2pri
etag: "633077ee-1f64"
expires: Tue, 25 Oct 2022 16:47:48 GMT
last-modified: Sun, 25 Sep 2022 15:46:54 GMT
x-o1-p6: HIT
x-bc-o: 2
cf-cache-status: HIT
age: 168161
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6908c00b3d-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 764772b85c8d96f4901e47b189b9b631
5362e4132b3680763fede697850450b4156c2a27
063073a8f6c402ebfd9d4fa9d3e2fc7426d6c2138c6d0124e2e8e49e808dd323
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4323
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:34:06 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 764772b85c8d96f4901e47b189b9b631
5362e4132b3680763fede697850450b4156c2a27
063073a8f6c402ebfd9d4fa9d3e2fc7426d6c2138c6d0124e2e8e49e808dd323
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:30:41 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 764772b85c8d96f4901e47b189b9b631
5362e4132b3680763fede697850450b4156c2a27
063073a8f6c402ebfd9d4fa9d3e2fc7426d6c2138c6d0124e2e8e49e808dd323
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4323
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:34:06 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 764772b85c8d96f4901e47b189b9b631
5362e4132b3680763fede697850450b4156c2a27
063073a8f6c402ebfd9d4fa9d3e2fc7426d6c2138c6d0124e2e8e49e808dd323
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4596
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:29:33 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 764772b85c8d96f4901e47b189b9b631
5362e4132b3680763fede697850450b4156c2a27
063073a8f6c402ebfd9d4fa9d3e2fc7426d6c2138c6d0124e2e8e49e808dd323
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:30:41 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278
i.bimbolive.com/live/038/21b/1f6/xbig_lq/86b969.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/038/21b/1f6/xbig_lq/86b969.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 487578ac9336886dcd9c38d722cef2c2
978cb9a78fdf941b3144952d611825282533f1a1
56b70de6fc7d13558e9c05364379da3900dd69c4350d3c615acf85ec85cc86ca
GET /live/038/21b/1f6/xbig_lq/86b969.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 12730
last-modified: Tue, 27 Sep 2022 19:42:52 GMT
etag: "6333523c-31ba"
expires: Tue, 04 Oct 2022 19:42:53 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 191
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bbb1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/31e/12f/xbig_lq/a04f0a.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/09c/31e/12f/xbig_lq/a04f0a.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a87ae0226b2bf9f06b3b5f2a303ec57e
b0757137d61be05d0a344c6fb0c3bd203ca4fd59
d38ececbaad9806f641e980918074b4edb9477797895804d70e8dd61e41a9f5e
GET /live/09c/31e/12f/xbig_lq/a04f0a.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13356
last-modified: Tue, 27 Sep 2022 19:41:33 GMT
etag: "633351ed-342c"
expires: Tue, 04 Oct 2022 19:41:34 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 274
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bbc1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/041/2eb/064/xbig_lq/a07ef4.webp
200 OK 19 kB URL HTTP/2 i.bimbolive.com/live/041/2eb/064/xbig_lq/a07ef4.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cec9a4dd67c0c7e5050f4d6cc491ac40
40a34e1c1dcb9ef7e5bb4b2c0e5fbe5ad5bfca81
18b1ea49bf1b7a729b01f0c73b93f4925ab28842c574f2d1be048b1da7d0017b
GET /live/041/2eb/064/xbig_lq/a07ef4.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 19204
last-modified: Tue, 27 Sep 2022 19:41:02 GMT
etag: "633351ce-4b04"
expires: Tue, 04 Oct 2022 19:41:03 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 305
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bbe1c12-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 199 kB IP
Size 199 kB (199431 bytes)
Hash 91276a8c2fb9283af4ebdf9764f76cee
ec4db103484e2013b2f01a3e3c010bdd83476772
237398bb3919be01a9299d37ffbda0b9ff2be063cbd2c87e9ed14994398d4688
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.bimbolive.com/live/09c/1f3/2e7/xbig_lq/4a3948.webp
200 OK 6.2 kB URL HTTP/2 i.bimbolive.com/live/09c/1f3/2e7/xbig_lq/4a3948.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5c5a22fcee82ba398b5e0542fadafec7
d4889f9325a202dc99b43e96d1a3119cd004a364
eda3b4801570d14ed3d363049ed8bd07685ff9af49c9047435e837bb51dc6f5a
GET /live/09c/1f3/2e7/xbig_lq/4a3948.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 6176
last-modified: Tue, 27 Sep 2022 19:45:11 GMT
etag: "633352c7-1820"
expires: Tue, 04 Oct 2022 19:45:11 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 57
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc11c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/017/2f1/275/xbig_lq/5a3a16.webp
200 OK 7.8 kB URL HTTP/2 i.bimbolive.com/live/017/2f1/275/xbig_lq/5a3a16.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f39f7cd0302da8488472c752cf5af2d3
66a0a1fceb5a032c2103664010a0e695f9ad23c7
92508dec8f31806f7d94d357106a85b1b8ff0db6bfb329f0b53b266314ea8d28
GET /live/017/2f1/275/xbig_lq/5a3a16.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 7820
last-modified: Tue, 27 Sep 2022 19:43:49 GMT
etag: "63335275-1e8c"
expires: Tue, 04 Oct 2022 19:43:50 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 137
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc41c12-OSL
X-Firefox-Spdy: h2
news-komani.cc/53/images/video.gif
200 OK 16 kB URL HTTP/2 news-komani.cc/53/images/video.gif
IP
ASN #63023 AS-GLOBALTELEHOST
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bb2a39daabc470af179ad191bdb70d2d
68ce8571cafe4d93d62d912b54bb0b0f07a45a6f
1c6db62c52f75a4f52e91f022ea514d81e81194e89398d95f8c24ae1d2874907
Analyzer Verdict Alert quad9 Sinkholed
GET /53/images/video.gif HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
Cookie: uuid=04cebadb-cd5e-489f-ad02-36f3d4e30c90; fcm_account_id=62; clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:04 GMT
content-type: image/gif
content-length: 500082
last-modified: Fri, 20 Aug 2021 13:24:46 GMT
etag: "611fad1e-7a172"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
i.bimbolive.com/live/04e/229/3bf/xbig_lq/bd1d19.webp
200 OK 10 kB URL HTTP/2 i.bimbolive.com/live/04e/229/3bf/xbig_lq/bd1d19.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 74be6143fe718ef706c972f28bbddbbf
c49af3ababa89e8022aa212d5f28407d1dd3f401
0b815ed4de84df21b178b4db7a95efd27f0c96ca38519a51d2a1bc7e11349a71
GET /live/04e/229/3bf/xbig_lq/bd1d19.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 10344
last-modified: Tue, 27 Sep 2022 19:43:15 GMT
etag: "63335253-2868"
expires: Tue, 04 Oct 2022 19:43:18 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 168
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697b9d1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/068/28d/272/xbig_lq/5a3a16.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/068/28d/272/xbig_lq/5a3a16.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2deb9094d961e8f9c2a55b6758e47c55
9196184542792514ef301afccd752986c25ef044
7c1aa6f41202f07aba693e712cf4ef91037c6e91eae84c1aacb17003def97430
GET /live/068/28d/272/xbig_lq/5a3a16.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 12644
last-modified: Tue, 27 Sep 2022 19:43:42 GMT
etag: "6333526e-3164"
expires: Tue, 04 Oct 2022 19:43:48 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 141
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697b9e1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/005/3d7/108/xbig_lq/324241.webp
200 OK 9.1 kB URL HTTP/2 i.bimbolive.com/live/005/3d7/108/xbig_lq/324241.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 821cdcc8f0a36e297692ca51205c2117
ab5693d0a245c1dc43e59af2ade7c79f6eca78f6
028f01e0470644eac834963e4e233a9e0239098a90388dc53842bc9caed01e59
GET /live/005/3d7/108/xbig_lq/324241.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 9094
last-modified: Tue, 27 Sep 2022 19:44:40 GMT
etag: "633352a8-2386"
expires: Tue, 04 Oct 2022 19:44:41 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 87
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bb21c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/060/011/1c4/xbig_lq/77ccf6.webp
200 OK 11 kB URL HTTP/2 i.bimbolive.com/live/060/011/1c4/xbig_lq/77ccf6.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 779e8d9d8efd0b883bfdd843e0890490
33b8af99a9e0c53767b48c9f30f8d77a2108ee5a
d03bd34bfb5f6602a9e3504916a41cf1f6000ab30bfbd481083216110b95f03d
GET /live/060/011/1c4/xbig_lq/77ccf6.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11264
last-modified: Tue, 27 Sep 2022 19:45:33 GMT
etag: "633352dd-2c00"
expires: Tue, 04 Oct 2022 19:45:34 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 33
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba21c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/03c/1a6/00c/xbig_lq/f74b2f.webp
200 OK 6.0 kB URL HTTP/2 i.bimbolive.com/live/03c/1a6/00c/xbig_lq/f74b2f.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 63f9f7e2278927c0f9b9d9a7b9933284
e43b098e8fafea815e0f6561b30e14d37123f759
1c43b3266bbde53da6b08b628a8c4d754a96485630424e50ee202e866ae11225
GET /live/03c/1a6/00c/xbig_lq/f74b2f.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 5960
last-modified: Tue, 27 Sep 2022 19:41:42 GMT
etag: "633351f6-1748"
expires: Tue, 04 Oct 2022 19:41:43 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 265
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bb41c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/046/1fb/014/xbig_lq/2f287e.webp
200 OK 4.6 kB URL HTTP/2 i.bimbolive.com/live/046/1fb/014/xbig_lq/2f287e.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1f212ebbf84436c6eabc23f40d02881f
2d78433b274842d57e31c1f0a4a1eb7aae5f2b99
63e1c5aba09dd5d6d963752ab9f047b7a6473110815e329bb21e2a80487886bf
GET /live/046/1fb/014/xbig_lq/2f287e.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 4568
last-modified: Tue, 27 Sep 2022 19:43:04 GMT
etag: "63335248-11d8"
expires: Tue, 04 Oct 2022 19:43:05 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 181
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bb81c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/05f/3af/37a/xbig_lq/0161e7.webp
200 OK 14 kB URL HTTP/2 i.bimbolive.com/live/05f/3af/37a/xbig_lq/0161e7.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ca254c9438ae6df88d0fb0d4cf39befd
bd3323075dee36dfb83aa3151ea1c6cc83a56f00
a8d9f84612db56fe8884906afdbb67fb04a923e274a34ffe6de8728f5e68b664
GET /live/05f/3af/37a/xbig_lq/0161e7.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13750
last-modified: Tue, 27 Sep 2022 19:45:41 GMT
etag: "633352e5-35b6"
expires: Tue, 04 Oct 2022 19:45:42 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 24
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697b9a1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/079/096/0ef/xbig_lq/da528f.webp
200 OK 16 kB URL HTTP/2 i.bimbolive.com/live/079/096/0ef/xbig_lq/da528f.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e109d8971dc9d593ba9484099739774d
d85698b2bd5e511d6e483d44b8475551009d54a7
1f7d1dbf31c37802a792cd21abe9a3a38510eb22d35dc009cc43c51a26558f7a
GET /live/079/096/0ef/xbig_lq/da528f.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 16142
last-modified: Tue, 27 Sep 2022 19:38:35 GMT
etag: "6333513b-3f0e"
expires: Tue, 04 Oct 2022 19:38:37 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 452
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba01c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/067/375/265/xbig_lq/e7027c.webp
200 OK 12 kB URL HTTP/2 i.bimbolive.com/live/067/375/265/xbig_lq/e7027c.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c640fc6cc67c9c376159d1cb441ecf70
5a9ecd6b51bcafa6922b60ea8a61ca8b6639d28d
556379eb41d60af8d241e5b4f7601127cca1bed72f3990f7e440a2a5bf830bbc
GET /live/067/375/265/xbig_lq/e7027c.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11794
last-modified: Tue, 27 Sep 2022 19:40:47 GMT
etag: "633351bf-2e12"
expires: Tue, 04 Oct 2022 19:40:48 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: HIT
cf-cache-status: HIT
age: 315
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba11c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/31d/270/xbig_lq/7386b6.webp
200 OK 14 kB URL HTTP/2 i.bimbolive.com/live/09c/31d/270/xbig_lq/7386b6.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f5e56cb5006ba4bd22d624cf2c2077be
1faecb1c8c670b53ff522b2b9ae663d5c798081b
f3385a048ce81d0e01c71474f7e6f1afaa96ccb390819002901caf6cafb0875d
GET /live/09c/31d/270/xbig_lq/7386b6.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 14072
last-modified: Tue, 27 Sep 2022 19:45:47 GMT
etag: "633352eb-36f8"
expires: Tue, 04 Oct 2022 19:45:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 21
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba71c12-OSL
X-Firefox-Spdy: h2
trkbng.com/hit.php?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642
302 Found 78 kB URL HTTP/2 trkbng.com/hit.php?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642
IP
ASN #48684 Viking Host B.V.
