r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11470
Expires: Sat, 14 Jan 2023 12:55:19 GMT
Date: Sat, 14 Jan 2023 09:44:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12303
Expires: Sat, 14 Jan 2023 13:09:12 GMT
Date: Sat, 14 Jan 2023 09:44:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 14 Jan 2023 08:48:53 GMT
content-type: application/json
age: 3316
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3042
Expires: Sat, 14 Jan 2023 10:34:51 GMT
Date: Sat, 14 Jan 2023 09:44:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rLQO8uGv9VPtQBsTGn14h2yCop4hJsE2rz61h37ZFzU90boErukITlVDcq/X3DJ+S6PISGu2EtA=
x-amz-request-id: 8BG5WNFBHQ82BX4F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 14 Jan 2023 08:54:53 GMT
age: 2956
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
igfap.com/flat-chested-hentai-girls-masturbating/
173.208.199.194301 Moved Permanently 178 B URL HTTP/1.1 igfap.com/flat-chested-hentai-girls-masturbating/
IP 173.208.199.194:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /flat-chested-hentai-girls-masturbating/ HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 14 Jan 2023 09:44:09 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://igfap.com/flat-chested-hentai-girls-masturbating/
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:09 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 14 Jan 2023 09:33:45 GMT
age: 625
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 92172d6765ceb73639fdfb1c05efc398
be069fb850378243fdc763bc25d6aeb3f73945de
eca5cba2814ae46a79f0f3a59ec166a0a047f180e69873b035bc55f6156308aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ECA5CBA2814AE46A79F0F3A59EC166A0A047F180E69873B035BC55F6156308AA"
Last-Modified: Wed, 11 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1621
Expires: Sat, 14 Jan 2023 10:11:11 GMT
Date: Sat, 14 Jan 2023 09:44:10 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6589
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 09:44:10 GMT
Last-Modified: Sat, 14 Jan 2023 07:54:21 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
igfap.com/flat-chested-hentai-girls-masturbating/
173.208.199.194200 OK 12 kB URL HTTP/1.1 igfap.com/flat-chested-hentai-girls-masturbating/
IP 173.208.199.194:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Hash 7e0b168c45303ca397983416b8496848
caa65a0d1701ae675e94c6c734b08c734dc24e77
c6400c9335aeed4a4a53aad6d4c2bd27d85c5e82657a661df57e0b6098c2c14c
GET /flat-chested-hentai-girls-masturbating/ HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding, Cookie
Cache-Control: max-age=3, must-revalidate
Content-Encoding: gzip
Proxcache: MISS
igfap.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
173.208.199.194200 OK 12 kB URL HTTP/1.1 igfap.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP 173.208.199.194:0
File type ASCII text, with very long lines (43771)
Hash 88f413500303dc21250157a6aa913a32
ca138ec102d96e6d7b30bf83b7dab60a16f0b5d6
65e072ca8d53bf38d5dde355a039a61f6c7204206a9a58ded75d2d2730cc0999
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:17:04 GMT
Vary: Accept-Encoding
ETag: W/"630b0860-15b64"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c2ced3d8693a7ab0849f14b172edc42c
c905360dbc60a13ed21bec4cdcd1245006ae4d22
cebdc862b8db90fc5233b7115a117a3ac6f5f24f5dd18134070e72256934f7e9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Jan 2023 02:35:29 GMT
Expires: Sat, 21 Jan 2023 02:35:28 GMT
Etag: "c905360dbc60a13ed21bec4cdcd1245006ae4d22"
Cache-Control: max-age=578477,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78956e7aacb91c0e-OSL
poweredby.jads.co/js/jads.js
185.94.236.253301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP 185.94.236.253:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
push.services.mozilla.com/
54.184.253.181101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.184.253.181:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PnLhw930MfnfHjlplDBmcA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GmqtgJm+hQ89DbZnHcsfgcnm3dM=
poweredby.jads.co/js/jads2.js
185.94.236.253200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP 185.94.236.253:0
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://igfap.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 21 Nov 2022 05:24:20 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"637b0b84-eae"
Content-Encoding: gzip
igfap.com/wp-content/plugins/elasticpress/dist/css/related-posts-block-styles.min.css?ver=3.3
173.208.199.194200 OK 585 B URL HTTP/1.1 igfap.com/wp-content/plugins/elasticpress/dist/css/related-posts-block-styles.min.css?ver=3.3
IP 173.208.199.194:0
File type ASCII text, with very long lines (698)
Hash 4a29f243de4db57d16a28456bf19954a
894346c1a950364903cca4273974e0153dfa3b2d
861c2ef18073d68121f761bcf826617adf97a2d54629efb8b9ef7670a3f7d09c
GET /wp-content/plugins/elasticpress/dist/css/related-posts-block-styles.min.css?ver=3.3 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 31 Oct 2022 11:39:46 GMT
Vary: Accept-Encoding
ETag: W/"635fb402-399"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-content/themes/catch-box/colors/dark.css
173.208.199.194200 OK 2.7 kB URL HTTP/1.1 igfap.com/wp-content/themes/catch-box/colors/dark.css
IP 173.208.199.194:0
Hash fef92fa86fc72ae45ac595bcdeabf9c6
ef46640e8684a86c8903ad021f488a132c2c82d7
5625d8fc13cf6a7248a01a2a6d0c817aeac1275cb3b05fe85b85b71bf9b5dcf2
GET /wp-content/themes/catch-box/colors/dark.css HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2016 05:33:09 GMT
Vary: Accept-Encoding
ETag: W/"56f77095-331d"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
173.208.199.194200 OK 4.2 kB URL HTTP/1.1 igfap.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 173.208.199.194:0
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:17:03 GMT
Vary: Accept-Encoding
ETag: W/"630b085f-2bd8"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
173.208.199.194200 OK 31 kB URL HTTP/1.1 igfap.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 173.208.199.194:0
File type ASCII text, with very long lines (65447)
Hash 7a6e4a1e4a67fac0cd39ca1dd1982f47
a8bf880e5db17a703293d5a3c92623a97d5a1df1
daf4bcb15594deb268cc05f030ccaf8dfe4acab417758dd16a6f3b2d86d2908f
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:17:03 GMT
