r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11410
Expires: Sun, 25 Dec 2022 06:58:00 GMT
Date: Sun, 25 Dec 2022 03:47:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad598540c6639aaaa344fb3ce4f3162f
b0b9f86d50de7dc23bdc7aee2f45d79a06165afc
4e9aaff330ce0c9c11f6bb8502fe21296b1845151bace75f73908a3194d5d0a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8758
Expires: Sun, 25 Dec 2022 06:13:48 GMT
Date: Sun, 25 Dec 2022 03:47:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7f0ad5c2841a345f98197c2f1e86f4d
84cbfd91934a8715baba4a2da46451f35597c99c
be30540f2e06a3565c9b38bdbb9691f707d692b196bdcef5d671708aa9609795
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE30540F2E06A3565C9B38BDBB9691F707D692B196BDCEF5D671708AA9609795"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20105
Expires: Sun, 25 Dec 2022 09:22:55 GMT
Date: Sun, 25 Dec 2022 03:47:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 25 Dec 2022 03:46:20 GMT
content-type: application/json
age: 90
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: oJs8noxFr8gkPxL8H5DtBbQ/qvkSAlCJnN0ewMgWPlu8vtrP/c+Et0Y3yn5S6gbDKXNLL78izkc=
x-amz-request-id: Y6WD66EQS1EE7069
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 25 Dec 2022 02:54:44 GMT
age: 3186
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
go.redanemone.xyz/redirect?feed=465513&url=t5.hightid.com&subid=custom_10utabg6hk.us.android.webview-android&query=498644.custom_11z44d1gnd.us.android.webview-android&pub_clickid=63a7c7d3e3464b0faa499e05
302 Found 0 B URL HTTP/1.1 go.redanemone.xyz/redirect?feed=465513&url=t5.hightid.com&subid=custom_10utabg6hk.us.android.webview-android&query=498644.custom_11z44d1gnd.us.android.webview-android&pub_clickid=63a7c7d3e3464b0faa499e05
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=465513&url=t5.hightid.com&subid=custom_10utabg6hk.us.android.webview-android&query=498644.custom_11z44d1gnd.us.android.webview-android&pub_clickid=63a7c7d3e3464b0faa499e05 HTTP/1.1
Host: go.redanemone.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://cadrctlnk.com/in/p/?spot_id=98769&cat=25&sub_id=1071940612
Pragma: no-cache
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Dec 2022 03:47:50 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 012b56bfe5e1c971f55381bc0d3dcd6c
29e57a3db32d13a8cce9f37878a7459775505d80
7689e0843e504f2473f807ce57f1545c7ea3e3324f856d44ca315eea1d4732c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7689E0843E504F2473F807CE57F1545C7EA3E3324F856D44CA315EEA1D4732C2"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13853
Expires: Sun, 25 Dec 2022 07:38:44 GMT
Date: Sun, 25 Dec 2022 03:47:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 25 Dec 2022 03:33:27 GMT
age: 864
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5db7fad165411683c88ded486cfedd31
4d1a94432941c0dc964b3d947160f3500f565d26
242f567a8a59c8523c99905e4bfa19bf7bd952176195dc43d3c9564c04bb7d1b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "242F567A8A59C8523C99905E4BFA19BF7BD952176195DC43D3C9564C04BB7D1B"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13088
Expires: Sun, 25 Dec 2022 07:25:59 GMT
Date: Sun, 25 Dec 2022 03:47:51 GMT
Connection: keep-alive
mcpuwpush.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIxMDcxOTQwNjEyIiwic3NwIjozNzU4LCJzcG90X2lkIjo5ODc2OSwicmNoYW5nZSI6dHJ1ZX19XSwic2l0ZSI6eyJpZCI6Ijk4NzY5IiwicGFnZSI6Imh0dHBzOi8vY2FkcmN0bG5rLmNvbS9pbi9wLz9zcG90X2lkPTk4NzY5JmNhdD0yNSZzdWJfaWQ9MTA3MTk0MDYxMiIsImNhdCI6WyJJQUIyNSJdfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiYnVmMDJuaDBoeTd4bXlwYTZ5d3A1ayJ9LCJleHQiOnsiZHQiOjE2NzE5NDAwNjg5NzB9fQ==
302 Found 0 B URL HTTP/2 mcpuwpush.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIxMDcxOTQwNjEyIiwic3NwIjozNzU4LCJzcG90X2lkIjo5ODc2OSwicmNoYW5nZSI6dHJ1ZX19XSwic2l0ZSI6eyJpZCI6Ijk4NzY5IiwicGFnZSI6Imh0dHBzOi8vY2FkcmN0bG5rLmNvbS9pbi9wLz9zcG90X2lkPTk4NzY5JmNhdD0yNSZzdWJfaWQ9MTA3MTk0MDYxMiIsImNhdCI6WyJJQUIyNSJdfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiYnVmMDJuaDBoeTd4bXlwYTZ5d3A1ayJ9LCJleHQiOnsiZHQiOjE2NzE5NDAwNjg5NzB9fQ==
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIxMDcxOTQwNjEyIiwic3NwIjozNzU4LCJzcG90X2lkIjo5ODc2OSwicmNoYW5nZSI6dHJ1ZX19XSwic2l0ZSI6eyJpZCI6Ijk4NzY5IiwicGFnZSI6Imh0dHBzOi8vY2FkcmN0bG5rLmNvbS9pbi9wLz9zcG90X2lkPTk4NzY5JmNhdD0yNSZzdWJfaWQ9MTA3MTk0MDYxMiIsImNhdCI6WyJJQUIyNSJdfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiYnVmMDJuaDBoeTd4bXlwYTZ5d3A1ayJ9LCJleHQiOnsiZHQiOjE2NzE5NDAwNjg5NzB9fQ== HTTP/1.1
Host: mcpuwpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cadrctlnk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.16.0
date: Sun, 25 Dec 2022 03:47:51 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://kts.cvastico.com/in/2639/?site_id=5&&source=1071940612&utm1=&utm2=&utm3=&utm4=&spot_id=98769&ad_tags=&p=https%3A%2F%2Fcadrctlnk.com%2Fin%2Fp%2F%3Fspot_id%3D98769%26cat%3D25%26sub_id%3D1071940612&katds_labels=&bf=0.031214&dw=1280&dh=1024
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0ba1253a335d84efa311354f59852c3d
f2303ba0ef33155938e19010c9f74943dff23ba9
ce2a8bb7dd7c951554e13e1047d0fc52f16321ff8869765845e45f29089736ea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE2A8BB7DD7C951554E13E1047D0FC52F16321FF8869765845E45F29089736EA"
Last-Modified: Fri, 23 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12087
Expires: Sun, 25 Dec 2022 07:09:18 GMT
Date: Sun, 25 Dec 2022 03:47:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash d7938ab2263405a708c44813f3e16cb8
3ba9f4363ecc2834ea1211f761ce2d04e0077ab3
8a8ef4218bcd8ecb1f12ecdb74f3f453a7093be8dd3c233615577dcc9b40fa92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6277
Cache-Control: max-age=111814
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:51 GMT
Etag: "63a6c129-1d7"
Expires: Mon, 26 Dec 2022 10:51:25 GMT
Last-Modified: Sat, 24 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d1342e3a147ab68b080c848dc01e793
9311d8cd35b6618d0c2b3a22e81303fcffd1b049
5cad2c2c841a29cdfa32594e6818a451509fd80aa38d8b5de8ab37386a6c8dbd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5CAD2C2C841A29CDFA32594E6818A451509FD80AA38D8B5DE8AB37386A6C8DBD"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10410
Expires: Sun, 25 Dec 2022 06:41:21 GMT
Date: Sun, 25 Dec 2022 03:47:51 GMT
Connection: keep-alive
cadrctlnk.com/in/p/?spot_id=98769&cat=25&sub_id=1071940612
200 OK 1.8 kB URL HTTP/2 cadrctlnk.com/in/p/?spot_id=98769&cat=25&sub_id=1071940612
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4181), with no line terminators
Hash 0194e596e942b53b755be14a542e56fd
79a5525e5e9e7b6990c5955093fa04b1d8bef9c9
0a5655f852c412c0ddcf3e70e4178f26c903a8b35c018cf1180ce920138e8964
Analyzer Verdict Alert quad9 Sinkholed
GET /in/p/?spot_id=98769&cat=25&sub_id=1071940612 HTTP/1.1
Host: cadrctlnk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 25 Dec 2022 03:47:51 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
set-cookie: 1095.0=1; expires=Mon, 26 Dec 2022 03:47:51 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
kts.cvastico.com/in/2639/?site_id=5&&source=1071940612&utm1=&utm2=&utm3=&utm4=&spot_id=98769&ad_tags=&p=https%3A%2F%2Fcadrctlnk.com%2Fin%2Fp%2F%3Fspot_id%3D98769%26cat%3D25%26sub_id%3D1071940612&katds_labels=&bf=0.031214&dw=1280&dh=1024
200 OK 274 B URL HTTP/2 kts.cvastico.com/in/2639/?site_id=5&&source=1071940612&utm1=&utm2=&utm3=&utm4=&spot_id=98769&ad_tags=&p=https%3A%2F%2Fcadrctlnk.com%2Fin%2Fp%2F%3Fspot_id%3D98769%26cat%3D25%26sub_id%3D1071940612&katds_labels=&bf=0.031214&dw=1280&dh=1024