Hash 4ea810f0dec53b96e6674e9b1cebe1dc
a4e48df4402412e067f7aa717361fc191c29c5d0
cb0268af55cafc84fc56e431a559c1a2fb549d7468faf79a1500eccf9cfa8f3b
GET /hit.php?c=671920&subid=2209271446f473e7c601144e259c75c83f16&subid2=1911642 HTTP/1.1
Host: trkbng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 27 Sep 2022 19:46:07 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bongacams.net
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bongacams10.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com
BCH_H=1a3bea88d0e062e9ccb4a096a69a71bb%7C2022-09-27; expires=Wed, 14-Sep-2072 19:46:07 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com
location: https://bongacams.net?bcs=YmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~
expires: Tue, 27 Sep 2022 19:46:06 GMT
x-bcs: ded7384
strict-transport-security: max-age=0;
cache-control: no-cache, public
X-Firefox-Spdy: h2
i.bimbolive.com/live/099/3a7/266/xbig_lq/3ddd81.webp
200 OK 22 kB URL HTTP/2 i.bimbolive.com/live/099/3a7/266/xbig_lq/3ddd81.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bb71280d0a22d9d039f232eda7148486
1b486a47667e1cea6c9db828855ad80f54f8c47b
87e358c45b9462580c24f32833ac8222cddaa2e2155cadc7768c989e6ca778ec
GET /live/099/3a7/266/xbig_lq/3ddd81.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 22330
last-modified: Tue, 27 Sep 2022 19:41:28 GMT
etag: "633351e8-573a"
expires: Tue, 04 Oct 2022 19:41:28 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 277
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba51c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/069/2f7/013/xbig_lq/8896c7.webp
200 OK 23 kB URL HTTP/2 i.bimbolive.com/live/069/2f7/013/xbig_lq/8896c7.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 20394f1e26bb32e5ab7282805954d704
cee7ee1dd1d16fa261f5fc3ffdc3235af2bda771
193cbe558009fe3491ac078937d87cb47897b6085d75cd7b0401b3fcc695d960
GET /live/069/2f7/013/xbig_lq/8896c7.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 22688
last-modified: Tue, 27 Sep 2022 19:45:27 GMT
etag: "633352d7-58a0"
expires: Tue, 04 Oct 2022 19:45:33 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 35
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba81c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/06d/117/08f/xbig_lq/238654.webp
200 OK 11 kB URL HTTP/2 i.bimbolive.com/live/06d/117/08f/xbig_lq/238654.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 662ea831b9a745cdf48701aedfc72462
d0241f40fb3571baf333a0e9d0be219c106b2b02
99aed46417fdd826b8198e6507b52e742f73cfbf56bc9934b719ff3545cdb24d
GET /live/06d/117/08f/xbig_lq/238654.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 10584
last-modified: Tue, 27 Sep 2022 19:42:15 GMT
etag: "63335217-2958"
expires: Tue, 04 Oct 2022 19:42:15 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 232
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697ba91c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/019/329/317/xbig_lq/f74b2f.webp
200 OK 12 kB URL HTTP/2 i.bimbolive.com/live/019/329/317/xbig_lq/f74b2f.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e3e718bd1cbeae59883842825a4bf3ab
c7f07b6a4ac7f91bd29b601e0cdc69cd5f29f0af
80672c97a460610a83b8c6bb96771e9965c24abc41e0fcbd0524d3c563dffd2b
GET /live/019/329/317/xbig_lq/f74b2f.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11990
last-modified: Tue, 27 Sep 2022 19:41:46 GMT
etag: "633351fa-2ed6"
expires: Tue, 04 Oct 2022 19:41:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 262
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bac1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/056/0b1/230/xbig_lq/6ed5dd.webp
200 OK 12 kB URL HTTP/2 i.bimbolive.com/live/056/0b1/230/xbig_lq/6ed5dd.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 993931062600b3ff4689c87e3dd8c52f
af3a8afdf8a26c32ee8e0c9114f43e818f3d37af
11b1b4409555129f05df2fab95298aab717664db147a436c03fae35ba3f89942
GET /live/056/0b1/230/xbig_lq/6ed5dd.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11722
last-modified: Tue, 27 Sep 2022 19:41:24 GMT
etag: "633351e4-2dca"
expires: Tue, 04 Oct 2022 19:41:25 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 282
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bae1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/093/3c7/2de/xbig_lq/6ac46b.webp
200 OK 11 kB URL HTTP/2 i.bimbolive.com/live/093/3c7/2de/xbig_lq/6ac46b.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4757afe91cc3df5e2392aa896f174b5a
c17011218fc8bcb518377e3be6532cb3299f3138
069abe039a5a50826707a5030aae8349a529f9f353571846a5cd44e692d10b43
GET /live/093/3c7/2de/xbig_lq/6ac46b.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11130
last-modified: Tue, 27 Sep 2022 19:44:44 GMT
etag: "633352ac-2b7a"
expires: Tue, 04 Oct 2022 19:44:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 81
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bb31c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/076/079/1de/xbig_lq/cdd0ec.webp
200 OK 7.4 kB URL HTTP/2 i.bimbolive.com/live/076/079/1de/xbig_lq/cdd0ec.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 19cbdeb368e03edf44898f4ff99583d7
66f98b52959fc7c1fe1ac88cc63e7a3c4a419ec5
06e233f2dd08d31e178735322685c1d742954c88b5caba1bb1580de6312fcb57
GET /live/076/079/1de/xbig_lq/cdd0ec.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 7388
last-modified: Tue, 27 Sep 2022 19:42:33 GMT
etag: "63335229-1cdc"
expires: Tue, 04 Oct 2022 19:42:33 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 214
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bb91c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/090/343/2ad/xbig_lq/542ca7.webp
200 OK 9.3 kB URL HTTP/2 i.bimbolive.com/live/090/343/2ad/xbig_lq/542ca7.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 132421c5401babd63e6de90a9e3101d8
3986c34b4d35b31f80110490eaaaf1a5628d94ed
4f085f84d20a5544bca7314ca906ae4c6f180b1ad9b12d7a03acb30c298662cb
GET /live/090/343/2ad/xbig_lq/542ca7.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 9274
last-modified: Tue, 27 Sep 2022 19:44:00 GMT
etag: "63335280-243a"
expires: Tue, 04 Oct 2022 19:44:01 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 128
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc31c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/056/27e/325/xbig_lq/b20e6a.webp
200 OK 11 kB URL HTTP/2 i.bimbolive.com/live/056/27e/325/xbig_lq/b20e6a.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 73fb6b108eb7c7388924b197b8a813ec
59be7e57ada70d82ffbfcd398d6717fec3f152ea
70fd8df0c5f934008f4d8ee912355914961682da241c5437672de2afa6a17e96
GET /live/056/27e/325/xbig_lq/b20e6a.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11246
last-modified: Tue, 27 Sep 2022 18:52:17 GMT
etag: "63334661-2bee"
expires: Tue, 04 Oct 2022 18:52:29 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 3218
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc51c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/058/176/251/xbig_lq/608397.webp
200 OK 8.7 kB URL HTTP/2 i.bimbolive.com/live/058/176/251/xbig_lq/608397.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a12bcf507bb84d724c8ed8d676aa816c
e1c263f96f5b38134fa9422f7d4dac7fe4c24f9d
e370b1827c95e23786b984c126bfdcf8528dee0a0db30ac89bb4dc94798b7a20
GET /live/058/176/251/xbig_lq/608397.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 8660
last-modified: Tue, 27 Sep 2022 19:44:35 GMT
etag: "633352a3-21d4"
expires: Tue, 04 Oct 2022 19:44:35 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 93
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc61c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/096/296/14c/xbig_lq/8e546a.webp
200 OK 18 kB URL HTTP/2 i.bimbolive.com/live/096/296/14c/xbig_lq/8e546a.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e15246a81bf335745daed663af6dce9d
e773832c7464c21f8a691535a836af7cbe89f91b
e12acec74e53ed819360bdb0bd3673aa484c3237dd6d6abbd14761fa5f222d0a
GET /live/096/296/14c/xbig_lq/8e546a.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 17820
last-modified: Tue, 27 Sep 2022 19:42:47 GMT
etag: "63335237-459c"
expires: Tue, 04 Oct 2022 19:42:55 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 191
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bab1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09d/143/266/xbig_lq/eff963.webp
200 OK 19 kB URL HTTP/2 i.bimbolive.com/live/09d/143/266/xbig_lq/eff963.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 034940e34705077653910f9dcf7f21f5
be9346ef4b4cdb056a3fd2661f64317a30291583
205de0a15ad063e24453822fd48250f001a4a0d62a5c97e057b04327c436dc7f
GET /live/09d/143/266/xbig_lq/eff963.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 19308
last-modified: Tue, 27 Sep 2022 19:44:54 GMT
etag: "633352b6-4b6c"
expires: Tue, 04 Oct 2022 19:44:55 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 70
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697baf1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09b/013/06d/xbig_lq/7bd93e.webp
200 OK 17 kB URL HTTP/2 i.bimbolive.com/live/09b/013/06d/xbig_lq/7bd93e.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3d7ace80fe717005a60a72e29e997b50
4e1e60b975906dea3c88238f459e13c16e3a3094
b0714885dfbc11028f514bae6cd5722de8db626c5cfe56ccf6c62f5b4b9aa253
GET /live/09b/013/06d/xbig_lq/7bd93e.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 16674
last-modified: Tue, 27 Sep 2022 19:44:07 GMT
etag: "63335287-4122"
expires: Tue, 04 Oct 2022 19:44:08 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 116
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc21c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/053/121/34c/xbig_lq/22c551.webp
200 OK 17 kB URL HTTP/2 i.bimbolive.com/live/053/121/34c/xbig_lq/22c551.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76aee28816c5d55261bac06954b60609
67f71d80284280a831bf77ddc02ab1af585662ee
4e5b24e2f2a7028145fd32b02345552e1bcac5cdb0695e4d037e4c793de16e2a
GET /live/053/121/34c/xbig_lq/22c551.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 17424
last-modified: Tue, 27 Sep 2022 19:44:12 GMT
etag: "6333528c-4410"
expires: Tue, 04 Oct 2022 19:44:13 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: HIT
cf-cache-status: HIT
age: 116
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bc81c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09d/10b/2af/xbig_lq/8e546a.webp
200 OK 6.5 kB URL HTTP/2 i.bimbolive.com/live/09d/10b/2af/xbig_lq/8e546a.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ec05034ed1e237ea3e9cd2bc95d09641
d1c0cb85e6e467d052f3c3134d1afbd1226672b0