Vary: Accept-Encoding
ETag: W/"630b085f-15db1"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/zakvaegyclhrss.php
173.208.199.194200 OK 11 kB URL HTTP/1.1 igfap.com/zakvaegyclhrss.php
IP 173.208.199.194:0
File type ASCII text, with very long lines (10335)
Hash fe51a4fbbd0dc1da58ac12fd245bcb01
35cbc86da6eff20fa67d37dd7b8ef2e6cce815b9
99585d63038584d919cce3f4c44318e3d8bd0a9900b88e9ae09f54326a8c2653
GET /zakvaegyclhrss.php HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-content/themes/catch-box/style.css?ver=6.0.3
173.208.199.194200 OK 15 kB URL HTTP/1.1 igfap.com/wp-content/themes/catch-box/style.css?ver=6.0.3
IP 173.208.199.194:0
File type ASCII text, with very long lines (1238)
Hash ba75c1743f4b8374b31cf465ebed8f13
4e71c7f838195b78c3f8a9e2166852d6a7cf71e3
1180159e1f512f81a8f72eb92fbf926f18e9008505a13e89461d0cb824bd00df
GET /wp-content/themes/catch-box/style.css?ver=6.0.3 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 25 May 2016 06:24:43 GMT
Vary: Accept-Encoding
ETag: W/"5745452b-121d9"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-content/themes/catch-box/genericons/genericons.css?ver=3.0.3
173.208.199.194200 OK 19 kB URL HTTP/1.1 igfap.com/wp-content/themes/catch-box/genericons/genericons.css?ver=3.0.3
IP 173.208.199.194:0
File type ASCII text, with very long lines (23046)
Hash a1e3c00c4103ba66396b30078217bd2a
8f3071e3cfe4738e05af9d54ce8a4552760c6f89
3640be4303a84e8a45705d9b4df77ad3e8e3ca8d174fac50ceefc55699d38097
GET /wp-content/themes/catch-box/genericons/genericons.css?ver=3.0.3 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Sep 2015 03:35:00 GMT
Vary: Accept-Encoding
ETag: W/"55e66e64-7945"
Expires: Sat, 06 Jan 2024 01:06:35 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-content/themes/catch-box/js/catchbox-menu.min.js?ver=1.1.0
173.208.199.194200 OK 492 B URL HTTP/1.1 igfap.com/wp-content/themes/catch-box/js/catchbox-menu.min.js?ver=1.1.0
IP 173.208.199.194:0
File type ASCII text, with very long lines (884), with no line terminators
Hash e391e1cbae8c303ca2a55ff05119b8aa
b5bdbd069f904709ad8caa72c0e27ee89525dbf3
16a3ab05b535f8f6c4b0c6aa152180d9747ad5bef0a892da62d687a4c8dcfa74
GET /wp-content/themes/catch-box/js/catchbox-menu.min.js?ver=1.1.0 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Sep 2015 03:35:02 GMT
Vary: Accept-Encoding
ETag: W/"55e66e66-374"
Expires: Sat, 06 Jan 2024 01:06:36 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
173.208.199.194200 OK 5.0 kB URL HTTP/1.1 igfap.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP 173.208.199.194:0
File type ASCII text, with very long lines (15660)
Hash 1b982d290af16dac5885f21a198aaa66
f847ca85d23c2f240938bbde0135f3de97925759
0b6e238cc0728a0bace390dfff472ff8bb5a5fd4714bcfcdac7c28621d67b8dc
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:17:03 GMT
Vary: Accept-Encoding
ETag: W/"630b085f-48b9"
Expires: Sat, 06 Jan 2024 01:06:36 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
Proxcache: HIT
igfap.com/wp-content/themes/catch-box/js/catchbox-scrollup.min.js?ver=20072014
173.208.199.194200 OK 314 B URL HTTP/1.1 igfap.com/wp-content/themes/catch-box/js/catchbox-scrollup.min.js?ver=20072014
IP 173.208.199.194:0
File type ASCII text, with very long lines (314), with no line terminators
Hash 84698d7b5677d2f1e41c2e2f19bf7160
fb6813c1cae29c0a53dbafae4404e2edeae9486d
a12f71f082077e3d3d451ea22d0fb337bda3ea71348a19ea960d7572fb8a25ed
GET /wp-content/themes/catch-box/js/catchbox-scrollup.min.js?ver=20072014 HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/javascript
Content-Length: 314
Connection: keep-alive
Last-Modified: Wed, 02 Sep 2015 03:35:02 GMT
ETag: "55e66e66-13a"
Expires: Sat, 06 Jan 2024 01:06:36 GMT
Cache-Control: max-age=31104000
Proxcache: HIT
Accept-Ranges: bytes
i0.wp.com/pm1.narvii.com/6547/65748bfd16f82ade57fb7a50eeef640c15f18078_hq.jpg
192.0.77.2200 OK 27 kB URL HTTP/2 i0.wp.com/pm1.narvii.com/6547/65748bfd16f82ade57fb7a50eeef640c15f18078_hq.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x595, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d47f13a2ddb07df3221ca502367b0cf5
0e360c0dcd63870f934b00764868b396986049cc
80f7ed1146fac7b487448ae10c33dfd5f1a225cbc293534def5715409129735a
GET /pm1.narvii.com/6547/65748bfd16f82ade57fb7a50eeef640c15f18078_hq.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: image/webp
content-length: 26558
last-modified: Wed, 31 Aug 2022 10:46:29 GMT
expires: Fri, 30 Aug 2024 22:46:29 GMT
cache-control: public, max-age=63115200
link: <http://pm1.narvii.com/6547/65748bfd16f82ade57fb7a50eeef640c15f18078_hq.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "8b9f8d2fdb4fd7d1"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
js.juicyads.com/jp.php?c=446433y2r256r2x2w28433c4&u=https%3A%2F%2Ftorrsexvid.com%2Fgallery.php%23igfap
143.204.55.76200 OK 94 kB URL HTTP/2 js.juicyads.com/jp.php?c=446433y2r256r2x2w28433c4&u=https%3A%2F%2Ftorrsexvid.com%2Fgallery.php%23igfap
IP 143.204.55.76:0
File type ASCII text, with very long lines (65533)
Hash 231ddb03c113d5b41eb5106e7683fc69
71318efab897d31211913d4f83c527a6c0d62ccf
c702095da3ff0f63a2b5b346633dacff7a0b6beee8263be46307f41a4ddaa3dc
GET /jp.php?c=446433y2r256r2x2w28433c4&u=https%3A%2F%2Ftorrsexvid.com%2Fgallery.php%23igfap HTTP/1.1
Host: js.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cache-control: max-age=900
date: Sat, 14 Jan 2023 09:40:51 GMT
expires: Sat, 14 Jan 2023 09:55:51 GMT
pragma: cache
server: nginx
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O4y0vs4Up8fkoWoP6SWuwIganT92KX2erA-hLxtq6azNBws0trQpGQ==
age: 199
X-Firefox-Spdy: h2
i0.wp.com/1.bp.blogspot.com/-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg
192.0.77.2302 Found 138 B URL HTTP/2 i0.wp.com/1.bp.blogspot.com/-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg
IP 192.0.77.2:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /1.bp.blogspot.com/-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/html
content-length: 138
location: https://1.bp.blogspot.com/-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg
x-nc: EXPIRED arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/diary.fc2.com/user/kazuharoom/img/2013_8/30.jpg
192.0.77.2200 OK 49 kB URL HTTP/2 i2.wp.com/diary.fc2.com/user/kazuharoom/img/2013_8/30.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 793x850, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9efc0fa0cfeb0c91841e24e61416e14b