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (335), with no line terminators
Hash 51a81359d577311966e1725a6adbc6e0
1fd1880174e390141aa2e74552c19170fb065f32
cc723009df4ea915776066050b34e5ca817d2bf4c17d4f059d05a85446524845
GET /in/2639/?site_id=5&&source=1071940612&utm1=&utm2=&utm3=&utm4=&spot_id=98769&ad_tags=&p=https%3A%2F%2Fcadrctlnk.com%2Fin%2Fp%2F%3Fspot_id%3D98769%26cat%3D25%26sub_id%3D1071940612&katds_labels=&bf=0.031214&dw=1280&dh=1024 HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cadrctlnk.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 25 Dec 2022 03:47:51 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
set-cookie: 2639.0=1; expires=Mon, 26 Dec 2022 03:47:51 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
mcpuwpush.com/popunder/in/click/?mid=8740709312887406522&pid=0&site=91749&sc=NO&usage_type=DCH&subid=1071940612&sid=0&cid=14252&price=0&is_cpm=1&cpm=0.13551839999999998&ecpm=0.121031179478784&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=3txxx.com&hostname=auc-popunder-hz-0&site_id=0&spot_id=98769&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=3&auction_queue=0&burl=http%3A%2F%2Frtb.exoclick.com%2Fnot.php%3Fzid%3D4853700%26data%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--&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=popunderAd&iabcat=IAB25&min_cpm=0.031214000000000006&placement_type_id=7&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0.13551839999999998&user_fp=0&pop_type=0&space_id=98769&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ssp=3756&rc=0&url=https%3A%2F%2Fs.optnx.com%2Fcimp.php%3Fdata%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-&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0
302 Found 0 B URL HTTP/2 mcpuwpush.com/popunder/in/click/?mid=8740709312887406522&pid=0&site=91749&sc=NO&usage_type=DCH&subid=1071940612&sid=0&cid=14252&price=0&is_cpm=1&cpm=0.13551839999999998&ecpm=0.121031179478784&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=3txxx.com&hostname=auc-popunder-hz-0&site_id=0&spot_id=98769&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=3&auction_queue=0&burl=http%3A%2F%2Frtb.exoclick.com%2Fnot.php%3Fzid%3D4853700%26data%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--&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=popunderAd&iabcat=IAB25&min_cpm=0.031214000000000006&placement_type_id=7&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0.13551839999999998&user_fp=0&pop_type=0&space_id=98769&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ssp=3756&rc=0&url=https%3A%2F%2Fs.optnx.com%2Fcimp.php%3Fdata%3DTVRZM01UazBNREEzTW54aVl6WXdZVGRoTUdZek56VTFPV1ZrWmpkaE1USTVNakpqWkRNNU1qVTRNQS0tfGh0dHA6Ly93d3cucGVyZmVjdGdpcmxzLm5ldC90b3AvbW9udGgvP3N1Yl9pZD0yMzQwNjY0fGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8M3R4eHguY29tfDQ0MjY5OXw2NjYxNzN8OTc4NDUwfDQ4NTM3MDB8MTA0fDIzNDA2NjR8MTk4ODgwNzh8NDB8M3wwfDB8MjUzNDR8MHwxOHw4MHxFVVJ8VVNEfDAuOTQxMXwxfDIyfHwxfE5PUnx8ODh8MnwxfHx8OGIyNjcwOTY1NDk5ODQ5MTlkNjQ5YzRjMjY1NDk2ZTl8MXwwfDN0eHh4LmNvbXwwfDMxNzE2fDQ1MTc4fDAuMDR8MXwwfGV4Y2hhbmdlX2xpbmt8MHwwfDB8LTF8MHwwfHx8MHwwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMHx8T0t8ZjIwMjMyMjQ5MGVkMGE4M2ZiYTM4Y2Y4NjdmZWNjMGE-&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder/in/click/?mid=8740709312887406522&pid=0&site=91749&sc=NO&usage_type=DCH&subid=1071940612&sid=0&cid=14252&price=0&is_cpm=1&cpm=0.13551839999999998&ecpm=0.121031179478784&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=3txxx.com&hostname=auc-popunder-hz-0&site_id=0&spot_id=98769&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=3&auction_queue=0&burl=http%3A%2F%2Frtb.exoclick.com%2Fnot.php%3Fzid%3D4853700%26data%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--&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=popunderAd&iabcat=IAB25&min_cpm=0.031214000000000006&placement_type_id=7&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0.13551839999999998&user_fp=0&pop_type=0&space_id=98769&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ssp=3756&rc=0&url=https%3A%2F%2Fs.optnx.com%2Fcimp.php%3Fdata%3DTVRZM01UazBNREEzTW54aVl6WXdZVGRoTUdZek56VTFPV1ZrWmpkaE1USTVNakpqWkRNNU1qVTRNQS0tfGh0dHA6Ly93d3cucGVyZmVjdGdpcmxzLm5ldC90b3AvbW9udGgvP3N1Yl9pZD0yMzQwNjY0fGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8M3R4eHguY29tfDQ0MjY5OXw2NjYxNzN8OTc4NDUwfDQ4NTM3MDB8MTA0fDIzNDA2NjR8MTk4ODgwNzh8NDB8M3wwfDB8MjUzNDR8MHwxOHw4MHxFVVJ8VVNEfDAuOTQxMXwxfDIyfHwxfE5PUnx8ODh8MnwxfHx8OGIyNjcwOTY1NDk5ODQ5MTlkNjQ5YzRjMjY1NDk2ZTl8MXwwfDN0eHh4LmNvbXwwfDMxNzE2fDQ1MTc4fDAuMDR8MXwwfGV4Y2hhbmdlX2xpbmt8MHwwfDB8LTF8MHwwfHx8MHwwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMHx8T0t8ZjIwMjMyMjQ5MGVkMGE4M2ZiYTM4Y2Y4NjdmZWNjMGE-&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0 HTTP/1.1
Host: mcpuwpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3txxx.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Sun, 25 Dec 2022 03:47:52 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://s.optnx.com/cimp.php?data=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-
X-Firefox-Spdy: h2
3txxx.com/video/10067/bigass-bigtits-hardcore-creampie/?skip=17&source=1071940612&sid=98769&katds_labels=&bf=0.031214&dw=1280&dh=1024&utm1=&utm2=&utm3=&utm4=
200 OK 1.6 kB URL HTTP/2 3txxx.com/video/10067/bigass-bigtits-hardcore-creampie/?skip=17&source=1071940612&sid=98769&katds_labels=&bf=0.031214&dw=1280&dh=1024&utm1=&utm2=&utm3=&utm4=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1358)
Hash 72b05f619823afaa7a803a461edc95c2
154a0448a48e6071bc29527a177301788474d024
aa6da4f622a109d14129743a76991180c57bffad830b01036c3bc5783b74d87f
GET /video/10067/bigass-bigtits-hardcore-creampie/?skip=17&source=1071940612&sid=98769&katds_labels=&bf=0.031214&dw=1280&dh=1024&utm1=&utm2=&utm3=&utm4= HTTP/1.1
Host: 3txxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kts.cvastico.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.23.1
date: Sun, 25 Dec 2022 03:47:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
content-encoding: gzip
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=TVRZM01UazBNREEzTW54aVl6WXdZVGRoTUdZek56VTFPV1ZrWmpkaE1USTVNakpqWkRNNU1qVTRNQS0tfGh0dHA6Ly93d3cucGVyZmVjdGdpcmxzLm5ldC90b3AvbW9udGgvP3N1Yl9pZD0yMzQwNjY0fGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8M3R4eHguY29tfDQ0MjY5OXw2NjYxNzN8OTc4NDUwfDQ4NTM3MDB8MTA0fDIzNDA2NjR8MTk4ODgwNzh8NDB8M3wwfDB8MjUzNDR8MHwxOHw4MHxFVVJ8VVNEfDAuOTQxMXwxfDIyfHwxfE5PUnx8ODh8MnwxfHx8OGIyNjcwOTY1NDk5ODQ5MTlkNjQ5YzRjMjY1NDk2ZTl8MXwwfDN0eHh4LmNvbXwwfDMxNzE2fDQ1MTc4fDAuMDR8MXwwfGV4Y2hhbmdlX2xpbmt8MHwwfDB8LTF8MHwwfHx8MHwwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMHx8T0t8ZjIwMjMyMjQ5MGVkMGE4M2ZiYTM4Y2Y4NjdmZWNjMGE-&p=https%3A%2F%2F3txxx.com%2F&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0
302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=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-&p=https%3A%2F%2F3txxx.com%2F&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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-&p=https%3A%2F%2F3txxx.com%2F&tested=1&check=0c1c5c30286e1db21a741e4b62c8b6e4&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.optnx.com/cimp.php?data=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-
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263a7c7e8b19400.423909683097012102%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 25 Dec 2022 03:47:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263a7c7e8b19400.423909683097012102%22%3B%7D; expires=Tue, 24 Dec 2024 03:47:52 GMT; path=; domain=.optnx.com; Secure; SameSite=none