c2baa9fab2586605f168941d1bb725b3985f33188e33d5160f55c29561013b25
GET /live/09d/10b/2af/xbig_lq/8e546a.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 6506
last-modified: Tue, 27 Sep 2022 19:42:48 GMT
etag: "63335238-196a"
expires: Tue, 04 Oct 2022 19:42:53 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 193
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bd31c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/042/2dd/164/xbig_lq/665830.webp
200 OK 26 kB URL HTTP/2 i.bimbolive.com/live/042/2dd/164/xbig_lq/665830.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 97dfce0ffb3ba7895155e85760d92e59
bb1d2ec1d0384514ff16345b975609d62a337770
380b641c71241594c36bbd64bf9e361e5ff9983f4957a4250d78d284c165e46d
GET /live/042/2dd/164/xbig_lq/665830.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 26000
last-modified: Tue, 27 Sep 2022 19:45:36 GMT
etag: "633352e0-6590"
expires: Tue, 04 Oct 2022 19:45:37 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 31
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bbf1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/04f/349/0cf/xbig_lq/73fcc0.webp
200 OK 9.8 kB URL HTTP/2 i.bimbolive.com/live/04f/349/0cf/xbig_lq/73fcc0.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b8ab611ea172926fa5bfa319b9cfa6fb
96a880e4520eeff458ffc36e049b46c149bc24f7
94fba44cd8a731d16d37f82b669653a65ac4f6cd7fe43f5ae79a5e2c6c1f53b2
GET /live/04f/349/0cf/xbig_lq/73fcc0.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 9810
last-modified: Tue, 27 Sep 2022 19:44:12 GMT
etag: "6333528c-2652"
expires: Tue, 04 Oct 2022 19:44:13 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 116
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bca1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/062/03f/3cb/xbig_lq/bb2480.webp
200 OK 8.6 kB URL HTTP/2 i.bimbolive.com/live/062/03f/3cb/xbig_lq/bb2480.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 846806baadcbbbcda4fb5ab2b75c72df
bef58b217d811206a226e7272c80a4761307c0d5
b6ae0cb1a99116d3b46c75c6e4d1a085473f4745bb1a648776c2ad1b2c1a4a75
GET /live/062/03f/3cb/xbig_lq/bb2480.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 8616
last-modified: Tue, 27 Sep 2022 19:43:14 GMT
etag: "63335252-21a8"
expires: Tue, 04 Oct 2022 19:43:16 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 171
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bcc1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/012/212/xbig_lq/c261e4.webp
200 OK 14 kB URL HTTP/2 i.bimbolive.com/live/09c/012/212/xbig_lq/c261e4.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cccfea298fadec2e8c5305d3b82d9e4b
e7a16cac01303ff75a68cd0fba598c8387e2b632
5da413ddd43605d0139790cbbb780a3af18386feb997c914af81cd3106bb8dda
GET /live/09c/012/212/xbig_lq/c261e4.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 14156
last-modified: Tue, 27 Sep 2022 19:43:39 GMT
etag: "6333526b-374c"
expires: Tue, 04 Oct 2022 19:43:40 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 149
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bd11c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/010/2f6/xbig_lq/bff124.webp
200 OK 17 kB URL HTTP/2 i.bimbolive.com/live/09c/010/2f6/xbig_lq/bff124.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c38949543b2f8da0e26a4c82906a6138
fb17f73fe345ae159d54ed4148d588cc0188e4b5
d3f57c1ae0ca61d33182f879df6caf8d685f99fe5a14cf28be80ae1572653766
GET /live/09c/010/2f6/xbig_lq/bff124.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 16728
last-modified: Tue, 27 Sep 2022 19:44:53 GMT
etag: "633352b5-4158"
expires: Tue, 04 Oct 2022 19:44:54 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 70
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bce1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09d/1b1/2a4/xbig_lq/9ac126.webp
200 OK 9.3 kB URL HTTP/2 i.bimbolive.com/live/09d/1b1/2a4/xbig_lq/9ac126.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e0336e645b8cb78ac77b8acebbe305a1
32ea159960573f24634bdaa42cf76b7f3e259465
932ff2200410e34a285f7b9596fdae4c4892ae6ca95b08a35ccebeae32e5cace
GET /live/09d/1b1/2a4/xbig_lq/9ac126.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 9332
last-modified: Tue, 27 Sep 2022 19:44:27 GMT
etag: "6333529b-2474"
expires: Tue, 04 Oct 2022 19:44:28 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 101
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bd71c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09d/0e0/332/xbig_lq/d1aff8.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/09d/0e0/332/xbig_lq/d1aff8.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3e6d2adb6971c1df519b6ff329ce580
b9cb563f87d654df749d388c657c4854aac8d00f
3ae395db9f628928d583cb3ab9f30f52c00e9bc5b327cf1ce7331f701c1275e2
GET /live/09d/0e0/332/xbig_lq/d1aff8.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13204
last-modified: Tue, 27 Sep 2022 19:41:43 GMT
etag: "633351f7-3394"
expires: Tue, 04 Oct 2022 19:41:44 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 263
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bd91c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/062/235/289/xbig_lq/f99487.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/062/235/289/xbig_lq/f99487.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 655cd79f829d7aa6a40c13b185545b9b
efd75c9cb9e5663a820c0e5edc63cb07a1508053
76fef4c1d37d147eb10a94d3e5d6f3dd21595588cd42203431b89a750d7832d0
GET /live/062/235/289/xbig_lq/f99487.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13440
last-modified: Tue, 27 Sep 2022 19:42:08 GMT
etag: "63335210-3480"
expires: Tue, 04 Oct 2022 19:42:09 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 237
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bdc1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/091/259/3d8/xbig_lq/545868.webp
200 OK 11 kB URL HTTP/2 i.bimbolive.com/live/091/259/3d8/xbig_lq/545868.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 520d592012a4f34549abd3277e5f8343
0c593233fc705dc99c166e6a1c3022bbc02ba29c
8413cdfd14e592d45dc682120f58c16fe3917064d2b25a724ead1930bb717454
GET /live/091/259/3d8/xbig_lq/545868.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 10894
last-modified: Tue, 27 Sep 2022 19:42:20 GMT
etag: "6333521c-2a8e"
expires: Tue, 04 Oct 2022 19:42:21 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 228
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bde1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/096/144/1f9/xbig_lq/c5e8d9.webp
200 OK 12 kB URL HTTP/2 i.bimbolive.com/live/096/144/1f9/xbig_lq/c5e8d9.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3b2c244fbf8fff3191aaf224a2f592fb
c12ce7c13756bb84179307521200848da50cb0e7
f29df3c62da37973735c755af06648ce1a1d0fc225bd29fb16d7d9c585a1cb43
GET /live/096/144/1f9/xbig_lq/c5e8d9.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 12344
last-modified: Tue, 27 Sep 2022 19:43:51 GMT
etag: "63335277-3038"
expires: Tue, 04 Oct 2022 19:43:52 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 137
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be01c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/057/351/010/xbig_lq/cfea34.webp
200 OK 15 kB URL HTTP/2 i.bimbolive.com/live/057/351/010/xbig_lq/cfea34.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c1f508582cd0ed28148d8f83c07288fc
b58264c411d454c0446bfbf5ccfcab16c0ac5265
fd224ac4619bde4f8e65bb216be03d3da464fda9f2697baf3a1d75ad4a87dc7f
GET /live/057/351/010/xbig_lq/cfea34.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 14746
last-modified: Tue, 27 Sep 2022 19:45:07 GMT
etag: "633352c3-399a"
expires: Tue, 04 Oct 2022 19:45:09 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 57
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be31c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/0a5/06b/xbig_lq/83933d.webp
200 OK 11 kB URL HTTP/2 i.bimbolive.com/live/09c/0a5/06b/xbig_lq/83933d.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 95206f8173e42cfb61ac197181f989cc
b89c66b477595f676e36e933711247090ecd2000
690d7bb74cb7c7a1fafaf21bcde401e130e00a9de5bbaa2ed0fab1bff61303f1
GET /live/09c/0a5/06b/xbig_lq/83933d.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 10618
last-modified: Tue, 27 Sep 2022 19:46:00 GMT
etag: "633352f8-297a"
expires: Tue, 04 Oct 2022 19:46:05 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 4
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be41c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/098/2ea/31b/xbig_lq/1be642.webp
200 OK 12 kB URL HTTP/2 i.bimbolive.com/live/098/2ea/31b/xbig_lq/1be642.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 37a60d9fc69e06eec9706d9a1ae80c64
8ed595f7957f697ddd823923fe99c255832dc7f7
be3cb699eccd4b00e84dac668b0387140667d521371ce07bf952571f90b9682a
GET /live/098/2ea/31b/xbig_lq/1be642.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 11792
last-modified: Tue, 27 Sep 2022 19:43:13 GMT
etag: "63335251-2e10"
expires: Tue, 04 Oct 2022 19:43:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 175
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be51c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/098/32a/290/xbig_lq/19a4a2.webp
200 OK 8.6 kB URL HTTP/2 i.bimbolive.com/live/098/32a/290/xbig_lq/19a4a2.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0be358e1a6247f71d5d536dee99986d2
31f6e469f813a329bb0dbce77c1eb2707bef6a27
7093bde7e7671db6e633a1545f9c335612542995dab987af9244b643c553d79a
GET /live/098/32a/290/xbig_lq/19a4a2.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 8608
last-modified: Tue, 27 Sep 2022 19:45:02 GMT
etag: "633352be-21a0"
expires: Tue, 04 Oct 2022 19:45:03 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 57
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be61c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/063/1b1/22b/xbig_lq/542ca7.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/063/1b1/22b/xbig_lq/542ca7.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 08fc54aff155de46483c8148566edb1d
77cc242f178897c0d4760cb03185b0ec29187b3b
9da38bb9c8fff78ddb94a5ff370ab4d3f49b4616b5e444b63f64e7169074f760
GET /live/063/1b1/22b/xbig_lq/542ca7.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13226
last-modified: Tue, 27 Sep 2022 19:44:00 GMT
etag: "63335280-33aa"
expires: Tue, 04 Oct 2022 19:44:01 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 128
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bec1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/34e/117/xbig_lq/e77807.webp
200 OK 25 kB URL HTTP/2 i.bimbolive.com/live/09c/34e/117/xbig_lq/e77807.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 73a99ffbc43aab2dcf0ba5403aff0235