b0fa235810f3b69060c4008c88983298c9b4d2b2
ec3d6ed2ad2fe76f4d8be994689c26641169e866031e41fb983d09ea3aef0af9
GET /diary.fc2.com/user/kazuharoom/img/2013_8/30.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: image/webp
content-length: 49128
last-modified: Fri, 06 Aug 2021 23:38:51 GMT
expires: Mon, 07 Aug 2023 11:38:51 GMT
cache-control: public, max-age=63115200
link: <http://diary.fc2.com/user/kazuharoom/img/2013_8/30.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "69c588e809f8cedd"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/gelbooru.com/images/a9/9b/a99bf669cc8bafc6d03503b38828f650.gif
192.0.77.2403 Forbidden 146 B URL HTTP/2 i1.wp.com/gelbooru.com/images/a9/9b/a99bf669cc8bafc6d03503b38828f650.gif
IP 192.0.77.2:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9fe3cb2b7313dc79bb477bc8fde184a7
4d7b3cb41e90618358d0ee066c45c76227a13747
32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
GET /gelbooru.com/images/a9/9b/a99bf669cc8bafc6d03503b38828f650.gif HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/html
content-length: 146
x-nc: MISS arn 8
X-Firefox-Spdy: h2
i2.wp.com/raizin.sakura.ne.jp/sblo_files/harukigenia/image/DSCN5699.JPG
192.0.77.2200 OK 182 kB URL HTTP/2 i2.wp.com/raizin.sakura.ne.jp/sblo_files/harukigenia/image/DSCN5699.JPG
IP 192.0.77.2:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, comment: "File written by Adobe Photoshop\250 4.0", progressive, precision 8, 983x867, components 3\012- data
Size 182 kB (182038 bytes)
Hash 83731cc42b53434a238edfe16d4cda89
baf163ade9ff291217167894a3f06181e5b7d7c9
8b61e12e76a4ea02badd9ae8ae3365075bd1ff9c5ab259e69d4242584c8cd522
GET /raizin.sakura.ne.jp/sblo_files/harukigenia/image/DSCN5699.JPG HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: image/jpeg
content-length: 182038
last-modified: Sat, 19 Nov 2022 23:49:45 GMT
expires: Tue, 19 Nov 2024 11:49:45 GMT
cache-control: public, max-age=63115200
link: <http://raizin.sakura.ne.jp/sblo_files/harukigenia/image/DSCN5699.JPG>; rel="canonical"
x-content-type-options: nosniff
etag: "4799230b47830063"
x-bytes-saved: 4527
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/static.standard.co.uk/s3fs-public/styles/story_medium/public/thumbnails/image/2012/01/03/09/article-1053363-02908BE600000578-280_468x784.jpg
192.0.77.2200 OK 32 kB URL HTTP/2 i2.wp.com/static.standard.co.uk/s3fs-public/styles/story_medium/public/thumbnails/image/2012/01/03/09/article-1053363-02908BE600000578-280_468x784.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 468x784, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 45f65d6647f3e99c6a8cb8e2be928325
148d85553b607367d161b35bc321692a9badaebc
d991108ae978d4d60385d256ba1c5656a7113d46984e008a39b944fb8bbe5b66
GET /static.standard.co.uk/s3fs-public/styles/story_medium/public/thumbnails/image/2012/01/03/09/article-1053363-02908BE600000578-280_468x784.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: image/webp
content-length: 32512
last-modified: Fri, 13 Jan 2023 23:49:57 GMT
expires: Mon, 13 Jan 2025 11:49:57 GMT
cache-control: public, max-age=63115200
link: <http://static.standard.co.uk/s3fs-public/styles/story_medium/public/thumbnails/image/2012/01/03/09/article-1053363-02908BE600000578-280_468x784.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "d0381c274fbfa846"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/touchfluffytail.org/wp-content/uploads/2015/03/footjob.jpg
192.0.77.2200 OK 159 kB URL HTTP/2 i2.wp.com/touchfluffytail.org/wp-content/uploads/2015/03/footjob.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x2500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 159 kB (159316 bytes)
Hash 6856fe86120e24b2b42b7a5db08f9335
0890060bd0d9298bd2687db85ceb2a7e7d7b8870
68b98f775dd1e3b5d6f5cd8822523dba75b157020ca3dd086ff2e1b71add2aee
GET /touchfluffytail.org/wp-content/uploads/2015/03/footjob.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: image/webp
content-length: 159316
last-modified: Wed, 28 Dec 2022 13:50:33 GMT
expires: Sat, 28 Dec 2024 01:50:33 GMT
cache-control: public, max-age=63115200
link: <http://touchfluffytail.org/wp-content/uploads/2015/03/footjob.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9248b12da49d8014"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.blockadsnot.com/sidy.js
185.76.9.21200 OK 10 kB URL HTTP/2 www.blockadsnot.com/sidy.js
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
Hash c673f28934fca6db747edd5dd3221a9a
0fcb672fc2c4546db87ac2ae097e88a1cb0c9e85
0ed5a939866801a64178228a716617f4824b75f2dedb8059d1432e366134c91a
GET /sidy.js HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: application/x-javascript
alt-svc: quic="185.76.9.20:443"; ma=2592000; v="44,43,39"
expires: Fri, 20 Jan 2023 21:54:11 GMT
access-control-allow-origin: *
link: <https://blockadsnot.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-accel-expires: @1674251651
server: CDN77-Turbo
x-77-nzt: AblMCRS1E1b/aKYAAA
x-77-nzt-ray: af585630190a91d56b79c263d1492b0b
x-cache: HIT
x-age: 42600
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
1.bp.blogspot.com/-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg
142.250.74.161200 OK 36 kB URL HTTP/2 1.bp.blogspot.com/-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 438x555, components 3\012- data
Hash 29eb45a624b969d6e6e488620ab02e9f
b56661fd2996487a249d095ae48f4ae1a3be0f91
eb4c04fa8a84da40f5f9e9c3b0fe2016824be15fa6e653dbae6525eb62e34940
GET /-YBlwMM8Tm_Q/UD4Ve_71ZeI/AAAAAAAAD1M/644UACaPTxY/s1600/top-20-pettanko-anime-girls-002.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://igfap.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vf53"
expires: Sun, 15 Jan 2023 09:44:11 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="top-20-pettanko-anime-girls-002.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 14 Jan 2023 09:44:11 GMT
server: fife
content-length: 36133
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
qgxbluhsgad.com/get/1830127?zoneid=1830127&jp=_cl4aisl25uw4ctz69k9xxn&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=5457711468313290
62.122.171.6200 OK 1.7 kB URL HTTP/2 qgxbluhsgad.com/get/1830127?zoneid=1830127&jp=_cl4aisl25uw4ctz69k9xxn&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=5457711468313290