c-tag=%7B%22tag-link%22%3A%22v3%7C%7CNOR%7C4853700%7C19888078%7C45178%7C%7C104%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C0%7C13%7C4096%7C0%7C0%7C1%7C0%7C0%7C1%7C63a7c7e8b19400.423909683097012102%7C8b267096549984919d649c4c265496e9%7C0%7C3txxx.com%7C1280x1024%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:52 GMT; path=/; domain=.optnx.com; Secure; SameSite=none
Location: http://www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
X-Robots-Tag: noindex, follow
www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
301 Moved Permanently 0 B URL HTTP/1.1 www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0- HTTP/1.1
Host: www.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 25 Dec 2022 03:47:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 25 Dec 2022 04:47:52 GMT
Location: https://www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77ee990f6824b50c-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 278 B IP
Hash aea71427c7f18d941d4c274e7e090a3b
626302f34694ea2f59412c169f6548a90bee551f
74bbcfb2e4150cb74ebe666fa8eb05f8a127f48a0c432d4e9897b778e58b2392
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4913
Cache-Control: max-age=108308
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:52 GMT
Etag: "63a6b8cb-116"
Expires: Mon, 26 Dec 2022 09:53:00 GMT
Last-Modified: Sat, 24 Dec 2022 08:31:07 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash aea71427c7f18d941d4c274e7e090a3b
626302f34694ea2f59412c169f6548a90bee551f
74bbcfb2e4150cb74ebe666fa8eb05f8a127f48a0c432d4e9897b778e58b2392
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4914
Cache-Control: max-age=108308
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a6b8cb-116"
Expires: Mon, 26 Dec 2022 09:53:01 GMT
Last-Modified: Sat, 24 Dec 2022 08:31:07 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
www.perfectgirls.net/images/close.gif
200 OK 1.5 kB URL HTTP/2 www.perfectgirls.net/images/close.gif
IP
File type GIF image data, version 89a, 77 x 16\012- data
Hash f5becc7a0e57d7b6b6bfd714ef452247
8f4939f1ca2ed1d4d200e189b42d2f7414ba19cc
719d4404fd0388260e1d0bcbf649e1de4efced2bc5a3d773cd819b7905372585
GET /images/close.gif HTTP/1.1
Host: www.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/gif
content-length: 1487
last-modified: Thu, 29 Sep 2022 08:40:34 GMT
etag: "63355a02-5cf"
expires: Wed, 18 Jan 2023 13:04:47 GMT
cache-control: public, max-age=2592000
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: HIT
age: 484986
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99106852b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.perfectgirls.net/images/rtaverified.gif
200 OK 2.3 kB URL HTTP/2 www.perfectgirls.net/images/rtaverified.gif
IP
File type GIF image data, version 89a, 88 x 31\012- data
Hash 95c46d46037bb33cf2ea8b770a739fc7
b9728a96f082409d12d1fd484c1f00f6217767e2
f1acb4582eba8d764ac3afde1c8990d405475e7f82b5545c5eaa4c919e76b04f
GET /images/rtaverified.gif HTTP/1.1
Host: www.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/gif
content-length: 2288
last-modified: Thu, 29 Sep 2022 08:40:34 GMT
etag: "63355a02-8f0"
expires: Wed, 18 Jan 2023 13:04:47 GMT
cache-control: public, max-age=2592000
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: HIT
age: 484986
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99107853b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.perfectgirls.net/images/asacp.gif
200 OK 2.3 kB URL HTTP/2 www.perfectgirls.net/images/asacp.gif
IP
File type GIF image data, version 89a, 88 x 31\012- data
Hash 5a1e5369af7a1484b18d4fe1f4f96456
f46672ef4ee02a8ff934fd58b2c98fa7d4106286
52c56602879dd7dfa92c2ed1f1a291a81a8ce36dc9690ce07cb7ebbe6fc83f1f
GET /images/asacp.gif HTTP/1.1
Host: www.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/gif
content-length: 2330
last-modified: Thu, 29 Sep 2022 08:40:34 GMT
etag: "63355a02-91a"
expires: Wed, 18 Jan 2023 13:04:47 GMT
cache-control: public, max-age=2592000
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: HIT
age: 484986
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99107854b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3fe4743f9a53cff9cc725d5da6fef2f
21f8c945671d492d20d3ae73535b44b80393bab4
27baee9b01e7877fd04130c0485cac8e3b14c17f8bfb5882d51cb470ea007db8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-FF594F6Q5N
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-FF594F6Q5N
IP
File type ASCII text, with very long lines (22462)
Hash dbe218a1133ecd7a11c6eda1b0a13743
59571d2b40ba7b09cc047812d02c4386036169ad
15595f9cdd1cd6503d840758120afe898e0335a0747af3be9f9beb31665d9ed2
GET /gtag/js?id=G-FF594F6Q5N HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Dec 2022 03:47:53 GMT
expires: Sun, 25 Dec 2022 03:47:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76823
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3fe4743f9a53cff9cc725d5da6fef2f
21f8c945671d492d20d3ae73535b44b80393bab4
27baee9b01e7877fd04130c0485cac8e3b14c17f8bfb5882d51cb470ea007db8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fc328f2e44d4ac962c03be665dbf6436
7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe
7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5974
Expires: Sun, 25 Dec 2022 05:27:27 GMT
Date: Sun, 25 Dec 2022 03:47:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fc328f2e44d4ac962c03be665dbf6436
7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe
7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5974
Expires: Sun, 25 Dec 2022 05:27:27 GMT
Date: Sun, 25 Dec 2022 03:47:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fc328f2e44d4ac962c03be665dbf6436
7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe
7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5974
Expires: Sun, 25 Dec 2022 05:27:27 GMT
Date: Sun, 25 Dec 2022 03:47:53 GMT
Connection: keep-alive
a.realsrv.com/nativeads-v2.js
200 OK 23 kB URL HTTP/2 a.realsrv.com/nativeads-v2.js
IP
ASN #60068 Datacamp Limited
Hash 2b160a412b51532848c3b14a74f229a7
2add20b9eac4df9eb3331cbbe5889585536a196e
c459de13e305ff073f1b84a74f0c175640c246d048c12b6aa1e865f58b2b6dea
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: application/javascript
etag: W/"3eb4c0066ecfc78c36ab17afea4"
expires: Fri, 23 Dec 2022 11:55:28 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1671947928
server: CDN77-Turbo
x-77-nzt: AblMCQ3JGTX/gQsAAA
x-77-nzt-ray: c0a4cc289302fde3e9c7a76306ea3105
x-cache: HIT
x-age: 2945
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56bb5c4c-562b-4642-9cd4-78925d347a41.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56bb5c4c-562b-4642-9cd4-78925d347a41.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61baabceea232439bd5bdcf7209a68a2
103c8d7b8ebf39b80c6a10dcacd078d693a22614
f8a62313eb2e816c1153ebf035f942d92ca128a8b027ef7181fdc6577cc2ff3d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56bb5c4c-562b-4642-9cd4-78925d347a41.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6663
x-amzn-requestid: 500e9324-327f-46ff-956e-31a44becd4f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq6x_GbOoAMF1Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a771a6-1068bb6a1ccbcf03146797aa;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:39:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IPMWc5x49l2HSw39btCrFj3UGKiFTLFTTS_iO8j8dBqBIKm4EuhnoQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:45:50 GMT
age: 21723