fd32435ea61f21d4a8dff9dc6ec2229ada14e10e
fe042366e424abf453f2e6243d3fdfe5ac6916cd69e37f2d4249a36b48d197ca
GET /live/09c/34e/117/xbig_lq/e77807.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 25144
last-modified: Tue, 27 Sep 2022 19:41:14 GMT
etag: "633351da-6238"
expires: Tue, 04 Oct 2022 19:41:15 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 292
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bdb1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/097/336/142/xbig_lq/6415ec.webp
200 OK 18 kB URL HTTP/2 i.bimbolive.com/live/097/336/142/xbig_lq/6415ec.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1e25a716536bda18b315d513ed2f7af1
2d763f2558452aed5654787f1d77ff3e10b89c1c
fb8a20ef81958e1fe2a257880ac98456b512f96c31573d37431f0bab7abb9675
GET /live/097/336/142/xbig_lq/6415ec.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 17792
last-modified: Tue, 27 Sep 2022 19:43:33 GMT
etag: "63335265-4580"
expires: Tue, 04 Oct 2022 19:43:34 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 155
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be21c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/001/0c3/354/xbig_lq/19addc.webp
200 OK 18 kB URL HTTP/2 i.bimbolive.com/live/001/0c3/354/xbig_lq/19addc.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 96ed9c9556832d6425b29ca37c8e41f1
06c45653a379ff0f4dac90f2dad904dd1d2ea2a0
f429566d28e66c4bf9975445187b4439bb125e99c8666f356184a4f250dda2e7
GET /live/001/0c3/354/xbig_lq/19addc.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 17996
last-modified: Tue, 27 Sep 2022 19:44:34 GMT
etag: "633352a2-464c"
expires: Tue, 04 Oct 2022 19:44:35 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 94
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be71c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/090/374/272/xbig_lq/3e3aaf.webp
200 OK 19 kB URL HTTP/2 i.bimbolive.com/live/090/374/272/xbig_lq/3e3aaf.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d2738a0642752d45be4e9bbe2c01ecba
0455010fa0dfb2769b7e9287779a24c65fc465fd
d817d5504e29cbe18330a4018d1a3e51255f01f4bee6c97ef4179218762a8b37
GET /live/090/374/272/xbig_lq/3e3aaf.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 18850
last-modified: Tue, 27 Sep 2022 18:55:44 GMT
etag: "63334730-49a2"
expires: Tue, 04 Oct 2022 18:55:45 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 3018
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bea1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/06b/0af/2b9/xbig_lq/02377f.webp
200 OK 17 kB URL HTTP/2 i.bimbolive.com/live/06b/0af/2b9/xbig_lq/02377f.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0043e8bddd0d59ffedd3cfa4a84aa540
727db3efab5ac5bd33752ff5b646d4ee632eba1e
02a81f8bf2b1431a0a196e638394e73d3c13b33a699cf59e6280123345190d30
GET /live/06b/0af/2b9/xbig_lq/02377f.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 16574
last-modified: Tue, 27 Sep 2022 19:42:11 GMT
etag: "63335213-40be"
expires: Tue, 04 Oct 2022 19:42:12 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 237
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bee1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/058/247/243/xbig_lq/edaf07.webp
200 OK 24 kB URL HTTP/2 i.bimbolive.com/live/058/247/243/xbig_lq/edaf07.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a63bb7afc416dcf56fa1475365a5a0fb
34c25154e62a1846148af4374376754173c6e750
1fdf0d99acfb8fb1763582cbd3fbc8bc841fa8d7731cb61223e8bf8d41816263
GET /live/058/247/243/xbig_lq/edaf07.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 24294
last-modified: Tue, 27 Sep 2022 19:44:37 GMT
etag: "633352a5-5ee6"
expires: Tue, 04 Oct 2022 19:44:38 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 90
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf01c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/063/0d7/38d/xbig_lq/fe837e.webp
200 OK 9.7 kB URL HTTP/2 i.bimbolive.com/live/063/0d7/38d/xbig_lq/fe837e.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bf8c7934ce7b995a870786ecca97cf7d
7f92ff0a61b382c8bdfc34cdd626928c79c0406f
2cd222bc5f641add1b52c120554bf33e7c988f0e2425f759f28afbb8f061a8d2
GET /live/063/0d7/38d/xbig_lq/fe837e.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 9724
last-modified: Tue, 27 Sep 2022 19:45:45 GMT
etag: "633352e9-25fc"
expires: Tue, 04 Oct 2022 19:45:46 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 21
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf11c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/091/155/3a4/xbig_lq/2c8560.webp
200 OK 13 kB URL HTTP/2 i.bimbolive.com/live/091/155/3a4/xbig_lq/2c8560.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 165ffd23f85e087ee99384bb9fdeaa9c
21184c163268a15550de43d636b383065c7ece88
b89ddb8ed3aed7edfa7888e4e276e207e981d0c14173b447c2744ce1cd7aa659
GET /live/091/155/3a4/xbig_lq/2c8560.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13438
last-modified: Tue, 27 Sep 2022 19:43:28 GMT
etag: "63335260-347e"
expires: Tue, 04 Oct 2022 19:43:29 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 158
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf31c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/094/3c6/341/xbig_lq/7aefe8.webp
200 OK 14 kB URL HTTP/2 i.bimbolive.com/live/094/3c6/341/xbig_lq/7aefe8.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d6043ef32dc9d5b26dd560ceaa097591
2be96d5a5e83eafcb28745b187938e97aa801741
43ec7c86aecb247c502b9cf7066f4c968103a88ffb0a208484ced3df6e740c9a
GET /live/094/3c6/341/xbig_lq/7aefe8.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13780
last-modified: Tue, 27 Sep 2022 19:41:35 GMT
etag: "633351ef-35d4"
expires: Tue, 04 Oct 2022 19:41:35 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 271
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf41c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/01c/024/0fe/xbig_lq/2eeff2.webp
200 OK 7.5 kB URL HTTP/2 i.bimbolive.com/live/01c/024/0fe/xbig_lq/2eeff2.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2e0c3fd0f1eca5a86f381ae66edfc14
d34c51bb06d250bdf5d9fb5fabd6e148299154f0
a0e3d20179acf627a64654cdca91381545be5b34ab8ada36b4fb9a6131ec829a
GET /live/01c/024/0fe/xbig_lq/2eeff2.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 7472
last-modified: Tue, 27 Sep 2022 19:43:22 GMT
etag: "6333525a-1d30"
expires: Tue, 04 Oct 2022 19:43:22 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 164
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf51c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/074/07c/22e/xbig_lq/4885a3.webp
200 OK 7.0 kB URL HTTP/2 i.bimbolive.com/live/074/07c/22e/xbig_lq/4885a3.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d223db8c8feebeab0b5f55fe3a9ce9af
2f2f4a86a41ba57441f8d816210dd23a09e518dd
4075af6609866f1f554095dee695f1081b03ed4bde992ffcdaf704bb15c61c10
GET /live/074/07c/22e/xbig_lq/4885a3.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 6974
last-modified: Tue, 27 Sep 2022 19:41:48 GMT
etag: "633351fc-1b3e"
expires: Tue, 04 Oct 2022 19:41:49 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 259
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf81c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/051/0ab/0e1/xbig_lq/842c63.webp
200 OK 7.5 kB URL HTTP/2 i.bimbolive.com/live/051/0ab/0e1/xbig_lq/842c63.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0774a4db0c35a7c57f758d47e33d0400
bf4e7858fe62917d05c9313dce03f254c4e67fd0
bcb24145767d2e46c35e9924581ae1f5b34f537b71e0f2d537d4977391fd46b4
GET /live/051/0ab/0e1/xbig_lq/842c63.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 7536
last-modified: Tue, 27 Sep 2022 16:45:41 GMT
etag: "633328b5-1d70"
expires: Tue, 04 Oct 2022 16:45:42 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 10826
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698c061c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/091/2c0/048/xbig_lq/501b2e.webp
200 OK 25 kB URL HTTP/2 i.bimbolive.com/live/091/2c0/048/xbig_lq/501b2e.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4edde1a01da8a88fe62b2b75494cea78
6b9cd6d61ac3f874ecdadb107f7a7f27a02a4852
2c422cf42c1717a0aa9780339e99652233fd5ea2b38fc1a4e291a0b1da2929f8
GET /live/091/2c0/048/xbig_lq/501b2e.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 24712
last-modified: Tue, 27 Sep 2022 19:01:39 GMT
etag: "63334893-6088"
expires: Tue, 04 Oct 2022 19:01:40 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 2669
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be11c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/29c/099/xbig_lq/ec857e.webp
200 OK 25 kB URL HTTP/2 i.bimbolive.com/live/09c/29c/099/xbig_lq/ec857e.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 45b64b7fcec741473edad7e9b1c95d5f
36258764eb36b955d7698317e339f7d3de4f0c49
75ec64531bb4fec32b14ed7355a23ceddf681de1d36a7487860d2c87c347d263
GET /live/09c/29c/099/xbig_lq/ec857e.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 25074
last-modified: Tue, 27 Sep 2022 19:43:39 GMT
etag: "6333526b-61f2"
expires: Tue, 04 Oct 2022 19:43:39 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 147
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697be81c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/0e6/129/xbig_lq/70bd9a.webp
200 OK 14 kB URL HTTP/2 i.bimbolive.com/live/09c/0e6/129/xbig_lq/70bd9a.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fdd9c4c3cfe3648a6cbad48c64147149
7e2738aaa6e0bcc3841be15d472f10d8beb356c9
88c0dfbe724f1df872e3a0a0938274bf4a31537b79c503c3428653723c0e0e64
GET /live/09c/0e6/129/xbig_lq/70bd9a.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13970
last-modified: Tue, 27 Sep 2022 19:42:29 GMT
etag: "63335225-3692"
expires: Tue, 04 Oct 2022 19:42:30 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 216
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bfa1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/067/365/2c3/xbig_lq/2f287e.webp
200 OK 14 kB URL HTTP/2 i.bimbolive.com/live/067/365/2c3/xbig_lq/2f287e.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 920a22ca571b207cfce6bebff3e4f2f8
88cb41801d9bc1c64a3cee921837ba5823215d28
b1aaa2bac16df739e8274087ecc4b0d9fd53775cdfbff13f1859d2d8eddd2f46
GET /live/067/365/2c3/xbig_lq/2f287e.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 13920
last-modified: Tue, 27 Sep 2022 19:43:07 GMT
etag: "6333524b-3660"
expires: Tue, 04 Oct 2022 19:43:07 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 179
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bfd1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/057/0fd/379/xbig_lq/c9bb6d.webp