IP 62.122.171.6:0
Hash 674c7b105f5b4654b08e76378b7b2918
9c25088f4ab6082ebf75f267e18367e3ac012c90
1045c4a500ca9dd705713c7b6a72a4c3d5c8939b09d64fa38665e06b501160f6
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1830127?zoneid=1830127&jp=_cl4aisl25uw4ctz69k9xxn&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=5457711468313290 HTTP/1.1
Host: qgxbluhsgad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=230114044431f19f1cd5da483aa5b79d4ab9; Path=/; Expires=Sun, 14 Jan 2024 09:44:11 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1830127/?pb=8bebc187d7c41c6e99191ecbb6c808751673696651&psp=AO08Cu75n1JuRN95AasYWk7pXMYtVRinXxY0AhHpUxOlaVRzj5PcOmaxEjrPbZo-7dPc1n9hykqSyoJ_f6b0UxSi9RQ9oUm3EpVI45OgZ2jVWFdEFCBwCaHHSCdzO3PhVorp7asUnESNSA9sjsPSkTi0NkKOYH5y4bS5MokZpFDqi0x8gjGKg4cRlxRjLp4ZUQe2Q0kDRlPEBpYY96nTH-HdbGCffR82Z373r10WxdCAGtM6jklkZXG0ytUo37JEKBffbsmOzSSIAD4QKh9MpvqQyBEQGKJyMBQ186Gk8Ws0i2csPITfXGiqvgv1uXGWYCw-nFrCtA1b1Mko2SUwjjhijC1gKp2o5NTyEt3_cPSWhhKQowXJ-Ml2Y3I_Rl-mH3niqebj8bYxcZmUaikPlW4l5CE1W8nTwm18SAc8GMnFxMgwNYPbOghq4d2-ZUdj0hPp54do4xaELAtw73OVMidC2mZgMMS7-QN1eo_77W_ubDdAOsW2YMgyw80lcLrcwuyzRxjma16_ldu5rN8uxwi28513f4GL3NpjZnIXZzXXF1sa9V3uP8byBrcd5W526fvr9zyp1U9bh6KXm8-fS0Ef4Qi5zGQOzDuh7nS2bcndOvefUC5w9vHXSvicsxQko0YKak68A_L0k8Uv_JmJKsoEPxsixn_51XZ1iIVsAXpfOSWauwLOjIRPpTX0Vrar08n7rvrK_dm9dmrbiu_zGUD3h63jH8RgInrgM9bX4ktcNXF7b-9MuPoPGsZl2aRJWQ1POqL6TTK375_opwWIvEklEzluHxYlOof-9OvMk1VsDiP-TiuP0r9dWoR-rhO9fahBTHFI2Fr8GcIIdQTzy9ZCzMWjkat7h9ISXD_mR4k5-EEt&cb=_cli5g4geri8xitawtcx3mi&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
62.122.171.6200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1830127/?pb=8bebc187d7c41c6e99191ecbb6c808751673696651&psp=AO08Cu75n1JuRN95AasYWk7pXMYtVRinXxY0AhHpUxOlaVRzj5PcOmaxEjrPbZo-7dPc1n9hykqSyoJ_f6b0UxSi9RQ9oUm3EpVI45OgZ2jVWFdEFCBwCaHHSCdzO3PhVorp7asUnESNSA9sjsPSkTi0NkKOYH5y4bS5MokZpFDqi0x8gjGKg4cRlxRjLp4ZUQe2Q0kDRlPEBpYY96nTH-HdbGCffR82Z373r10WxdCAGtM6jklkZXG0ytUo37JEKBffbsmOzSSIAD4QKh9MpvqQyBEQGKJyMBQ186Gk8Ws0i2csPITfXGiqvgv1uXGWYCw-nFrCtA1b1Mko2SUwjjhijC1gKp2o5NTyEt3_cPSWhhKQowXJ-Ml2Y3I_Rl-mH3niqebj8bYxcZmUaikPlW4l5CE1W8nTwm18SAc8GMnFxMgwNYPbOghq4d2-ZUdj0hPp54do4xaELAtw73OVMidC2mZgMMS7-QN1eo_77W_ubDdAOsW2YMgyw80lcLrcwuyzRxjma16_ldu5rN8uxwi28513f4GL3NpjZnIXZzXXF1sa9V3uP8byBrcd5W526fvr9zyp1U9bh6KXm8-fS0Ef4Qi5zGQOzDuh7nS2bcndOvefUC5w9vHXSvicsxQko0YKak68A_L0k8Uv_JmJKsoEPxsixn_51XZ1iIVsAXpfOSWauwLOjIRPpTX0Vrar08n7rvrK_dm9dmrbiu_zGUD3h63jH8RgInrgM9bX4ktcNXF7b-9MuPoPGsZl2aRJWQ1POqL6TTK375_opwWIvEklEzluHxYlOof-9OvMk1VsDiP-TiuP0r9dWoR-rhO9fahBTHFI2Fr8GcIIdQTzy9ZCzMWjkat7h9ISXD_mR4k5-EEt&cb=_cli5g4geri8xitawtcx3mi&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP 62.122.171.6:0
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1830127/?pb=8bebc187d7c41c6e99191ecbb6c808751673696651&psp=AO08Cu75n1JuRN95AasYWk7pXMYtVRinXxY0AhHpUxOlaVRzj5PcOmaxEjrPbZo-7dPc1n9hykqSyoJ_f6b0UxSi9RQ9oUm3EpVI45OgZ2jVWFdEFCBwCaHHSCdzO3PhVorp7asUnESNSA9sjsPSkTi0NkKOYH5y4bS5MokZpFDqi0x8gjGKg4cRlxRjLp4ZUQe2Q0kDRlPEBpYY96nTH-HdbGCffR82Z373r10WxdCAGtM6jklkZXG0ytUo37JEKBffbsmOzSSIAD4QKh9MpvqQyBEQGKJyMBQ186Gk8Ws0i2csPITfXGiqvgv1uXGWYCw-nFrCtA1b1Mko2SUwjjhijC1gKp2o5NTyEt3_cPSWhhKQowXJ-Ml2Y3I_Rl-mH3niqebj8bYxcZmUaikPlW4l5CE1W8nTwm18SAc8GMnFxMgwNYPbOghq4d2-ZUdj0hPp54do4xaELAtw73OVMidC2mZgMMS7-QN1eo_77W_ubDdAOsW2YMgyw80lcLrcwuyzRxjma16_ldu5rN8uxwi28513f4GL3NpjZnIXZzXXF1sa9V3uP8byBrcd5W526fvr9zyp1U9bh6KXm8-fS0Ef4Qi5zGQOzDuh7nS2bcndOvefUC5w9vHXSvicsxQko0YKak68A_L0k8Uv_JmJKsoEPxsixn_51XZ1iIVsAXpfOSWauwLOjIRPpTX0Vrar08n7rvrK_dm9dmrbiu_zGUD3h63jH8RgInrgM9bX4ktcNXF7b-9MuPoPGsZl2aRJWQ1POqL6TTK375_opwWIvEklEzluHxYlOof-9OvMk1VsDiP-TiuP0r9dWoR-rhO9fahBTHFI2Fr8GcIIdQTzy9ZCzMWjkat7h9ISXD_mR4k5-EEt&cb=_cli5g4geri8xitawtcx3mi&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=23011404445145e05fb40d4c9f8fbd568410; Path=/; Expires=Sun, 14 Jan 2024 09:44:11 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b23cfe41da645dfdc123983950c234ca
4df65541611724ca62e1aaf364b7ba1e32090aa4
f779873dbc8f5ce9ed3e446639a7681cf7e4365d3bd46224221179e4537f1103
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 09:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 6ada8f777503d8701a930b33afc3f755
6d56d9b1f16de628d2df9af6a5d3b975ec02bbfe
bf385251efd6950632828ca43df9cfe78cc675c266d74112ff30890b2deb0656
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 00:04:33 GMT
Expires: Thu, 19 Jan 2023 00:04:32 GMT
Etag: "6d56d9b1f16de628d2df9af6a5d3b975ec02bbfe"
Cache-Control: max-age=396620,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78956e7f08601c0e-OSL
limurol.com/ssp/req/1830127/?pb=8bebc187d7c41c6e99191ecbb6c808751673696651&psp=AO08Cu75n1JuRN95AasYWk7pXMYtVRinXxY0AhHpUxOlaVRzj5PcOmaxEjrPbZo-7dPc1n9hykqSyoJ_f6b0UxSi9RQ9oUm3EpVI45OgZ2jVWFdEFCBwCaHHSCdzO3PhVorp7asUnESNSA9sjsPSkTi0NkKOYH5y4bS5MokZpFDqi0x8gjGKg4cRlxRjLp4ZUQe2Q0kDRlPEBpYY96nTH-HdbGCffR82Z373r10WxdCAGtM6jklkZXG0ytUo37JEKBffbsmOzSSIAD4QKh9MpvqQyBEQGKJyMBQ186Gk8Ws0i2csPITfXGiqvgv1uXGWYCw-nFrCtA1b1Mko2SUwjjhijC1gKp2o5NTyEt3_cPSWhhKQowXJ-Ml2Y3I_Rl-mH3niqebj8bYxcZmUaikPlW4l5CE1W8nTwm18SAc8GMnFxMgwNYPbOghq4d2-ZUdj0hPp54do4xaELAtw73OVMidC2mZgMMS7-QN1eo_77W_ubDdAOsW2YMgyw80lcLrcwuyzRxjma16_ldu5rN8uxwi28513f4GL3NpjZnIXZzXXF1sa9V3uP8byBrcd5W526fvr9zyp1U9bh6KXm8-fS0Ef4Qi5zGQOzDuh7nS2bcndOvefUC5w9vHXSvicsxQko0YKak68A_L0k8Uv_JmJKsoEPxsixn_51XZ1iIVsAXpfOSWauwLOjIRPpTX0Vrar08n7rvrK_dm9dmrbiu_zGUD3h63jH8RgInrgM9bX4ktcNXF7b-9MuPoPGsZl2aRJWQ1POqL6TTK375_opwWIvEklEzluHxYlOof-9OvMk1VsDiP-TiuP0r9dWoR-rhO9fahBTHFI2Fr8GcIIdQTzy9ZCzMWjkat7h9ISXD_mR4k5-EEt&cb=_cli5g4geri8xitawtcx3mi&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
62.122.171.6200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1830127/?pb=8bebc187d7c41c6e99191ecbb6c808751673696651&psp=AO08Cu75n1JuRN95AasYWk7pXMYtVRinXxY0AhHpUxOlaVRzj5PcOmaxEjrPbZo-7dPc1n9hykqSyoJ_f6b0UxSi9RQ9oUm3EpVI45OgZ2jVWFdEFCBwCaHHSCdzO3PhVorp7asUnESNSA9sjsPSkTi0NkKOYH5y4bS5MokZpFDqi0x8gjGKg4cRlxRjLp4ZUQe2Q0kDRlPEBpYY96nTH-HdbGCffR82Z373r10WxdCAGtM6jklkZXG0ytUo37JEKBffbsmOzSSIAD4QKh9MpvqQyBEQGKJyMBQ186Gk8Ws0i2csPITfXGiqvgv1uXGWYCw-nFrCtA1b1Mko2SUwjjhijC1gKp2o5NTyEt3_cPSWhhKQowXJ-Ml2Y3I_Rl-mH3niqebj8bYxcZmUaikPlW4l5CE1W8nTwm18SAc8GMnFxMgwNYPbOghq4d2-ZUdj0hPp54do4xaELAtw73OVMidC2mZgMMS7-QN1eo_77W_ubDdAOsW2YMgyw80lcLrcwuyzRxjma16_ldu5rN8uxwi28513f4GL3NpjZnIXZzXXF1sa9V3uP8byBrcd5W526fvr9zyp1U9bh6KXm8-fS0Ef4Qi5zGQOzDuh7nS2bcndOvefUC5w9vHXSvicsxQko0YKak68A_L0k8Uv_JmJKsoEPxsixn_51XZ1iIVsAXpfOSWauwLOjIRPpTX0Vrar08n7rvrK_dm9dmrbiu_zGUD3h63jH8RgInrgM9bX4ktcNXF7b-9MuPoPGsZl2aRJWQ1POqL6TTK375_opwWIvEklEzluHxYlOof-9OvMk1VsDiP-TiuP0r9dWoR-rhO9fahBTHFI2Fr8GcIIdQTzy9ZCzMWjkat7h9ISXD_mR4k5-EEt&cb=_cli5g4geri8xitawtcx3mi&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP 62.122.171.6:0