etag: "103c8d7b8ebf39b80c6a10dcacd078d693a22614"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 060f377fc7bb087a495ce5bb536d246f
64d4ff943882dd8f80e860505218e321d2951465
36566e692827354e1d91c9223e3c3ddc78de454b7a2ba3a4240f93869bc021ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10071
x-amzn-requestid: aa09cbf1-f89b-402c-b014-c17404a0676a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dn64WEBjIAMFdOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a63e9b-224e38700848e0817cd669f0;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 23:49:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -h9cEs7nEIfCGsovkUoFtSUkxLFY9EIGB2uPR1FrgENNTg308T3mIQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 02:15:50 GMT
age: 5523
etag: "64d4ff943882dd8f80e860505218e321d2951465"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe24b39e5-aa1e-4c82-bf1b-43f6492ecb7d.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe24b39e5-aa1e-4c82-bf1b-43f6492ecb7d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59583d85ae634ddba0650411ad64e5e2
840860ecc29bce0039ff2622724bde34e0888907
3a27e023ec7fd0ae01405191ec61cd3082def8f4d8eb9b9d5091ae68801ba860
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe24b39e5-aa1e-4c82-bf1b-43f6492ecb7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5582
x-amzn-requestid: 200b0084-b13c-4032-8741-7fbde21e16a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq6x_FhBoAMFT2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a771a6-141eae7b1b776163639ccef5;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:39:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IMfOjqpmUUaADDbY6kSO6BcDY6ypC_Yip4C8npLx0ew_V2Kn4UMogw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:45:50 GMT
age: 21723
etag: "840860ecc29bce0039ff2622724bde34e0888907"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa97f58bb-2d67-4ddc-978e-1bf0230a9e6f.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa97f58bb-2d67-4ddc-978e-1bf0230a9e6f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b9d7f2c9f926dd26c3a7046454c9cfb1
0906cee4a98ea4bd2ec1ded9ef9d782871f34f84
fbdd3fc928d8d0d0258d1c1fe018f79c856c9ee3ac2623f5d55f5b0e93db4d97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa97f58bb-2d67-4ddc-978e-1bf0230a9e6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4148
x-amzn-requestid: 68370910-934b-46b9-9d6f-e5b8c5003c1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq7HNEUrIAMFkHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7722d-3b68668640ef15eb015a4230;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:42:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4ErH3KTtbCJH4K8hZ53-pKvoMCKEoxpYooUlds4SJIKodzuKGmouQg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:47:19 GMT
etag: "0906cee4a98ea4bd2ec1ded9ef9d782871f34f84"
content-type: image/jpeg
age: 21634
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5871cd15-0f75-4ad9-94e1-c49304309213.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5871cd15-0f75-4ad9-94e1-c49304309213.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58dc35d76fcaa0b92a72bb8b945e88bd
6f869702ceae17bd541eadb5ff8c9aab1ca286a0
87fc3452f24c15bcc7166f5d4bd941c82508690c4b8e66a0d3adcf65c48d276b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5871cd15-0f75-4ad9-94e1-c49304309213.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10560
x-amzn-requestid: 1cc18aa1-97fb-4bcc-8317-a4e580edf209
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dUnAnH7moAMFVgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e8536-235558195bbdfeb47e68d0d0;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 03:12:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iBrSFwqV-LCUxqMPy4PxB_vhwFSv2MGvQKAwBigbli9nAZvhCn14HA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:47:19 GMT
age: 21634
etag: "6f869702ceae17bd541eadb5ff8c9aab1ca286a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=3107540&cookieconsent=true&&p=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
200 OK 5.0 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=3107540&cookieconsent=true&&p=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (9150), with no line terminators
Hash 00f8098efebbd16f293abc02b10d55b9
4c37acf7a5908c7709e7f1b3d3f40cfa9dc35622
ca58e4af98d79a058321edf0731065e996724b271ae0c86d3e50d2c8e1de984d
GET /splash.php?native-settings=1&idzone=3107540&cookieconsent=true&&p=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0- HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perfectgirls.net
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.perfectgirls.net
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263a7c7e9355dd0.171991103055267280%22%3B%7D; expires=Tue, 24 Dec 2024 03:47:53 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxamxeasxoxgeicmmsxaeenxgxamxlceemsgeimacslbecnxgxaaabssxamgeislsaroornxgxamxlemscageicxbmsbxcnxgxamxlxxmxbgeioslmrxlrnxgxamxbrsoclgeiccmmlmlcnxgxamxcobxbegeialbsereanxgxamxcobxbegeioslmrxbrnxgxamxlxxmomgeicxbmsbcenxgxamxmossmcgeioslmrxlsnxgxamxlceemsgeicxbmsbocnxgxamxlxxmomgeicxbmsboenxgxamxbrsoclgeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxamxmsceoegeiccmmlleanxgxamemxemcbgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamxbloxalgeioslmrxbmnxgxamxlxxmxbgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxamxcbsalogeimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamxcbsalogeimcclsxconxgxamxlxxmomgeimcclsxmenxgxamxlxxmomgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxamxsclxoageimcclsxbcnxgxamebscormgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamxleexsrgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamxmlexlxgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxamxeeslemgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxamebscormgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxamxmlexlxgeimcclselenxgxamebscormgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxamxxallxageimrblxosonxgxaalsbbboageimcclsxmanxgxamxcbsalogeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxamxsrcllegeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageimmccrbeanxgxamxbrsoclgeimmccrlacnxgxamxlemscageimrblxeoenxgxamecrasabgeimmccrlaonxgxamxbrsoclgeimmccrbxenxgxamxcobxbegeimmccrlaenxgxamxbloxalgeimmccrbebnxgxamxlemscageiclsmrrmenxgxameaeoremgeiclsmarronxgxameaeoremgeimrblelxanxgxameacaclmgeicaormbabnxgxamemsarmegeicaormlsanxgxamemsarmegeicaormbconxgxamemsarmegeicaormblonxgxamemsarmegeimaecomcbnxgxamebscormgeimrblxoebnxgxamebscormgeimrblxoconxgxamxeasxoxgeimaecobebnxgxamxeasxoxgeimaecomrcnxgxamxeasxoxgeicaormlrenxgxamxxxmscageicaormbaanxgxamxxxmscageicaormblanxgxamxxxmscageimrblxxaonxgxamxxallxageimrblxxbcnxgxamxxallxageimaecobxbnxgxamxxallxageiabeocmcenxgxamxslmbbcgeimmbsamsonxgxamxambsoageimmbsamoonxgxamxmscacsgeimmbsamsenxgxamxmlexlxgeimmoabamcncgxamxbrsamsgxcceimmooobronxgxamxbrmbllgxcceimmooobrbnxgxamxbrmbllgxcceimaooblebnogxamxbrmbllgxcceimsacexoonxgxamxbrmbllgxcceicloaxxmenxgxamxbaerlmgxcceixaoosscrnxgxamxbaerlbgxcceicxmecmcanxgxamxbaerlbgxcceimeembecenxgxamxbaerlbgxcceicloaecocnxgxamxbaearogxcceimaoolcoonxgxamxbaeaamgxcceimmbscaoanxgxamxbaxcbmgxcceimeelaclonxgxamxbaxcbmgxcceimeelaclcnxgxamxbaxcbmgxcceimeelaclanxgxamxbaxcbmgxcceimeembescnxgxamxbaobsbgxcceimxxerreonxgxamxbacrxsgxcceialaroxrcnxgxamxbmosxlgxcceimexexabbnxgxamxbmosoxgxcceimxlbmxbbnogxamxbmobrsgxcceimeembesonxgxamxbmobrsgxcceimaoobrbcnsgxamxbmmrsogxcceimaooloranxgxamxbbsxxbgxcceimrbleaebnxgxamxbbaxllgxcceicmarxbbonsgxamxbbaaemgxcceimclsaoxbncgxamxbbbxbrgxcceimaoobrbansgxamxbbbomogxcceialrexeoonxgxamxbblosmgxcceimrxccosansgxamxbblosmgxcceialrexexbnxgxamxbblosmgxcceimmboeamancgxamxbblosmgxcceimmbcaacbnogxamxbblosmgxcceimmbamlaonxgxamxbblosmgxcceialbbebsbnxgxamxbblosmgxcceimmraexoenxgxamxbblolcgxcceimmraexxcnxgxamxbblolcgxcceimmraexxanxgxamxbblolcgxcceimxlbalscnogxamxbloxalgxcceimmbsamxanxgxamxbloxalgeiclmlmxobnxgxamxblocabgxcceialsxlrlonxgxamxblocabgxcceimrbxracbnxgxamxbloblegxcceicloaxxaanxgxamxbloblegxcceimmbcaacanxgxamxblslllgxcceimxlbmoscnsgxamxblaexogxcceimcssmlronsgxamxblaexogxcceimxlbmosonogxamxblaeaagxcceimxxerrxenxgxamxblaeaagxcceimcoaxmxcnrgxamxblaeaagxcceimxxrecsanxgxamxblaxlsgxcceiaaxcambbnxgxamxblaxlsgxcceimmbamlacnxgxamxblaxlsgxcceimmbbeoeonxgxamxblaxlrgxcceixbblrmlanxgxamxblambxgxcceimxeemlxensgxamxblbarogxcceimxeemlxcnxgxamxblbmccgxcceimxeoxsacnrgxamxleexsrgxcceimrxccoscncgxamxleexsrgxcceicloaxxmonxgxamxleexsagxcceislmbesllnxgxamxlemscagxoaeimxlbmxlenogxamxlxxmxbgxcceimrxccosonsgxamxlxxmxbgxcceimrxccosensgxamxlxxmxlgxcceixaoossalnxgxamxlocalegxcceicxexraernxgxamxlocalegxcceimxlbalcenogxamxlocalegxcceimmaxobbenxgxamxlocbbrgxcceimmaxobacnxgxamxlocbbrgxcceimxlbmosancgxamxloclcrgxcceimrmaobxanogxamxlorxrrgxcceimaalslbanogxamxlorxrrgxcceimxxerreanxgxamxlorxrrgxcceimaalslbbnagxamxlorxrrgxcceimcssmlrenrgxamxlorxrrgxcceimxeoxsbenxgxamxlorxrrgxcceirreacmsbnxgxamxlorxrrgxcceimxxerrebnxgxamxlorxmmgxcceimxlbmxlonxgxamxlorxmmgxcceicloaxxabnxgxamxlobbosgxcceimrlslsbbnxgxamxlseorogxcceimcoaxmxonsgxamxlscmbmgxcceimasbmxconxgxamxlsaaeogxcceimaoobbebnxgxamxlslmcegxcceimxlbmosensgxamxlslmcegxcceimxlbmxlcnxgxamxlceemsgxcceimcssmlrcnxgxamxlceemsgxcce; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C3107540%7C71987194%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C3107540%7C74337954%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C3107540%7C23975193%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C3107540%7C47731600%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263a7c7e9355dd0.171991103055267280%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C3107540%7C47731600%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A65528%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-24%22%3B%7D%7D; expires=Mon, 25 Dec 2023 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ads.realsrv.com/tag_gen.js
200 OK 5.5 kB URL HTTP/2 ads.realsrv.com/tag_gen.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (10205), with no line terminators
Hash 2bff3a788f054132f7d4510e8d7afc9e
4e710dbc9378c029108f6bf7a72bc8e0d579a98f
bc3bfaad36d6392ee208604cc37c0c52c9843a573a8c9fcefb3d0e1707bea9fc
GET /tag_gen.js HTTP/1.1
Host: ads.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: application/javascript
etag: W/"a56c0470b9aa925085e51a6271a"
expires: Fri, 23 Dec 2022 11:55:37 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1671947987
server: CDN77-Turbo
x-77-nzt: AblMCQ0DZeX/RgsAAA
x-77-nzt-ray: c0a4cc289302fde3e9c7a763d28f4906
x-cache: HIT
x-age: 2886
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=2608957&cookieconsent=true&&p=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
200 OK 4.7 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=2608957&cookieconsent=true&&p=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (9125), with no line terminators
Hash 64025f40b6fad51ee87ec71d94458590
ecc7dd6f78e9d888b7d57b32ceae6c7100a4918b
c496433bd2308b956441afadb83cfe4f31a2d8838d3daab7ecb36c69e7c1f880
GET /splash.php?native-settings=1&idzone=2608957&cookieconsent=true&&p=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0- HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perfectgirls.net
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.perfectgirls.net
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263a7c7e949a023.08330385682941647%22%3B%7D; expires=Tue, 24 Dec 2024 03:47:53 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C2608957%7C77445960%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C2608957%7C23975187%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C2608957%7C77445808%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C2608957%7C41873820%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7Cc685a9defe24b24ba92c5a8f72d6a140%7C0%7Cperfectgirls.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 26 Dec 2022 03:47:53 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.exdynsrv.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A65528%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-24%22%3B%7D%7D; expires=Mon, 25 Dec 2023 03:47:53 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.opoxv.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
200 OK 20 B URL HTTP/1.1 s.opoxv.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A65528%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-24%22%3B%7D%7D; expires=Mon, 25 Dec 2023 03:47:53 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash aa8dbfc3af587bd0a1967ccf802acea2
d2a827ebc09cb83b20a52ab42f23ee5517cbf947
c1798f8af7ceae437c59908c5d52d79c756a1460bf116bd26e0f7b62635dd84f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1564
Cache-Control: max-age=90205
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a67f2a-116"
Expires: Mon, 26 Dec 2022 04:51:18 GMT
Last-Modified: Sat, 24 Dec 2022 04:25:14 GMT
Server: ECS (amb/6B8B)
X-Cache: HIT
Content-Length: 278
cdn-z4.perfectgirls.net/thumbs/861/157/thumb20.1.jpg
200 OK 8.7 kB URL HTTP/2 cdn-z4.perfectgirls.net/thumbs/861/157/thumb20.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 98b81ed38992f6d41624209b7e997311
fb71e13a7fe4def958246c32488e637b5578b265
7df77e1d0694ed27e11d81ec45f6ad31663d5fea9c892837af22e23ff223e106
GET /thumbs/861/157/thumb20.1.jpg HTTP/1.1
Host: cdn-z4.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 8748
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "637c7b7c-222c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 22 Nov 2022 07:34:20 GMT
cf-cache-status: HIT
age: 1971441
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99136ba7b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 53c02f90f1bef651e34c84775f5b1bd2
9e98867b67458b7eb8f0d0c846650a0d4cbb3390
4205270318079fa763a1c9669ac763c515dd6c2210578ec5d1a5fb9934f65e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3585
Cache-Control: max-age=95431
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a68bb0-117"
Expires: Mon, 26 Dec 2022 06:18:24 GMT
Last-Modified: Sat, 24 Dec 2022 05:18:40 GMT
Server: ECS (amb/6B8B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 53c02f90f1bef651e34c84775f5b1bd2
9e98867b67458b7eb8f0d0c846650a0d4cbb3390
4205270318079fa763a1c9669ac763c515dd6c2210578ec5d1a5fb9934f65e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4158
Cache-Control: max-age=96005
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a68bb0-117"
Expires: Mon, 26 Dec 2022 06:27:58 GMT
Last-Modified: Sat, 24 Dec 2022 05:18:40 GMT
Server: ECS (amb/6B7E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 53c02f90f1bef651e34c84775f5b1bd2
9e98867b67458b7eb8f0d0c846650a0d4cbb3390
4205270318079fa763a1c9669ac763c515dd6c2210578ec5d1a5fb9934f65e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3338
Cache-Control: max-age=95185
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a68bb0-117"
Expires: Mon, 26 Dec 2022 06:14:18 GMT
Last-Modified: Sat, 24 Dec 2022 05:18:40 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 53c02f90f1bef651e34c84775f5b1bd2
9e98867b67458b7eb8f0d0c846650a0d4cbb3390
4205270318079fa763a1c9669ac763c515dd6c2210578ec5d1a5fb9934f65e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5603