200 OK 8.3 kB URL HTTP/2 i.bimbolive.com/live/057/0fd/379/xbig_lq/c9bb6d.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9250ec7004107ee7765f5a37492cbc3b
41e115953af4c47291ccce28518c20f229e8d59c
c47eb60e5596c4cfa0a6c879acca047217a2cc20ed87189eb605b88c07db13ed
GET /live/057/0fd/379/xbig_lq/c9bb6d.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 8266
last-modified: Tue, 27 Sep 2022 19:41:18 GMT
etag: "633351de-204a"
expires: Tue, 04 Oct 2022 19:41:19 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 290
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bfe1c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/045/31a/3bc/xbig_lq/75cf15.webp
200 OK 16 kB URL HTTP/2 i.bimbolive.com/live/045/31a/3bc/xbig_lq/75cf15.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9266a4887b7bb4038f31239905baa1ce
a77cfb0e87237e2d062292c48c10ee4a938cffef
7bce02565bf2ac372e1e07bd3850df873b3d7b00c5040353f0f0c3079b90072f
GET /live/045/31a/3bc/xbig_lq/75cf15.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 15692
last-modified: Tue, 27 Sep 2022 19:44:57 GMT
etag: "633352b9-3d4c"
expires: Tue, 04 Oct 2022 19:44:59 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 70
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698c001c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/07b/32b/00f/xbig_lq/eb01f7.webp
200 OK 9.3 kB URL HTTP/2 i.bimbolive.com/live/07b/32b/00f/xbig_lq/eb01f7.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1090171389d8dba4e41463fccffd4c13
4581f25250fb5fff4b164f6da81b7c18874c56d4
8e747b881ea1d29b00e4663ec544555becd32dc224d32589d8ab11dd86dca932
GET /live/07b/32b/00f/xbig_lq/eb01f7.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 9280
last-modified: Tue, 27 Sep 2022 19:45:44 GMT
etag: "633352e8-2440"
expires: Tue, 04 Oct 2022 19:45:45 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 21
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698c081c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/095/348/015/xbig_lq/09d937.webp
200 OK 27 kB URL HTTP/2 i.bimbolive.com/live/095/348/015/xbig_lq/09d937.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f6eb1ffc8906cb227c5f74984f32249c
cfc2c8070e75928c315b15604bb2130354408f88
1e72cb72744fc646ead7423742366f8d9bb948bbd8b6633ac20fa02cdbe6bcf4
GET /live/095/348/015/xbig_lq/09d937.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 26942
last-modified: Tue, 27 Sep 2022 19:41:43 GMT
etag: "633351f7-693e"
expires: Tue, 04 Oct 2022 19:41:44 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 265
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf21c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/039/226/3a3/xbig_lq/a051ca.webp
200 OK 20 kB URL HTTP/2 i.bimbolive.com/live/039/226/3a3/xbig_lq/a051ca.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5abad7fd1827b43bd3c4da0c357bcbf7
5869222f6bd1be57007dc76ab011212383ddd013
0ad5acbc6f3b281e2002229ca5ede6234d3f7ad2008265cc03fba95ebcd05812
GET /live/039/226/3a3/xbig_lq/a051ca.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 20006
last-modified: Tue, 27 Sep 2022 19:45:57 GMT
etag: "633352f5-4e26"
expires: Tue, 04 Oct 2022 19:46:04 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 6
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698c021c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/061/2f9/1dd/xbig_lq/0b93f2.webp
200 OK 18 kB URL HTTP/2 i.bimbolive.com/live/061/2f9/1dd/xbig_lq/0b93f2.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 821715486ef2275d593841ecfeaf7512
20d24cb65de9d8cbc4a769546682ff1ca98794ac
a467d0f7f6d7c3ae484a9266b59bd33942a2d5800122a5a81ce198a59231fc93
GET /live/061/2f9/1dd/xbig_lq/0b93f2.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 17570
last-modified: Tue, 27 Sep 2022 19:44:17 GMT
etag: "63335291-44a2"
expires: Tue, 04 Oct 2022 19:44:26 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
age: 103
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698c091c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/091/219/3c9/xbig_lq/da528f.webp
200 OK 28 kB URL HTTP/2 i.bimbolive.com/live/091/219/3c9/xbig_lq/da528f.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 22d8b329edaf826a81217358d415a518
e9b495e09ce2ce20b8728dc690f9a94efcdf4077
a55d3e42b350da40172a0066b03584bf1d55ef4f98f64033b06ec380c5f010fe
GET /live/091/219/3c9/xbig_lq/da528f.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 27484
last-modified: Tue, 27 Sep 2022 19:38:41 GMT
etag: "63335141-6b5c"
expires: Tue, 04 Oct 2022 19:38:42 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 445
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bf71c12-OSL
X-Firefox-Spdy: h2
i.bimbolive.com/live/041/279/196/xbig_lq/be4406.webp
200 OK 30 kB URL HTTP/2 i.bimbolive.com/live/041/279/196/xbig_lq/be4406.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 23e90f00fd34c17e092040be0ec3cbdc
a6d9171c8a9ccdd54b1586d644793c162ae455e8
d5439bd27f99bdd5bc08d23c5cdeed77dd10bd72dcf8cac753770b239659c85f
GET /live/041/279/196/xbig_lq/be4406.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 29770
last-modified: Tue, 27 Sep 2022 19:42:06 GMT
etag: "6333520e-744a"
expires: Tue, 04 Oct 2022 19:42:06 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 1
x-circle-r: MISS
cf-cache-status: HIT
age: 237
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be698bfb1c12-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/1ybnm/cr.css
200 OK 58 kB URL HTTP/2 i.bcicdn.com/css-min/1ybnm/cr.css
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash a1433d4cdc10a348a3ffdad81a84a00e
32d6a7242126fe4efebc1c96c1a420ad5f74abec
13db4914f432f9a977aa0e9374635326fbff466b0cc8a59875e65a3edf52ae6a
GET /css-min/1ybnm/cr.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 07:35:51 GMT
etag: W/"632d61d7-1346f"
expires: Sun, 23 Oct 2022 07:38:04 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 389258
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6939230b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bimbolive.com/live/09c/00c/37e/xbig_lq/9736e5.webp
200 OK 16 kB URL HTTP/2 i.bimbolive.com/live/09c/00c/37e/xbig_lq/9736e5.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 81818585d9172e2400d721007bc65c6a
433fa8766d04671c341f7b385b5f11ba762f72d8
7b9d53216c76ac8a0a34baf714e42859feafee9e49794da1bb2345da5ab20bb0
GET /live/09c/00c/37e/xbig_lq/9736e5.webp HTTP/1.1
Host: i.bimbolive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/webp
content-length: 15848
last-modified: Tue, 27 Sep 2022 19:46:05 GMT
etag: "633352fd-3de8"
expires: Tue, 04 Oct 2022 19:46:06 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 2
x-circle-r: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be697bdd1c12-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/images/frontend/free_tokens/navbar_panel/1x/coin.png
200 OK 5.0 kB URL HTTP/2 i.bcicdn.com/images/frontend/free_tokens/navbar_panel/1x/coin.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 78 x 83, 8-bit colormap, non-interlaced\012- data
Hash 6e2efb0c8e7c4a94cc80ef841f820514
a75ae973772f547b8955c07e15bac58e0aa9699f
e261c0611347b7ebd6052db79f450b3d8db687272058c7ff2eedbc7c0471e085
GET /images/frontend/free_tokens/navbar_panel/1x/coin.png HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.bcicdn.com/css-min/1ybnm/cr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/png
content-length: 4998
last-modified: Wed, 19 May 2021 10:11:37 GMT
etag: "60a4e459-1386"
expires: Wed, 19 Oct 2022 13:47:19 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712725
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6acc230b3d-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/fonts/open_sans/v23/regular/latin.woff2
200 OK 14 kB URL HTTP/2 i.bcicdn.com/fonts/open_sans/v23/regular/latin.woff2
IP
ASN #209242 Cloudflare London, LLC
File type Web Open Font Format (Version 2), TrueType, length 14440, version 1.0\012- data
Hash ff9d619b59f5cb3529b100448f398ac5
f821770af8dcac25fd51b691be779fb56dde7783
a42f2ec73409f2753ef17d737714c86303fa45fc3a3d484a9b0c8ed28ef0fd6b
GET /fonts/open_sans/v23/regular/latin.woff2 HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://no.bongacams.net
Connection: keep-alive
Referer: https://i.bcicdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/octet-stream
content-length: 14440
last-modified: Wed, 15 Sep 2021 03:49:40 GMT
etag: "61416d54-3868"
expires: Wed, 19 Oct 2022 13:47:38 GMT
cache-control: max-age=2592000
x-bc-o: 1
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712711
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6adc490b3d-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/images/svg/bc/navbar/top5_cashback.svg
200 OK 16 kB URL HTTP/2 i.bcicdn.com/images/svg/bc/navbar/top5_cashback.svg
IP
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3204), with no line terminators
Hash 25ed6a8228d62fb8adc817b2aee27bd6
6427264e0a4a7a66c7eb6b101702cf686982e54c
70f765de76cc20bd9cb84b2da16c2fccead1fd3d7b47c3eb6c8ec6de0241f87c
GET /images/svg/bc/navbar/top5_cashback.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.bcicdn.com/css-min/1ybnm/cr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Thu, 24 Sep 2020 09:15:27 GMT
etag: W/"5f6c63af-c84"
expires: Wed, 19 Oct 2022 13:47:20 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712725
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6acc1f0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/fonts/open_sans/v23/bold/latin.woff2
200 OK 15 kB URL HTTP/2 i.bcicdn.com/fonts/open_sans/v23/bold/latin.woff2
IP
ASN #209242 Cloudflare London, LLC
File type Web Open Font Format (Version 2), TrueType, length 15112, version 1.0\012- data
Hash b596676fc00af9806c16a12e9a0350f8
056bafe30541a1926905966fa58b0df058504e36
c73575543a5c99018f842960f9882edaa0918965ea856e91de9717a0d58d3f1c
GET /fonts/open_sans/v23/bold/latin.woff2 HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://no.bongacams.net
Connection: keep-alive
Referer: https://i.bcicdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/octet-stream
content-length: 15112
last-modified: Wed, 15 Sep 2021 03:49:40 GMT
etag: "61416d54-3b08"
expires: Wed, 19 Oct 2022 13:47:38 GMT
cache-control: max-age=2592000
x-bc-o: 1
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712711
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6b2cc90b3d-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/favicon/bc/favicon-192x192.png
200 OK 5.7 kB URL HTTP/2 i.bcicdn.com/favicon/bc/favicon-192x192.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 58431962c780f071e5a076413e29205d