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1830127/?pb=8bebc187d7c41c6e99191ecbb6c808751673696651&psp=AO08Cu75n1JuRN95AasYWk7pXMYtVRinXxY0AhHpUxOlaVRzj5PcOmaxEjrPbZo-7dPc1n9hykqSyoJ_f6b0UxSi9RQ9oUm3EpVI45OgZ2jVWFdEFCBwCaHHSCdzO3PhVorp7asUnESNSA9sjsPSkTi0NkKOYH5y4bS5MokZpFDqi0x8gjGKg4cRlxRjLp4ZUQe2Q0kDRlPEBpYY96nTH-HdbGCffR82Z373r10WxdCAGtM6jklkZXG0ytUo37JEKBffbsmOzSSIAD4QKh9MpvqQyBEQGKJyMBQ186Gk8Ws0i2csPITfXGiqvgv1uXGWYCw-nFrCtA1b1Mko2SUwjjhijC1gKp2o5NTyEt3_cPSWhhKQowXJ-Ml2Y3I_Rl-mH3niqebj8bYxcZmUaikPlW4l5CE1W8nTwm18SAc8GMnFxMgwNYPbOghq4d2-ZUdj0hPp54do4xaELAtw73OVMidC2mZgMMS7-QN1eo_77W_ubDdAOsW2YMgyw80lcLrcwuyzRxjma16_ldu5rN8uxwi28513f4GL3NpjZnIXZzXXF1sa9V3uP8byBrcd5W526fvr9zyp1U9bh6KXm8-fS0Ef4Qi5zGQOzDuh7nS2bcndOvefUC5w9vHXSvicsxQko0YKak68A_L0k8Uv_JmJKsoEPxsixn_51XZ1iIVsAXpfOSWauwLOjIRPpTX0Vrar08n7rvrK_dm9dmrbiu_zGUD3h63jH8RgInrgM9bX4ktcNXF7b-9MuPoPGsZl2aRJWQ1POqL6TTK375_opwWIvEklEzluHxYlOof-9OvMk1VsDiP-TiuP0r9dWoR-rhO9fahBTHFI2Fr8GcIIdQTzy9ZCzMWjkat7h9ISXD_mR4k5-EEt&cb=_cli5g4geri8xitawtcx3mi&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Cookie: UID=23011404445145e05fb40d4c9f8fbd568410
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
igfap.com/wp-content/themes/catch-box/images/search.png
173.208.199.194200 OK 441 B URL HTTP/1.1 igfap.com/wp-content/themes/catch-box/images/search.png
IP 173.208.199.194:0
File type PNG image data, 20 x 20, 8-bit colormap, non-interlaced\012- data
Hash cc82cf94dbbf95bfcfc3e7efe53b380a
fcd3978ba81fd3f477c66ecab4142491a2a2647d
c756bb976d9325b0e311d7e701e908d5f85f558d529bd60efd7e876b174fdc6a
GET /wp-content/themes/catch-box/images/search.png HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/wp-content/themes/catch-box/style.css?ver=6.0.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: image/png
Content-Length: 441
Connection: keep-alive
Last-Modified: Wed, 02 Sep 2015 03:35:00 GMT
ETag: "55e66e64-1b9"
Expires: Sat, 06 Jan 2024 01:06:33 GMT
Cache-Control: max-age=31104000
Proxcache: HIT
Accept-Ranges: bytes
6.adsco.re/
104.17.167.186200 OK 0 B IP 104.17.167.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://igfap.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 78956e807e8ab512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 6ada8f777503d8701a930b33afc3f755
6d56d9b1f16de628d2df9af6a5d3b975ec02bbfe
bf385251efd6950632828ca43df9cfe78cc675c266d74112ff30890b2deb0656
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 00:04:33 GMT
Expires: Thu, 19 Jan 2023 00:04:32 GMT
Etag: "6d56d9b1f16de628d2df9af6a5d3b975ec02bbfe"
Cache-Control: max-age=396620,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78956e7f78a81c0e-OSL
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://igfap.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15449
Expires: Sat, 14 Jan 2023 14:01:40 GMT
Date: Sat, 14 Jan 2023 09:44:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uJjDFuqKCZyyAorUVUq9PyCb_8fWukPf6YE3LwqK2FrwMFzDNkftFQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 11:16:26 GMT
age: 80865
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4f04f55a9d261ddda8128b0bb721446
5e8df480a1650606937ee493660177bf09c49c14
3a357fbbd9f41d384a06e151a0daff50b345520d4816e70cc1b2c694949ce79f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4936
x-amzn-requestid: f1808de3-5712-4a65-8394-c1624668cdb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0pZFbIIAMFnvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3b-48c4b0cd36319a2634c0c5f0;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rudCuuUXfxE8aRq8-FFIwHE4tqeSWxYrd8uilWI-8DZSY9A-8EiLQQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:06 GMT
age: 42905
etag: "5e8df480a1650606937ee493660177bf09c49c14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64ba27a2f0a3bc61bd325f1fb317b755
c65c58476b66cbb6269ba1d8412d270a0a003ae3
5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9135
x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAnoG6roAMFzgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SUGIIWi8jWe9RoRu-3dQXvLAddjwjH05V1ubKzEOEQrFonzVjQdbtw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 03:33:07 GMT
age: 22264
etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d24ea1f095f492934a1f1c63f5d8590c
dade37148c9b9a941f93a8535d8ddc5de3952623
2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8181
x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0paH-OIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UiHY2x0SqutHc34ld1De85inybQN432MAN-a8di_58lHW7DPtqRTXA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 09:29:44 GMT
age: 867
etag: "dade37148c9b9a941f93a8535d8ddc5de3952623"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe27fa975-dca1-4275-9da9-4f794ba4053a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe27fa975-dca1-4275-9da9-4f794ba4053a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e40d5007919bd7f226664e3b1fa1339
73293ca2143a4ca1cbd17317fbab0aeac401df1b
5396d28bba05d0775a803107ce2aef6a28cbd29bcc211dcc5e1d10326aa9dcb3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe27fa975-dca1-4275-9da9-4f794ba4053a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11798
x-amzn-requestid: 69dd4065-86d7-41cc-916c-c4a98167123c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eg8H3HSeoAMFt3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bd0d65-5c1f9f743324cabe37606cd3;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 07:01:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Zbt_rmVn5g0_o5LcFpn8LPnjgfz5d6Rvipe07Q4ZQVAiOsNYJDj_iQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 07:40:35 GMT
age: 7416
etag: "73293ca2143a4ca1cbd17317fbab0aeac401df1b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1378f107c1996ade14a8fe7fd728072
f52d98d9a0d1d343a539689ea14acf99e148cf8c
4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9154