Cache-Control: max-age=97450
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a68bb0-117"
Expires: Mon, 26 Dec 2022 06:52:03 GMT
Last-Modified: Sat, 24 Dec 2022 05:18:40 GMT
Server: ECS (amb/6BB4)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 53c02f90f1bef651e34c84775f5b1bd2
9e98867b67458b7eb8f0d0c846650a0d4cbb3390
4205270318079fa763a1c9669ac763c515dd6c2210578ec5d1a5fb9934f65e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3597
Cache-Control: max-age=95444
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a68bb0-117"
Expires: Mon, 26 Dec 2022 06:18:37 GMT
Last-Modified: Sat, 24 Dec 2022 05:18:40 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
cdn-z3.perfectgirls.net/thumbs/861/417/thumb8.1.jpg
200 OK 7.5 kB URL HTTP/2 cdn-z3.perfectgirls.net/thumbs/861/417/thumb8.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 676x675, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 50c8f4307e9ee224e711eff41c99c795
7aff92af313576c8dfa36721cff8025289c84f1b
1679a8b6a1c2e23d557af399dafae63f61e9c267e22aa0fa42b4f90a0ad5c3a7
GET /thumbs/861/417/thumb8.1.jpg HTTP/1.1
Host: cdn-z3.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 7503
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "637decbd-1d4f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 23 Nov 2022 09:49:49 GMT
cf-cache-status: HIT
age: 1886379
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee9913e8780b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z3.perfectgirls.net/thumbs/859/684/thumb14.1.jpg
200 OK 14 kB URL HTTP/2 cdn-z3.perfectgirls.net/thumbs/859/684/thumb14.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 7cadb0058a41cc7ec63908a2dc57a0b7
dd509b687cf6a16eeed5b4bc4d325be42f494ac4
e6930fe44ead5fbc69b723343879b51ccc7aee1be8824d674ee0fcced4f63f02
GET /thumbs/859/684/thumb14.1.jpg HTTP/1.1
Host: cdn-z3.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 13664
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "63723910-3560"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 14 Nov 2022 12:48:16 GMT
cf-cache-status: HIT
age: 882357
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee9913f87c0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z4.perfectgirls.net/thumbs/859/876/thumb14.1.jpg
200 OK 12 kB URL HTTP/2 cdn-z4.perfectgirls.net/thumbs/859/876/thumb14.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 1d4056693fae9584d9aa00c36438dc30
ee81fe5c2c2eb2825d812341c7d8927fd4ad54b2
6fb0a648241bed5152a58b2d06b9521e27e85f7bffbab3731a5b7cf80ec12fc8
GET /thumbs/859/876/thumb14.1.jpg HTTP/1.1
Host: cdn-z4.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 12466
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "63735f6c-30b2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 15 Nov 2022 09:44:12 GMT
cf-cache-status: HIT
age: 2575565
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99140bdfb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z3.perfectgirls.net/thumbs/860/499/thumb8.1.jpg
200 OK 9.5 kB URL HTTP/2 cdn-z3.perfectgirls.net/thumbs/860/499/thumb8.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 800f039acffecc1c0611d543aa7596f3
528329219f8dd48b84f1280a6f66e4fd3f7e81de
436ca1c659118c96507e4e9bc99ede0e906478f5a7b8a63eb09a226fb4019088
GET /thumbs/860/499/thumb8.1.jpg HTTP/1.1
Host: cdn-z3.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 9534
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "63775b9a-253e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Fri, 18 Nov 2022 10:16:58 GMT
cf-cache-status: HIT
age: 2320769
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee9913f87e0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z3.perfectgirls.net/thumbs/859/735/thumb14.1.jpg
200 OK 12 kB URL HTTP/2 cdn-z3.perfectgirls.net/thumbs/859/735/thumb14.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash f6079a13a5b8b50e7145fbf1baced8dc
98339e1ab82b834fab021dca2615e0392a9d610c
cf63afda4c40c514060b6cedf063a7dd36efa6afd75bf73d344b11d14c782fdc
GET /thumbs/859/735/thumb14.1.jpg HTTP/1.1
Host: cdn-z3.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 12161
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "63733ed0-2f81"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 15 Nov 2022 07:25:04 GMT
cf-cache-status: HIT
age: 2578760
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee991418850b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ca875dd225209f03ff9f8bd0ed3fb340
e5a03a0de7946da8f3addb6953ce7729b88bb970
ebdbf4e12254b7fa39284619718081f0443ebb4875518cad22d6cb2a1b12067b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3476
Cache-Control: max-age=169519
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a7ad84-116"
Expires: Tue, 27 Dec 2022 02:53:12 GMT
Last-Modified: Sun, 25 Dec 2022 01:55:16 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash aa8dbfc3af587bd0a1967ccf802acea2
d2a827ebc09cb83b20a52ab42f23ee5517cbf947
c1798f8af7ceae437c59908c5d52d79c756a1460bf116bd26e0f7b62635dd84f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1372
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a67f2a-116"
Last-Modified: Sun, 25 Dec 2022 03:25:01 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
cdn-z4.perfectgirls.net/thumbs/859/645/thumb8.1.jpg
200 OK 8.6 kB URL HTTP/2 cdn-z4.perfectgirls.net/thumbs/859/645/thumb8.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 406a323a59d8d48ce41305679c33aabc
79e9fc7c0c23b2fca480410f94e4bfbc8a108d32
73a3990a521b2f6b42df4e2c0ae0cc19aca4fad37f3a982c0a3d53b9fd34d74e
GET /thumbs/859/645/thumb8.1.jpg HTTP/1.1
Host: cdn-z4.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 8583
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "637230a4-2187"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 14 Nov 2022 12:12:20 GMT
cf-cache-status: HIT
age: 2664270
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99143bebb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z1.perfectgirls.net/thumbs/859/577/thumb6.1.jpg
200 OK 13 kB URL HTTP/2 cdn-z1.perfectgirls.net/thumbs/859/577/thumb6.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 6b4582f23714bea6950a4a6cf6d34eca
24d40760c5f9314f0867275087ebc64435f1c8fc
c831ede0fc9d32ecaa7089e1db8d8f610b4c4aa5a421108ec42863be09865c57
GET /thumbs/859/577/thumb6.1.jpg HTTP/1.1
Host: cdn-z1.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 12628
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "637205cb-3154"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 14 Nov 2022 09:09:31 GMT
cf-cache-status: HIT
age: 1591599
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99143a86b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z3.perfectgirls.net/thumbs/859/725/thumb14.1.jpg
200 OK 9.3 kB URL HTTP/2 cdn-z3.perfectgirls.net/thumbs/859/725/thumb14.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash d6f1bdace965df405963bf51e68c320d
7969916c19e300bf64c04a4329e355b8cfdb83d0
d1900266866fd4e22ff36c0943f50e01f83c593e66434db529b243fcc53651a9
GET /thumbs/859/725/thumb14.1.jpg HTTP/1.1
Host: cdn-z3.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 9315
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "637330d6-2463"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 15 Nov 2022 06:25:26 GMT
cf-cache-status: HIT
age: 1978293
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee9914389c0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-z1.perfectgirls.net/thumbs/862/386/thumb14.1.jpg
200 OK 10 kB URL HTTP/2 cdn-z1.perfectgirls.net/thumbs/862/386/thumb14.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 392cef422d54714f6a4e76005f94752c