e3c5b0581b4b11817df6f96dec7447c9be276fde
d28b8fe2347e1f80ccacb9d70dca6934e59fada16896e6c50a0e4716b546309a
GET /favicon/bc/favicon-192x192.png HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: image/png
content-length: 5680
last-modified: Fri, 05 Apr 2019 04:44:59 GMT
etag: "5ca6dd4b-1630"
expires: Wed, 19 Oct 2022 13:47:19 GMT
cache-control: max-age=2592000
x-bc-o: 1
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712726
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6eab460b3d-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/da9be.js
200 OK 4.5 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/da9be.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (446), with no line terminators
Hash 80b3d7dedd8fae1dcd2225c5f2f731cf
aab78a6a0e1d6d70c72cc7688b39072b95cfd637
d2df89ea4fb22e15f90d6ace2c0b20f26221c0ecabc1f20cc6ed0d5b119e8210
GET /js-min/1zEUS/da9be.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-1be"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c9f630b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/d747k.js
200 OK 68 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/d747k.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash bef3f6f89aee7491de27d9e021890abb
4fa824799efa095e94d97db69bbb948c6b53e0e0
25f50cec88ab46f75044b67156453d202691b79beeb3b01c1e8bbb185d1d8b97
GET /js-min/1zEUS/d747k.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-2a26b"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c8f5e0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=Live%20sexcam%3A%20Gratis%20Norsk%20sexchat%20og%20XXX%20show%20online&time=1664307968292&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fno.bongacams.net%2F%3Fbcs%3DYmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~&random_number=9917623495&sess_cookie=48b885ab183807c39234f722469&sess_cookie_flag=1&user_cookie=48b885ab183807c39234f722469&user_cookie_flag=1&dynamic=true&domain=bongacams.com&account=X2xYi1a8Dy00aY&jsv=20130128&user_lang=en-US
200 OK 43 B URL HTTP/1.1 certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=Live%20sexcam%3A%20Gratis%20Norsk%20sexchat%20og%20XXX%20show%20online&time=1664307968292&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fno.bongacams.net%2F%3Fbcs%3DYmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~&random_number=9917623495&sess_cookie=48b885ab183807c39234f722469&sess_cookie_flag=1&user_cookie=48b885ab183807c39234f722469&user_cookie_flag=1&dynamic=true&domain=bongacams.com&account=X2xYi1a8Dy00aY&jsv=20130128&user_lang=en-US
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=Live%20sexcam%3A%20Gratis%20Norsk%20sexchat%20og%20XXX%20show%20online&time=1664307968292&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fno.bongacams.net%2F%3Fbcs%3DYmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~&random_number=9917623495&sess_cookie=48b885ab183807c39234f722469&sess_cookie_flag=1&user_cookie=48b885ab183807c39234f722469&user_cookie_flag=1&dynamic=true&domain=bongacams.com&account=X2xYi1a8Dy00aY&jsv=20130128&user_lang=en-US HTTP/1.1
Host: certify.alexametrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 17 Jan 2011 20:41:40 GMT
x-amz-meta-alexa-last-modified: 20110117123941
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 27 Sep 2022 02:09:43 GMT
ETag: "221d8352905f2c38b3cb2bd191d630b0"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Q6Rld53oIugn4W156BiOxolgON9Z2Ncb_psLcckSLz-qLyt3icsPlA==
Age: 63388
i.bcicdn.com/i18n-min/1663929848/messages/no.js
200 OK 52 kB URL HTTP/2 i.bcicdn.com/i18n-min/1663929848/messages/no.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash 65c510e22fe8806442305be7d7340ae8
7d528b040d9ec0b85cbb33dcb741010bb0b0523f
39c473bf1dfe885fb7e18786990d21a8b2d0b2d7fc4e4ba96621a480c01c370a
GET /i18n-min/1663929848/messages/no.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Fri, 23 Sep 2022 10:44:38 GMT
etag: W/"632d8e16-27f5b"
expires: Sun, 23 Oct 2022 10:45:27 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 377942
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6918ea0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/5cf81.js
200 OK 6.9 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/5cf81.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (5518), with no line terminators
Hash a91599ab1d87538bbd32e9c04da8859d
141cc8b8f62024787c9cc0016a62faddc3e320ef
d8736d59ddd289f7eb64c62922d051e07499b8359923e21f6260073f4167a300
GET /js-min/1zEUS/5cf81.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-158e"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6cbfa00b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/1409t.js
200 OK 27 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/1409t.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash cb9a0a5adbb3561fac6e21c1c12d0ef4
de626c6c359fb8cd0b6e0b82093d71e3aceb012b
ad4da1eaf719f95010d33d05d733fd52ff0dce0fb4ac5a6a36cf6372d493c497
GET /js-min/1zEUS/1409t.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-1c08f"
expires: Thu, 27 Oct 2022 09:20:43 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be72aa980b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/367a5.js
200 OK 4.0 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/367a5.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (11905), with no line terminators
Hash e74ed6738278d873692728ad71668719
2994570ed3f12bce9fcb70426b6a159489771d4f
63d5af34765dfece193fa54e633ca3031007607d7c60cd88c5756dcf1f10a66f
GET /js-min/1zEUS/367a5.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-2e81"
expires: Thu, 27 Oct 2022 09:20:40 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be72aa9d0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/4c6a1.js
200 OK 14 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/4c6a1.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (55507), with no line terminators
Hash 8db326a139ad966a084693d89ef22fab
867712ba50b218c439c3fc3006545b65f043d26c
011decc50558a351f60163b368a6150943e8441d6da8ba994420a5a0c25812ee
GET /js-min/1zEUS/4c6a1.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-d8d3"
expires: Thu, 27 Oct 2022 09:20:38 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be72aaa00b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/53da4.js
200 OK 17 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/53da4.js
IP
ASN #209242 Cloudflare London, LLC
File type Unicode text, UTF-8 text, with very long lines (37018), with no line terminators
Hash 6ff18867b4c117e50a246b16e07c4a3d
afc7996a8879c80dacec18e248d5fab0ae015264
118c4a97fd37f90e39205c5caf12a075ce563f5acdab96b777d4a18cc71390c0
GET /js-min/1zEUS/53da4.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-90a1"
expires: Thu, 27 Oct 2022 09:20:51 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be72aa8f0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/5568d.js
200 OK 3.9 kB URL HTTP/2 i.bcicdn.com/js-min/1zEUS/5568d.js
IP
ASN #209242 Cloudflare London, LLC
File type ASCII text, with no line terminators
Hash 1f04a70a65f37f1e0f4491aadf86701c
a776b08495e74c7139ed69bbd259061c7a8ee853
78fd14ab444a8dfebb18b080335ac1977fccbf5dfd1fb119286fbd6958266757
GET /js-min/1zEUS/5568d.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-ef"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6cbf900b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&gjid=974631134&_gid=1407018973.1664307969&_u=YEBAAUAAAAAAAC~&z=1789200607
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&gjid=974631134&_gid=1407018973.1664307969&_u=YEBAAUAAAAAAAC~&z=1789200607
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&gjid=974631134&_gid=1407018973.1664307969&_u=YEBAAUAAAAAAAC~&z=1789200607 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://no.bongacams.net
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://no.bongacams.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 27 Sep 2022 19:46:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e01e4cfb215a3f052b4c716bc77c1a6
6e63b3e883051319571310c44b87591f0312d83f
aebb544e0762c6c3eb289d85c20299baa3f742dc46cfa5bcc33ac6df411285ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&_u=YEBAAUAAAAAAAC~&z=1624014119
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&_u=YEBAAUAAAAAAAC~&z=1624014119
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&_u=YEBAAUAAAAAAAC~&z=1624014119 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 19:46:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&_u=YEBAAUAAAAAAAC~&z=1624014119
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&_u=YEBAAUAAAAAAAC~&z=1624014119
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-10874655-24&cid=1203653299.1664307969&jid=1589200345&_u=YEBAAUAAAAAAAC~&z=1624014119 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 19:46:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 19:46:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef17205adb2b478d3bff54b048208d22
12aac1bd22e675f09a220de08b4656e801c2e647
620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Iy0oyFx_T6CEuOQckEzvUQOUo307Jm_OgJzomWlMz9BhgD3eOaysdA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:50:01 GMT
age: 78971
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i.bcicdn.com/promotions/sapphire_and_titan/3/182x600/no.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/promotions/sapphire_and_titan/3/182x600/no.svg
IP
ASN #209242 Cloudflare London, LLC
GET /promotions/sapphire_and_titan/3/182x600/no.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Fri, 01 Apr 2022 13:41:46 GMT
etag: W/"6247011a-115b8"
expires: Wed, 19 Oct 2022 13:48:15 GMT
cache-control: max-age=2592000
vary: Accept-Encoding
x-cache-0: 1
cf-cache-status: HIT
age: 712654
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6908c40b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/1ybnm/lt.css
200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/1ybnm/lt.css
IP
ASN #209242 Cloudflare London, LLC
GET /css-min/1ybnm/lt.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 07:35:51 GMT
etag: W/"632d61d7-19eca"
expires: Sun, 23 Oct 2022 07:38:04 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 389258
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6908bc0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/sprite/bc/flag_pack-7fa3aa73.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/sprite/bc/flag_pack-7fa3aa73.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/sprite/bc/flag_pack-7fa3aa73.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.bcicdn.com/css-min/1ybnm/cr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Thu, 30 May 2019 03:12:25 GMT