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAkCEN2IAMFuMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 04:10:18 GMT
age: 20033
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 6ada8f777503d8701a930b33afc3f755
6d56d9b1f16de628d2df9af6a5d3b975ec02bbfe
bf385251efd6950632828ca43df9cfe78cc675c266d74112ff30890b2deb0656
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 00:04:33 GMT
Expires: Thu, 19 Jan 2023 00:04:32 GMT
Etag: "6d56d9b1f16de628d2df9af6a5d3b975ec02bbfe"
Cache-Control: max-age=396620,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78956e80ab22b517-OSL
qgxbluhsgad.com/t/9/fret/meow4/1830127/brt.js
62.122.171.6200 OK 28 kB URL HTTP/2 qgxbluhsgad.com/t/9/fret/meow4/1830127/brt.js
IP 62.122.171.6:0
File type ASCII text, with very long lines (65530)
Hash 25b6cb73837dddc8104609306aee12ab
c74d6b0976ffc5defab2a730613dc4284808e268
d2ffe90c998398a8b359d789373024c1d549572f0410e18f35871772c08f3e03
Analyzer Verdict Alert quad9 Sinkholed
GET /t/9/fret/meow4/1830127/brt.js HTTP/1.1
Host: qgxbluhsgad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:10 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 12:39:24 GMT
vary: Accept-Encoding
etag: W/"63a44ffc-10dce"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fad3b5fdda02021ffd1b6c1d0c3a3646
ee7b750a2043a296d2a8a597ae2fbd82bfae21de
ff0a2cd34e666a13ee40c42ef23678837013252a78bb85490d58683318480b42
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF0A2CD34E666A13EE40C42EF23678837013252A78BB85490D58683318480B42"
Last-Modified: Fri, 13 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8971
Expires: Sat, 14 Jan 2023 12:13:42 GMT
Date: Sat, 14 Jan 2023 09:44:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8cc52774ab3484d0822a3d82e6f07808
5b04ca320efd8ef0dbd54cc5059b4a20e08559b3
35c1eeeec58bb211b48084a19fbe6c5798eb1e5d2618a0f9d6a1f9105c505dd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35C1EEEEC58BB211B48084A19FBE6C5798EB1E5D2618A0F9D6A1F9105C505DD6"
Last-Modified: Thu, 12 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19168
Expires: Sat, 14 Jan 2023 15:03:39 GMT
Date: Sat, 14 Jan 2023 09:44:11 GMT
Connection: keep-alive
adserver.juicyads.com/js/jads.js
185.94.236.247200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP 185.94.236.247:0
File type ASCII text, with very long lines (3769), with no line terminators
Hash 65b1efdf55163b144c5018b8772765ad
509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 21 Nov 2022 05:24:20 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"637b0b84-eb9"
Content-Encoding: gzip
s10.histats.com/js15_as.js
46.105.201.240200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP 46.105.201.240:0
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:35:32 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 104301058
content-type: text/javascript
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
igfap.com/favicon.ico
173.208.199.194404 Not Found 184 B IP 173.208.199.194:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8ea8556770bd53150ab76b23f87936a6
6c615fdc6839c5ed11a30ebc227646ac6aef493b
c4f8c99f5287623d6325502365d07eb6dc33d0c58c1c2def811f9b06ff7d68f0
GET /favicon.ico HTTP/1.1
Host: igfap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/flat-chested-hentai-girls-masturbating/
Cookie: a=U3Ur6IlVJ3nkAgpGKnHFnahHl0giZdhi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 14 Jan 2023 09:44:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"5f77c832-f7"
Content-Encoding: gzip
i.jads.co/network/user118116/26903-1670620903-0778592001670620903.gif
69.16.175.42200 OK 3.5 MB URL HTTP/2 i.jads.co/network/user118116/26903-1670620903-0778592001670620903.gif
IP 69.16.175.42:0
File type GIF image data, version 89a, 300 x 250\012- data
Size 3.5 MB (3515936 bytes)
Hash 8dcea27e02c4bb1a1fa8663c5dbae0f9
058fc0bcac17b66fb5693180b294860e0772a345
745e07244c36c3a7a484df41da6ff5c7544823b308f457f09d61bca7ea522ca2
GET /network/user118116/26903-1670620903-0778592001670620903.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=05efb1c5305e0559844ebf1a5e8f94cf; imps26903=1; juicy_data_1=YToxOntpOjE1MTM1OTY7aToxNjczOTQ4NjUxO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:11 GMT
etag: "1670620904"
cache-control: max-age=28517212
content-length: 3515936
content-type: image/gif
last-modified: Fri, 09 Dec 2022 21:21:44 GMT
accept-ranges: bytes
x-sp-metadata: HS256.CPuOip4GEoYBCiQzYTgxNmIwNy1lY2I2LTRkNzAtYTMxYS1hZTQ5OGM5YTJjZjQQ8LqN8Z697wIaBgjr8omeBiIMOTEuOTAuNDIuMTU0KMFRMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLQgBEiQ0ZWY0ZmQ5Yy0wYzllLTRiNTMtOTg2YS1kODg2N2YyODE0Y2MYoMzWASIYCAISFGNkczIxMi5zazEuaHdjZG4ubmV0.SEjvtqr/HSzkAC9D/pC12hApLqPnGUDlVBuDlFvRods=
x-hw: 1673689451.dop232.sk1.t,1673689451.cds227.sk1.hn,1673689451.cds212.sk1.c
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=601762
185.94.236.253200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=601762
IP 185.94.236.253:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (397), with CRLF, LF line terminators
Hash f6ee802249bf0d31d576dfd5ac7d58a5
fb4d838b90807d0d9c3e1402f57f362cf82c8490
134196acad78b8b655081f726969bfb0832f93e074e1ba6407329cce5a0d1dc4
GET /adshow.php?adzone=601762 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=05efb1c5305e0559844ebf1a5e8f94cf; expires=Sun, 14-Jan-2024 09:44:11 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps53761=1; expires=Sun, 15-Jan-2023 09:44:11 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE1MDg2ODU7aToxNjczOTQ4NjUxO30%3D; expires=Tue, 17-Jan-2023 09:44:11 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 17-Jan-2023 09:44:11 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
sqvisqbbnkf8.n4.adsco.re/
38.132.109.186200 OK 0 B URL HTTP/1.1 sqvisqbbnkf8.n4.adsco.re/
IP 38.132.109.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: sqvisqbbnkf8.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:12 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
i.jads.co/network/user179029/53761-1668593380-0983510001668593380.gif
69.16.175.42200 OK 330 kB URL HTTP/2 i.jads.co/network/user179029/53761-1668593380-0983510001668593380.gif
IP 69.16.175.42:0
File type GIF image data, version 89a, 728 x 90\012- data
Size 330 kB (329858 bytes)
Hash ff0c6d2caba097c4b1cf10d57499606a