c53afddb6163e4ec77efefe38470ae9682c077a0
eba90bbda6bf6a1bdd2501f79c13cff36ada7cc29afbac8da94c381ea4c0459c
GET /thumbs/862/386/thumb14.1.jpg HTTP/1.1
Host: cdn-z1.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 10188
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "63846989-27cc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 28 Nov 2022 07:55:53 GMT
cf-cache-status: HIT
age: 1454881
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99143a87b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ca875dd225209f03ff9f8bd0ed3fb340
e5a03a0de7946da8f3addb6953ce7729b88bb970
ebdbf4e12254b7fa39284619718081f0443ebb4875518cad22d6cb2a1b12067b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5492
Cache-Control: max-age=171535
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a7ad84-116"
Expires: Tue, 27 Dec 2022 03:26:48 GMT
Last-Modified: Sun, 25 Dec 2022 01:55:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
s3t3d2y8.afcdn.net/library/475567/cc7211683ae26562c2df637755f311868f37c8ea.jpg
200 OK 25 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/475567/cc7211683ae26562c2df637755f311868f37c8ea.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash dbe31828ea0277ab9845bf67aa749927
cc7211683ae26562c2df637755f311868f37c8ea
6499cca4ce115e6dcb44a71342a5c705f938fbffbe5c410b55e60051a417b917
GET /library/475567/cc7211683ae26562c2df637755f311868f37c8ea.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 25056
last-modified: Thu, 30 Mar 2017 09:55:25 GMT
etag: "58dcd60d-61e0"
expires: Fri, 30 Jun 2023 14:29:46 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195223
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1b4y//0irpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a7632e803926
x-cache: HIT
x-age: 15280850
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/475567/69b2303da4a8f93b7196a0a654761b88c1046277.webp
200 OK 5.1 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/475567/69b2303da4a8f93b7196a0a654761b88c1046277.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3dd9401b6e3a4397dd4ceeef43f38526
69b2303da4a8f93b7196a0a654761b88c1046277
31592e858cd88332175200810163e596ece171f3be0177da15a0b8d5e6bd9190
GET /library/475567/69b2303da4a8f93b7196a0a654761b88c1046277.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 5112
last-modified: Wed, 03 Nov 2021 16:02:32 GMT
etag: "6182b298-13f8"
expires: Fri, 30 Jun 2023 14:34:48 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195242
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0sbGL/vyrpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a7630df43e26
x-cache: HIT
x-age: 15280831
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-z2.perfectgirls.net/thumbs/859/947/thumb22.1.jpg
200 OK 5.9 kB URL HTTP/2 cdn-z2.perfectgirls.net/thumbs/859/947/thumb22.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 2bbfb2ea60dd52f225f14ddd41728c71
9674c2b8a9754699888697bd206eadc767162da5
1fb9296b5799212151ec46506666ea753884b3314d73fb9abca8b3e70ed335fb
GET /thumbs/859/947/thumb22.1.jpg HTTP/1.1
Host: cdn-z2.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 5887
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "63749999-16ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 16 Nov 2022 08:04:41 GMT
cf-cache-status: HIT
age: 2492213
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99146bffb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
200 OK 9.6 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 070a232d0b0e025bfc65d90c1f5ece91
b69b0ad953e27d2318d3b7783f89b2f03cac130e
bd774d7c7edcc81fd3f49a59ed1ef48868b2531bba2ee9762213e2b023f4c5de
GET /library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 9562
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-255a"
expires: Fri, 30 Jun 2023 11:09:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195383
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0I71//MirpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a763fbe34126
x-cache: HIT
x-age: 15280690
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/475567/5fa06b14f863c5871ec64dc23d26ca08efca32cf.webp
200 OK 6.9 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/475567/5fa06b14f863c5871ec64dc23d26ca08efca32cf.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a0ecebf0df7f6ad0b8c79e0e29e2db94
5fa06b14f863c5871ec64dc23d26ca08efca32cf
03ddf8fbacbfad0d201bb6e08e0c02e58a14c28bcb07d0178ee88c62def141d7
GET /library/475567/5fa06b14f863c5871ec64dc23d26ca08efca32cf.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 6890
last-modified: Wed, 03 Nov 2021 18:46:03 GMT
etag: "6182d8eb-1aea"
expires: Fri, 30 Jun 2023 11:12:54 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195247
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0ju2H/uirpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a7632d654426
x-cache: HIT
x-age: 15280826
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e456e1fcd5b9782e95a8a4beafdaa6f7
08383e72ee30f54920b69f036aa7050b9906cf65
652ef2a4170f9f3331fa3efbbf4f76a170be4d96c0b22a8ad23b490ccab9b534
GET /library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 10274
last-modified: Wed, 03 Nov 2021 19:29:43 GMT
etag: "6182e327-2822"
expires: Tue, 24 Oct 2023 13:33:05 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1702160426
server: CDN77-Turbo
x-77-nzt: AblMCQ3Ib/P/PxMUAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a76392ce4626
x-cache: HIT
x-age: 1315647
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 53c02f90f1bef651e34c84775f5b1bd2
9e98867b67458b7eb8f0d0c846650a0d4cbb3390
4205270318079fa763a1c9669ac763c515dd6c2210578ec5d1a5fb9934f65e0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3585
Cache-Control: max-age=95431
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a68bb0-117"
Expires: Mon, 26 Dec 2022 06:18:24 GMT
Last-Modified: Sat, 24 Dec 2022 05:18:40 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
s3t3d2y8.afcdn.net/library/676799/a8434536bee74a0f2e0dad6eeb7ce34c6b860c03.webp
200 OK 4.5 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/676799/a8434536bee74a0f2e0dad6eeb7ce34c6b860c03.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash adca33b56b764b0c5cee2bc5937f6a95
a8434536bee74a0f2e0dad6eeb7ce34c6b860c03
68101315421f073c64a0f568064df141b0df9de16438221bd4d2b340e5cc611c
GET /library/676799/a8434536bee74a0f2e0dad6eeb7ce34c6b860c03.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 4516
last-modified: Wed, 03 Nov 2021 19:32:37 GMT
etag: "6182e3d5-11a4"
expires: Fri, 30 Jun 2023 18:46:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195221
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2RxeL/1CrpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a7631d884926
x-cache: HIT
x-age: 15280852
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-z2.perfectgirls.net/thumbs/861/568/thumb10.1.jpg
200 OK 8.4 kB URL HTTP/2 cdn-z2.perfectgirls.net/thumbs/861/568/thumb10.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 258x145, components 3\012- data
Hash 1d5aa9d6c6a361a99be74c0ebcead9b2
f0287138326ee81a42360736d07131ed3506f22a
ab53942bb260baef7e9487f570b1b4d6ee2ae5ac354206879f8912799d404b9c
GET /thumbs/861/568/thumb10.1.jpg HTTP/1.1
Host: cdn-z2.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/jpeg
content-length: 8449
cache-control: max-age=315360000
cf-bgj: h2pri
etag: "637f32ef-2101"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Thu, 24 Nov 2022 09:01:35 GMT
cf-cache-status: HIT
age: 1799206