etag: W/"5cef4a19-5775"
expires: Wed, 19 Oct 2022 13:47:19 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712725
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6a5afb0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/92aa8.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/92aa8.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/92aa8.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:11 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-2d75"
expires: Thu, 27 Oct 2022 09:20:52 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be745d2a0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/5ef9a.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/5ef9a.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/5ef9a.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:11 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-d443"
expires: Thu, 27 Oct 2022 09:20:37 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be747d650b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/e808e.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/e808e.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/e808e.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-175"
expires: Thu, 27 Oct 2022 09:20:44 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c7f2e0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/replace/10/arial/999/bnct_add2.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/replace/10/arial/999/bnct_add2.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/replace/10/arial/999/bnct_add2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Jun 2021 09:45:11 GMT
etag: W/"60c08da7-2a63"
expires: Wed, 19 Oct 2022 13:47:19 GMT
cache-control: max-age=2592000
x-bc-o: 1
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712713
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6918e90b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/1ybnm/extra/listing_catrows.css
200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/1ybnm/extra/listing_catrows.css
IP
ASN #209242 Cloudflare London, LLC
GET /css-min/1ybnm/extra/listing_catrows.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 07:35:51 GMT
etag: W/"632d61d7-1454"
expires: Sun, 23 Oct 2022 07:38:05 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 389258
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be69391d0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/f5d4.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/f5d4.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/f5d4.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-cc"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c2ead0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/ccd10.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/ccd10.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/ccd10.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-3754"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6f5ca60b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/debbd.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/debbd.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/debbd.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-45f"
expires: Thu, 27 Oct 2022 09:20:54 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6caf780b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
200 OK 0 B URL HTTP/2 news-komani.cc/53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1
IP
ASN #63023 AS-GLOBALTELEHOST
Analyzer Verdict Alert quad9 Sinkholed
GET /53/?site=8049153&sub1=&sub2=376l60j7tr0uk&sub3=0&sub4=&fullscreen=1 HTTP/1.1
Host: news-komani.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:03 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: fcm_account_id=62; expires=Sun, 17-Sep-2023 19:46:03 GMT; Max-Age=30672000; path=/
clickdata=ODA0OTE1M3w6fDUzfDp8fDp8Mzc2bDYwajd0cjB1a3w6fDB8Onw%3D; expires=Tue, 27-Sep-2022 20:46:03 GMT; Max-Age=3600; path=/
uuid=04cebadb-cd5e-489f-ad02-36f3d4e30c90; expires=Mon, 21-Oct-2024 19:46:03 GMT; Max-Age=65232000
content-encoding: gzip
X-Firefox-Spdy: h2
no.bongacams.net/ajax-filter?seo=1
200 OK 0 B URL HTTP/2 no.bongacams.net/ajax-filter?seo=1
IP
ASN #209242 Cloudflare London, LLC
GET /ajax-filter?seo=1 HTTP/1.1
Host: no.bongacams.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no.bongacams.net/?bcs=YmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: bonga20120608=8ee39c1c7154102fa42a21dfc742fcf2; ts_type2=1; fv=BQL5AmNmAQL2ZD==; uh=AQSaAmW4DHImnwEwZHIOrK5AFxEHLD==; ratr=184850%3A%3A671920%3A%3A2022-09-27%2022%3A46%3A08%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642; __cf_bm=QKPtWntBbnZBzu.pFQKxxGoE6H62eqlg440SfF64qvk-1664307968-0-AcDYncMDU3QZ006JQrDFKRTAdSd53VfcN2Y0hPVNClOrtJChCDzBj5s4qKSUvzcm81nFp0nrCk4pl8S8UMikSLg=; BONGAH_HIT=1a3bea88d0e062e9ccb4a096a69a71bb%3A%3A184850%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642%3A%3A671920%3A%3A%3A%3A%3A%3A0%3A%3A1%3A%3A1%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2022-09-27%2022%3A46%3A08; reg_ver2=3; sg=786; __ti=H4sIAAAAAAACAyWIOw6AIBBEr2K2J4GRuDJ7GhIsqDVYEO6uYvU-Y5jsnlsksChc8g7wEKbA06QIJ--jNmH89PoXWE3a9M6V2VQDa387P7YDt-FUAAAA; warning18=%5B%22no_NO%22%5D; okm7zz0n=1881929790; _ga=GA1.2.1203653299.1664307969; _gid=GA1.2.1407018973.1664307969; _gat_gtag_UA_10874655_24=1; _gat_gtag_UA_10874655_74=1; pna=1664308268606
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:11 GMT
content-type: application/json
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: origin-when-cross-origin
x-ua-compatible: IE=edge,chrome=1
set-cookie: ts_type2=1; expires=Wed, 27-Sep-2023 19:46:11 GMT; Max-Age=31536000; path=/; domain=.bongacams.net
cache-control: no-cache, no-store, must-revalidate
x-zone: 5a-web44
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7516be7498aeb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/replace/10/arial/999/bnct_v2.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/replace/10/arial/999/bnct_v2.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/replace/10/arial/999/bnct_v2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Mar 2022 11:31:02 GMT
etag: W/"6231ca76-345d"
expires: Wed, 19 Oct 2022 13:47:20 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712730
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6908d50b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/1ybnm/ft.css
200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/1ybnm/ft.css
IP
ASN #209242 Cloudflare London, LLC
GET /css-min/1ybnm/ft.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 07:35:51 GMT
etag: W/"632d61d7-3a14"
expires: Sun, 23 Oct 2022 07:38:03 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 389258
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be69390f0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/12368.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/12368.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/12368.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-84b"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c3eb60b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/replace/10/arial/999/bnct_add1_v2.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/replace/10/arial/999/bnct_add1_v2.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/replace/10/arial/999/bnct_add1_v2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Mar 2022 11:31:02 GMT
etag: W/"6231ca76-35ac"
expires: Wed, 19 Oct 2022 13:47:19 GMT
cache-control: max-age=2592000
x-bc-o: 1
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712713
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6918e70b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/4efa6.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/4efa6.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/4efa6.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-412c"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be72aa9c0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/0595.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/0595.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/0595.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-17ce"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c3eb00b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/34a82.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/34a82.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/34a82.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-319c"
expires: Thu, 27 Oct 2022 09:20:46 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37505
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be7168c80b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
cuddlethehyena.com/1911642/
200 OK 0 B URL HTTP/2 cuddlethehyena.com/1911642/
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /1911642/ HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news-komani.cc/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:07 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-route-id: check.sumbit.dl
set-cookie: UID=220927144655b5ebac43264dc79e1f17159e; Path=/; Expires=Wed, 27 Sep 2023 19:46:07 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/1ybnm/hg.css
200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/1ybnm/hg.css
IP
ASN #209242 Cloudflare London, LLC
GET /css-min/1ybnm/hg.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 07:35:51 GMT
etag: W/"632d61d7-c4aa"
expires: Sun, 23 Oct 2022 07:38:04 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 389258
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6939220b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
no.bongacams.net/images/sprite/bc/icon11.svg
200 OK 0 B URL HTTP/2 no.bongacams.net/images/sprite/bc/icon11.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/sprite/bc/icon11.svg HTTP/1.1
Host: no.bongacams.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no.bongacams.net/?bcs=YmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~
Connection: keep-alive