903137f1cff773bae336834d161e67b8336986d6
c6fe3f1d8e159a8620c3d1898aea982d93507d22927022d3934d9a649a1ac6e7
GET /network/user179029/53761-1668593380-0983510001668593380.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=05efb1c5305e0559844ebf1a5e8f94cf; imps26903=1; juicy_data_1=YToxOntpOjE1MDg2ODU7aToxNjczOTQ4NjUxO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps53761=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:12 GMT
etag: "1668593381"
cache-control: max-age=26500743
content-length: 329858
content-type: image/gif
last-modified: Wed, 16 Nov 2022 10:09:41 GMT
accept-ranges: bytes
x-sp-metadata: HS256.CPyOip4GEoYBCiRmOGRiMWIyNS1jMGRjLTQ2ZjctYTI3MC1iNDRjODE5Y2E0ZjYQ8LqN8Z697wIaBgjs8omeBiIMOTEuOTAuNDIuMTU0KMFRMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiRhODQxM2Q2Zi0wNGNkLTRkZjYtOWQyMS00YmFhNDAwNWUyYzAYgpEUIhgIAhIUY2RzMjI2LnNrMS5od2Nkbi5uZXQ=.YTcnTZNdc17PINI5ObgCchiw3NdzLKk+IBvlBUOFttA=
x-hw: 1673689452.dop232.sk1.t,1673689452.cds227.sk1.hn,1673689452.cds226.sk1.c
X-Firefox-Spdy: h2
adsco.re/p
162.252.214.5200 OK 414 B IP 162.252.214.5:0
File type ASCII text, with very long lines (487), with no line terminators
Hash d5b7d2d24d52b767f4e90cf4d7ae035f
b39a32c65429940ebbcc268f3f17657b4a39799b
2cebaa794931226bbe0a512b6007682b6eb84353afb05b6f358701c0f530f2e4
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1929
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://igfap.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ceb802bf5b4ec1a6b07c4dbfd5910eff
b983cb7a010582abda54873577ce3438c6e42d1d
ff9354d2008d370e2e0bbeb4774e0579007a0155c62e849eb495c6b86b0cb83b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF9354D2008D370E2E0BBEB4774E0579007A0155C62E849EB495C6B86B0CB83B"
Last-Modified: Fri, 13 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14315
Expires: Sat, 14 Jan 2023 13:42:47 GMT
Date: Sat, 14 Jan 2023 09:44:12 GMT
Connection: keep-alive
s4.histats.com/stats/0.php?3506248&@f16&@g1&@h1&@i1&@j1673689435564&@k0&@l1&@mFlat%20Chested%20Hentai%20Girls%20Masturbating&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:36829715&@b3:1673689436&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Figfap.com%2Fflat-chested-hentai-girls-masturbating%2F&@w
149.56.240.27200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?3506248&@f16&@g1&@h1&@i1&@j1673689435564&@k0&@l1&@mFlat%20Chested%20Hentai%20Girls%20Masturbating&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:36829715&@b3:1673689436&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Figfap.com%2Fflat-chested-hentai-girls-masturbating%2F&@w
IP 149.56.240.27:0
File type ASCII text, with no line terminators
Hash cd0156f6d8f1bb2522e10c34cc0bc43f
d0be54564fdfde0e94d205bd0cc3b00eb97e89f8
d766e4b70cbe3646c33400e47d9b091291757cd4600be717e345096120a64d82
GET /stats/0.php?3506248&@f16&@g1&@h1&@i1&@j1673689435564&@k0&@l1&@mFlat%20Chested%20Hentai%20Girls%20Masturbating&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:36829715&@b3:1673689436&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Figfap.com%2Fflat-chested-hentai-girls-masturbating%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:12 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 97e83017182ec61afbf89a949381bb7a
8049507e203da762ffaf46834288779a9e412c97
2a11b02dc83e4206a8b8ddbbcc6ff8a64e1fae7b9222cfc540d1d4da9c245a3c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 11 Jan 2023 01:12:45 GMT
Expires: Wed, 18 Jan 2023 01:12:44 GMT
Etag: "8049507e203da762ffaf46834288779a9e412c97"
Cache-Control: max-age=314311,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78956e880ef01c0e-OSL
c.adsco.re/
104.17.166.186200 OK 27 kB IP 104.17.166.186:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash 2a9efa8bb1f7ddcfd3aa5358f39adb9b
d3dea26471f2183d2c08a22f6edf1aa1f87fb8be
8aaa90a327fe15c7fded47c18a962454561461c6bcbadeb79a61b7ab39a18b1f
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 14 Feb 2023 09:44:11 GMT
etag: W/"xkCBFtC0Wl/JiS60JFipuQ=="
cf-cache-status: HIT
age: 1079412
vary: Accept-Encoding
server: cloudflare
cf-ray: 78956e7f5d0b0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blockadsnot.com/sRwK.aspx?_=BQFiAAAAAAAACZUAAjcohFUBAEQKc9CFmuke7kDMyIoAEFit-RukF1Olo_PcmVAK6KEvoQIijn9XgSqveRpfNlK1zU7DJfM5DGaNuHW-QFE0uA3pv_guK1ouDHAQiVQO1RocOL40W2F0c_ZoGtlW8uORgCcFRZarGxEI0sWzL2Lkgqj3tD-yzU3N8hCReN3AN6Cne1tU5VHSN80vBE6K3N0qluWSZ8aYRnlGk1e0Tm20Ot0_waXrCtuXE1H-TpOaeL1eVA8K948XhIXHcCEkA1fiQNx5qtKC89myWrOVYb6duFBIoe3EM5KQ4DfXDGCNN6Q77hY0vQYe4lGx_gV0N77eoBshKLdseoIYTkl8AYeRpP8-BZLpRhGmvJhdqyPHA0wO3OrdpTjrJv5g3p39xj7h2C9MRAo1np0hNMFVZhb1aXpoBSmTirNG9CB9Brybj3yn1xKgjUY7zP-TeWoPBACDC8D1NeZ2bJv5zuU&v=4&wiqsUkQe=2374570&minBid=&SwHVKiCF=0,0&PFQOfasz=&jBVZouce=&s=1280,1024,1,1280,1024,0
208.95.112.254200 OK 44 B URL HTTP/2 blockadsnot.com/sRwK.aspx?_=BQFiAAAAAAAACZUAAjcohFUBAEQKc9CFmuke7kDMyIoAEFit-RukF1Olo_PcmVAK6KEvoQIijn9XgSqveRpfNlK1zU7DJfM5DGaNuHW-QFE0uA3pv_guK1ouDHAQiVQO1RocOL40W2F0c_ZoGtlW8uORgCcFRZarGxEI0sWzL2Lkgqj3tD-yzU3N8hCReN3AN6Cne1tU5VHSN80vBE6K3N0qluWSZ8aYRnlGk1e0Tm20Ot0_waXrCtuXE1H-TpOaeL1eVA8K948XhIXHcCEkA1fiQNx5qtKC89myWrOVYb6duFBIoe3EM5KQ4DfXDGCNN6Q77hY0vQYe4lGx_gV0N77eoBshKLdseoIYTkl8AYeRpP8-BZLpRhGmvJhdqyPHA0wO3OrdpTjrJv5g3p39xj7h2C9MRAo1np0hNMFVZhb1aXpoBSmTirNG9CB9Brybj3yn1xKgjUY7zP-TeWoPBACDC8D1NeZ2bJv5zuU&v=4&wiqsUkQe=2374570&minBid=&SwHVKiCF=0,0&PFQOfasz=&jBVZouce=&s=1280,1024,1,1280,1024,0
IP 208.95.112.254:0
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /sRwK.aspx?_=BQFiAAAAAAAACZUAAjcohFUBAEQKc9CFmuke7kDMyIoAEFit-RukF1Olo_PcmVAK6KEvoQIijn9XgSqveRpfNlK1zU7DJfM5DGaNuHW-QFE0uA3pv_guK1ouDHAQiVQO1RocOL40W2F0c_ZoGtlW8uORgCcFRZarGxEI0sWzL2Lkgqj3tD-yzU3N8hCReN3AN6Cne1tU5VHSN80vBE6K3N0qluWSZ8aYRnlGk1e0Tm20Ot0_waXrCtuXE1H-TpOaeL1eVA8K948XhIXHcCEkA1fiQNx5qtKC89myWrOVYb6duFBIoe3EM5KQ4DfXDGCNN6Q77hY0vQYe4lGx_gV0N77eoBshKLdseoIYTkl8AYeRpP8-BZLpRhGmvJhdqyPHA0wO3OrdpTjrJv5g3p39xj7h2C9MRAo1np0hNMFVZhb1aXpoBSmTirNG9CB9Brybj3yn1xKgjUY7zP-TeWoPBACDC8D1NeZ2bJv5zuU&v=4&wiqsUkQe=2374570&minBid=&SwHVKiCF=0,0&PFQOfasz=&jBVZouce=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sat, 14 Jan 2023 09:44:13 GMT
X-Firefox-Spdy: h2
sqvisqbbnkf8.s4.adsco.re/
185.200.116.90200 OK 0 B URL HTTP/1.1 sqvisqbbnkf8.s4.adsco.re/