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ee99147c04b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/42630/4824f5533a06cb311c821e35cdde3c76875dac63.webp
200 OK 9.9 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/42630/4824f5533a06cb311c821e35cdde3c76875dac63.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 15ec53f409ca464dfadf7b8b27dd6a73
4824f5533a06cb311c821e35cdde3c76875dac63
7c8939d11e5538a36089e0064ecbe7590ff30156d85ea89e58dd0040d5cb1972
GET /library/42630/4824f5533a06cb311c821e35cdde3c76875dac63.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 9866
last-modified: Thu, 04 Nov 2021 08:59:57 GMT
etag: "6183a10d-268a"
expires: Fri, 30 Jun 2023 11:12:06 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195443
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3XJmT/9inpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a76333b8a828
x-cache: HIT
x-age: 15280630
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dca61ca44b9a87b631eb5200c12f234c
d35401b29d0c4fd1079651c0fde2f01f97ec11a4
bc0c8c5a132af93ccc2cfbc1784f2e67119a9c72e289b8ab502561e16be71b03
GET /library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 10254
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-280e"
expires: Fri, 30 Jun 2023 11:13:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195317
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3+KqH/dCrpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a7639ba9ac28
x-cache: HIT
x-age: 15280756
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/a0df5c23efcee52a99fe073a05b56d57e3f8a452.webp
200 OK 11 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/a0df5c23efcee52a99fe073a05b56d57e3f8a452.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 532d1e5a87c63c6b3b95dcfeaed2e9fa
a0df5c23efcee52a99fe073a05b56d57e3f8a452
44bd8c81a5015fb8eef901a20569b69dc421fcffc831263ff88ec087dd47b091
GET /library/140058/a0df5c23efcee52a99fe073a05b56d57e3f8a452.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:53 GMT
content-type: image/webp
content-length: 10738
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-29f2"
expires: Fri, 30 Jun 2023 11:27:16 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195356
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0LjIb/TSrpAA
x-77-nzt-ray: c0a4cc2832f5f9e5e9c7a76383c1af28
x-cache: HIT
x-age: 15280717
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ca875dd225209f03ff9f8bd0ed3fb340
e5a03a0de7946da8f3addb6953ce7729b88bb970
ebdbf4e12254b7fa39284619718081f0443ebb4875518cad22d6cb2a1b12067b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3476
Cache-Control: max-age=169519
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 03:47:53 GMT
Etag: "63a7ad84-116"
Expires: Tue, 27 Dec 2022 02:53:12 GMT
Last-Modified: Sun, 25 Dec 2022 01:55:16 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 25 Dec 2022 02:41:11 GMT
expires: Sun, 25 Dec 2022 04:41:11 GMT
cache-control: public, max-age=7200
age: 4002
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
syndication.exoclick.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
200 OK 20 B URL HTTP/1.1 syndication.exoclick.com/tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=2dfef899cc014c4da9c34cdcd68fa849 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A65528%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222022-12-24%22%3B%7D%7D; expires=Mon, 25 Dec 2023 03:47:53 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 923fc87ef9665d6585d04515fe6ab7ea
2f13234370396c9f415d4a6d760cc07e56f95cbb
757235bbc25002c0201764f9850c1a24df69fa391546f841f236c9496a01442f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 29 Dec 2022 01:39:23 GMT
ETag: "2f13234370396c9f415d4a6d760cc07e56f95cbb"
Last-Modified: Sun, 25 Dec 2022 01:39:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2459
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77ee99153d25b509-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 923fc87ef9665d6585d04515fe6ab7ea
2f13234370396c9f415d4a6d760cc07e56f95cbb
757235bbc25002c0201764f9850c1a24df69fa391546f841f236c9496a01442f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 29 Dec 2022 01:39:23 GMT
ETag: "2f13234370396c9f415d4a6d760cc07e56f95cbb"
Last-Modified: Sun, 25 Dec 2022 01:39:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2459
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77ee99153d2fb517-OSL
counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//www.perfectgirls.net/top/month/%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-;0.29933397417334706
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//www.perfectgirls.net/top/month/%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-;0.29933397417334706
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?r;s1280*1024*24;uhttps%3A//www.perfectgirls.net/top/month/%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-;0.29933397417334706 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Fri, 24 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
counter.yadro.ru/logo?45.5
200 OK 112 B URL HTTP/1.1 counter.yadro.ru/logo?45.5
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 31 x 31\012- data
Hash 98a76927439b5410e76c1bf53fb25c8d
9771bba323cc99e476704a355c41fc024f8353fd
94d2a6c67035f211268628841b8ebc0389929b3cdcadeb075a5ce633fbd3aeb4
GET /logo?45.5 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 25 Dec 2022 03:47:53 GMT
Content-Type: image/gif
Content-Length: 112
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
Expires: Sun, 24 Dec 2023 21:00:00 GMT
Strict-Transport-Security: max-age=86400
region1.google-analytics.com/g/collect?v=2&tid=G-FF594F6Q5N>m=2oebu0&_p=1777192424&cid=854226614.1671940071&ul=en-us&sr=1280x1024&_s=1&sid=1671940071&sct=1&seg=0&dl=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-&dt=Top%20videos%20of%20the%20last%20month%20%3A%3A%3A%20PERFECT%20GIRS&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-FF594F6Q5N>m=2oebu0&_p=1777192424&cid=854226614.1671940071&ul=en-us&sr=1280x1024&_s=1&sid=1671940071&sct=1&seg=0&dl=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-&dt=Top%20videos%20of%20the%20last%20month%20%3A%3A%3A%20PERFECT%20GIRS&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FF594F6Q5N>m=2oebu0&_p=1777192424&cid=854226614.1671940071&ul=en-us&sr=1280x1024&_s=1&sid=1671940071&sct=1&seg=0&dl=https%3A%2F%2Fwww.perfectgirls.net%2Ftop%2Fmonth%2F%3Fsub_id%3D2340664%26exffir%3DeyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-&dt=Top%20videos%20of%20the%20last%20month%20%3A%3A%3A%20PERFECT%20GIRS&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.perfectgirls.net
Connection: keep-alive
Referer: https://www.perfectgirls.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.perfectgirls.net
date: Sun, 25 Dec 2022 03:47:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
200 OK 0 B URL HTTP/2 www.perfectgirls.net/top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
IP
GET /top/month/?sub_id=2340664&exffir=eyJjIjoiMGMxYzVjMzAyODZlMWRiMjFhNzQxZTRiNjJjOGI2ZTQiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0- HTTP/1.1
Host: www.perfectgirls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 03:47:52 GMT
content-type: text/html; charset=utf-8
expires: Sun, 25 Dec 2022 03:57:52 GMT
cache-control: max-age=600, public
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77ee990fa824b512-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
198.134.116.30
95.211.229.247
94.130.197.134
93.184.220.29
104.22.7.84
185.76.9.16
88.212.201.198
95.101.11.115