Cookie: bonga20120608=8ee39c1c7154102fa42a21dfc742fcf2; ts_type2=1; fv=BQL5AmNmAQL2ZD==; uh=AQSaAmW4DHImnwEwZHIOrK5AFxEHLD==; ratr=184850%3A%3A671920%3A%3A2022-09-27%2022%3A46%3A08%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642; __cf_bm=QKPtWntBbnZBzu.pFQKxxGoE6H62eqlg440SfF64qvk-1664307968-0-AcDYncMDU3QZ006JQrDFKRTAdSd53VfcN2Y0hPVNClOrtJChCDzBj5s4qKSUvzcm81nFp0nrCk4pl8S8UMikSLg=; BONGAH_HIT=1a3bea88d0e062e9ccb4a096a69a71bb%3A%3A184850%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642%3A%3A671920%3A%3A%3A%3A%3A%3A0%3A%3A1%3A%3A1%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2022-09-27%2022%3A46%3A08; reg_ver2=3; sg=786; __ti=H4sIAAAAAAACAyWIOw6AIBBEr2K2J4GRuDJ7GhIsqDVYEO6uYvU-Y5jsnlsksChc8g7wEKbA06QIJ--jNmH89PoXWE3a9M6V2VQDa387P7YDt-FUAAAA; warning18=%5B%22no_NO%22%5D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Wed, 07 Sep 2022 03:41:03 GMT
etag: W/"631812cf-5ab6"
expires: Thu, 27 Oct 2022 19:46:09 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 935621
vary: Accept-Encoding
server: cloudflare
cf-ray: 7516be6a5982b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/0ab9p.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/0ab9p.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/0ab9p.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-1be7"
expires: Thu, 27 Oct 2022 09:20:43 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6f5ca80b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/8328k.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/8328k.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/8328k.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-250c"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37505
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be7158900b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
cuddlethehyena.com/submit.min.js?abvar=
200 OK 0 B URL HTTP/2 cuddlethehyena.com/submit.min.js?abvar=
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /submit.min.js?abvar= HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=220927144655b5ebac43264dc79e1f17159e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 19:46:07 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 14:00:58 GMT
vary: Accept-Encoding
etag: W/"6333021a-8216"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/68b7u.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/68b7u.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/68b7u.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-2491"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6cdfbc0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/sprite/bc/listing_atlas8.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/sprite/bc/listing_atlas8.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/sprite/bc/listing_atlas8.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.bcicdn.com/css-min/1ybnm/extra/listing.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 12:30:04 GMT
etag: W/"620a4b4c-a703"
expires: Wed, 19 Oct 2022 13:47:20 GMT
cache-control: max-age=2592000
x-bc-o: 1
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712725
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6a5b010b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/ee064.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/ee064.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/ee064.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-5d5b"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c3ebe0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/51fb7.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/51fb7.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/51fb7.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-701"
expires: Thu, 27 Oct 2022 09:20:38 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37511
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6caf7b0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/83067.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/83067.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/83067.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-10c4"
expires: Thu, 27 Oct 2022 09:20:53 GMT
cache-control: max-age=2592000
x-bc-o: 1, 2
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c4ed80b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/9f58f.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/9f58f.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/9f58f.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-d98"
expires: Thu, 27 Oct 2022 09:20:37 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37502
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be7178ce0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/1ybnm/extra/listing.css
200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/1ybnm/extra/listing.css
IP
ASN #209242 Cloudflare London, LLC
GET /css-min/1ybnm/extra/listing.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 07:35:51 GMT
etag: W/"632d61d7-120f5"
expires: Sun, 23 Oct 2022 07:38:04 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 389258
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6939200b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
no.bongacams.net/images/sprite/bc/chat9.svg
200 OK 0 B URL HTTP/2 no.bongacams.net/images/sprite/bc/chat9.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/sprite/bc/chat9.svg HTTP/1.1
Host: no.bongacams.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no.bongacams.net/?bcs=YmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~
Connection: keep-alive
Cookie: bonga20120608=8ee39c1c7154102fa42a21dfc742fcf2; ts_type2=1; fv=BQL5AmNmAQL2ZD==; uh=AQSaAmW4DHImnwEwZHIOrK5AFxEHLD==; ratr=184850%3A%3A671920%3A%3A2022-09-27%2022%3A46%3A08%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642; __cf_bm=QKPtWntBbnZBzu.pFQKxxGoE6H62eqlg440SfF64qvk-1664307968-0-AcDYncMDU3QZ006JQrDFKRTAdSd53VfcN2Y0hPVNClOrtJChCDzBj5s4qKSUvzcm81nFp0nrCk4pl8S8UMikSLg=; BONGAH_HIT=1a3bea88d0e062e9ccb4a096a69a71bb%3A%3A184850%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642%3A%3A671920%3A%3A%3A%3A%3A%3A0%3A%3A1%3A%3A1%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2022-09-27%2022%3A46%3A08; reg_ver2=3; sg=786; __ti=H4sIAAAAAAACAyWIOw6AIBBEr2K2J4GRuDJ7GhIsqDVYEO6uYvU-Y5jsnlsksChc8g7wEKbA06QIJ--jNmH89PoXWE3a9M6V2VQDa387P7YDt-FUAAAA; warning18=%5B%22no_NO%22%5D; okm7zz0n=1881929790; _ga=GA1.2.1203653299.1664307969; _gid=GA1.2.1407018973.1664307969; _gat_gtag_UA_10874655_24=1; _gat_gtag_UA_10874655_74=1; pna=1664308268606
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:11 GMT
content-type: image/svg+xml
last-modified: Wed, 04 May 2022 09:27:49 GMT
etag: W/"62724715-9a48"
expires: Thu, 27 Oct 2022 19:46:11 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 935621
vary: Accept-Encoding
server: cloudflare
cf-ray: 7516be7498b7b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/aa76b.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/aa76b.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/aa76b.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:10 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-39b9"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6f4c8b0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/svg/bc/listing/ls_bage_fp.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/svg/bc/listing/ls_bage_fp.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/svg/bc/listing/ls_bage_fp.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Thu, 11 Jul 2019 06:10:34 GMT
etag: W/"5d26d2da-199e"
expires: Wed, 19 Oct 2022 13:47:29 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712399
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6908c10b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
no.bongacams.net/images/sprite/bc/layout4.svg
200 OK 0 B URL HTTP/2 no.bongacams.net/images/sprite/bc/layout4.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/sprite/bc/layout4.svg HTTP/1.1
Host: no.bongacams.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no.bongacams.net/?bcs=YmVzdDFhM2JlYTg4ZDBlMDYyZTljY2I0YTA5NmE2OWE3MWJiOjoxODQ4NTA6Ojo6MjIwOTI3MTQ0NmY0NzNlN2M2MDExNDRlMjU5Yzc1YzgzZjE2OjoxOTExNjQyOjo2NzE5MjA6OjA6OjE6OjE6Ojo6MDo6ZGVmYXVsdDo6MA~~
Connection: keep-alive
Cookie: bonga20120608=8ee39c1c7154102fa42a21dfc742fcf2; ts_type2=1; fv=BQL5AmNmAQL2ZD==; uh=AQSaAmW4DHImnwEwZHIOrK5AFxEHLD==; ratr=184850%3A%3A671920%3A%3A2022-09-27%2022%3A46%3A08%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642; __cf_bm=QKPtWntBbnZBzu.pFQKxxGoE6H62eqlg440SfF64qvk-1664307968-0-AcDYncMDU3QZ006JQrDFKRTAdSd53VfcN2Y0hPVNClOrtJChCDzBj5s4qKSUvzcm81nFp0nrCk4pl8S8UMikSLg=; BONGAH_HIT=1a3bea88d0e062e9ccb4a096a69a71bb%3A%3A184850%3A%3A%3A%3A2209271446f473e7c601144e259c75c83f16%3A%3A1911642%3A%3A671920%3A%3A%3A%3A%3A%3A0%3A%3A1%3A%3A1%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2022-09-27%2022%3A46%3A08; reg_ver2=3; sg=786; __ti=H4sIAAAAAAACAyWIOw6AIBBEr2K2J4GRuDJ7GhIsqDVYEO6uYvU-Y5jsnlsksChc8g7wEKbA06QIJ--jNmH89PoXWE3a9M6V2VQDa387P7YDt-FUAAAA; warning18=%5B%22no_NO%22%5D; okm7zz0n=1881929790; _ga=GA1.2.1203653299.1664307969; _gid=GA1.2.1407018973.1664307969; _gat_gtag_UA_10874655_24=1; _gat_gtag_UA_10874655_74=1; pna=1664308268606
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:11 GMT
content-type: image/svg+xml
last-modified: Wed, 06 Oct 2021 08:11:49 GMT
etag: W/"615d5a45-15af"
expires: Thu, 27 Oct 2022 19:46:11 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 935621
vary: Accept-Encoding
server: cloudflare
cf-ray: 7516be7498b9b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/sprite/bc/model_flags_atlas2.svg
200 OK 0 B URL HTTP/2 i.bcicdn.com/images/sprite/bc/model_flags_atlas2.svg
IP
ASN #209242 Cloudflare London, LLC
GET /images/sprite/bc/model_flags_atlas2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.bcicdn.com/css-min/1ybnm/extra/listing.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: image/svg+xml
last-modified: Tue, 16 Aug 2022 06:50:29 GMT
etag: W/"62fb3e35-850e"
expires: Wed, 19 Oct 2022 13:47:20 GMT
cache-control: max-age=2592000
x-bc-o: 2
x-o1-p4: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 712725
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6a5b120b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/1zEUS/2e83c.js
200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/1zEUS/2e83c.js
IP
ASN #209242 Cloudflare London, LLC
GET /js-min/1zEUS/2e83c.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 19:46:09 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 09:20:25 GMT
etag: W/"6332c059-25de"
expires: Thu, 27 Oct 2022 09:20:39 GMT
cache-control: max-age=2592000
x-bc-o: 2, 1
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 37510
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7516be6c3eb40b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
95.216.26.241
54.149.83.187
195.85.23.89
104.18.32.68
172.99.190.24
62.122.171.6
23.36.76.226