IP 185.200.116.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: sqvisqbbnkf8.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:13 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
d.pssy.xyz/d/?resource=bundler&nada=1&widgets=1499393:3,1499392:2,1243821:1&isct=1673399191&rfrr=https://igfap.com/hot-naked-mature-men/&iscs=ODg3OWE5NzEwNDBhYzc3MmMxMzBiMGQ3OWI3NzMyYjVjOTMwNTc2OTFiNWVlZjE1MGZjMTgyMGU2NTI4ZGVkMXwwfDV8MTkyLjE4Ny4xMjcuNjZ8TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xOyBydjoxMDguMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDguMHwxNzgzMzF8MTY3MzM5OTE5MXxpYmFIUjBjSE02THk5cFoyWmhjQzVqYjIwdmFHOTBMVzVoYTJWa0xXMWhkSFZ5WlMxdFpXNHY=&width=530&reqc=1&ver=112ed149bb60bf19.1673399191855&page=aHR0cHM6Ly9pZ2ZhcC5jb20vZmxhdC1jaGVzdGVkLWhlbnRhaS1naXJscy1tYXN0dXJiYXRpbmcv
131.153.42.225200 OK 1.2 kB URL HTTP/1.1 d.pssy.xyz/d/?resource=bundler&nada=1&widgets=1499393:3,1499392:2,1243821:1&isct=1673399191&rfrr=https://igfap.com/hot-naked-mature-men/&iscs=ODg3OWE5NzEwNDBhYzc3MmMxMzBiMGQ3OWI3NzMyYjVjOTMwNTc2OTFiNWVlZjE1MGZjMTgyMGU2NTI4ZGVkMXwwfDV8MTkyLjE4Ny4xMjcuNjZ8TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xOyBydjoxMDguMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDguMHwxNzgzMzF8MTY3MzM5OTE5MXxpYmFIUjBjSE02THk5cFoyWmhjQzVqYjIwdmFHOTBMVzVoYTJWa0xXMWhkSFZ5WlMxdFpXNHY=&width=530&reqc=1&ver=112ed149bb60bf19.1673399191855&page=aHR0cHM6Ly9pZ2ZhcC5jb20vZmxhdC1jaGVzdGVkLWhlbnRhaS1naXJscy1tYXN0dXJiYXRpbmcv
IP 131.153.42.225:0
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2218), with no line terminators
Hash 6613a4722ee97b89d6436a5871d3edfc
90dcfaa5bbd2c943ebedcd462362338cf4f83b10
f3a974f3894c1ece30912f42b0e3035ebab9bf25e69eff69b6225c65ccaa7b1a
Analyzer Verdict Alert quad9 Sinkholed
GET /d/?resource=bundler&nada=1&widgets=1499393:3,1499392:2,1243821:1&isct=1673399191&rfrr=https://igfap.com/hot-naked-mature-men/&iscs=ODg3OWE5NzEwNDBhYzc3MmMxMzBiMGQ3OWI3NzMyYjVjOTMwNTc2OTFiNWVlZjE1MGZjMTgyMGU2NTI4ZGVkMXwwfDV8MTkyLjE4Ny4xMjcuNjZ8TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xOyBydjoxMDguMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDguMHwxNzgzMzF8MTY3MzM5OTE5MXxpYmFIUjBjSE02THk5cFoyWmhjQzVqYjIwdmFHOTBMVzVoYTJWa0xXMWhkSFZ5WlMxdFpXNHY=&width=530&reqc=1&ver=112ed149bb60bf19.1673399191855&page=aHR0cHM6Ly9pZ2ZhcC5jb20vZmxhdC1jaGVzdGVkLWhlbnRhaS1naXJscy1tYXN0dXJiYXRpbmcv HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://igfap.com
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:13 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
ETag: W/"8aa-kmzw5dqMGqoVIWnIItnrFcuwikA"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://igfap.com
Content-Encoding: gzip
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 44c557728b50ad6a46d47d6bcc0a9fea
0cc07c91247188ed40b0978a54c91bd3d1ae9ea7
f6ad2ec1d4527c0e57b8e67889b0be6476de51322f5d6ab3ddd882f5667f0326
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F6AD2EC1D4527C0E57B8E67889B0BE6476DE51322F5D6AB3DDD882F5667F0326"
Last-Modified: Fri, 13 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15156
Expires: Sat, 14 Jan 2023 13:56:49 GMT
Date: Sat, 14 Jan 2023 09:44:13 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 44c557728b50ad6a46d47d6bcc0a9fea
0cc07c91247188ed40b0978a54c91bd3d1ae9ea7
f6ad2ec1d4527c0e57b8e67889b0be6476de51322f5d6ab3ddd882f5667f0326
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F6AD2EC1D4527C0E57B8E67889B0BE6476DE51322F5D6AB3DDD882F5667F0326"
Last-Modified: Fri, 13 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15186
Expires: Sat, 14 Jan 2023 13:57:19 GMT
Date: Sat, 14 Jan 2023 09:44:13 GMT
Connection: keep-alive
s.pssy.xyz/prplugs/0/1144995/240x180.jpg
172.67.206.135200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1144995/240x180.jpg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash a1aa410843a28e7914a130617de3426e
5c4af4c8fc666a29e5b824b9946c3e1ac8fa0df8
75009adc08f8e54aa012cf62ae380a0bcec4af0631c7744bab8566a4d6eea7f1
Analyzer Verdict Alert quad9 Sinkholed
GET /prplugs/0/1144995/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:13 GMT
content-type: image/jpeg
content-length: 16677
last-modified: Wed, 04 Nov 2020 14:45:53 GMT
etag: "5fa2bea1-4125"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1379
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nnDTVarw9dL1yamdGT%2BWaCF%2BT6hiKM%2FKSIqJkJAXuZ3nq3D%2Fq9lmaCAJ%2BQQ%2BOZrozynJsYYxAENLEth8ei0kNcoo3XcZIIfgMRgIiUJLLmKUPFFIHddf%2BvBnL9nG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78956e8c19700af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 44c557728b50ad6a46d47d6bcc0a9fea
0cc07c91247188ed40b0978a54c91bd3d1ae9ea7
f6ad2ec1d4527c0e57b8e67889b0be6476de51322f5d6ab3ddd882f5667f0326
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F6AD2EC1D4527C0E57B8E67889B0BE6476DE51322F5D6AB3DDD882F5667F0326"
Last-Modified: Fri, 13 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15186
Expires: Sat, 14 Jan 2023 13:57:19 GMT
Date: Sat, 14 Jan 2023 09:44:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7bdb3b320933dc85c930bf39bcd1ec18
b66d089251da6e1b4c5ed360a5776430e6861454
fff4d8d492cafec03c9a9a3e1a43e308fc844b24c4f46f54082dd8a8f56ced8a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FFF4D8D492CAFEC03C9A9A3E1A43E308FC844B24C4F46F54082DD8A8F56CED8A"
Last-Modified: Fri, 13 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16691
Expires: Sat, 14 Jan 2023 14:22:24 GMT
Date: Sat, 14 Jan 2023 09:44:13 GMT
Connection: keep-alive
s.pssy.xyz/prbanners/2023/01/06/DS9kEeRqG84Aepf3CCVxRavQs3FSej.jpeg
172.67.206.135200 OK 56 kB URL HTTP/2 s.pssy.xyz/prbanners/2023/01/06/DS9kEeRqG84Aepf3CCVxRavQs3FSej.jpeg
IP 172.67.206.135:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x600, components 3\012- data
Hash 7a414abccda95d503154f3deee806e40
d4f9404bb617b606069b86b540bcdd9fb0df9032
914e159240c1b370761968d72a4455df11837a1798e96ace1c76045265b8a7d2
Analyzer Verdict Alert quad9 Sinkholed
GET /prbanners/2023/01/06/DS9kEeRqG84Aepf3CCVxRavQs3FSej.jpeg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:13 GMT
content-type: image/jpeg
content-length: 56528
last-modified: Fri, 06 Jan 2023 17:38:16 GMT
etag: "63b85c88-dcd0"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iE0Uc1HZLxg1dXIy%2Flq76I1%2BvoTvklXljR7ck3USEHS%2F23Vh8SJqQ%2BBMIoGc0ZreIIQJZVVnkcURw%2FXcvZXny32Ii1qZhe5AzaQdPG2dTACHlZ24%2BcN79Fe32%2FMa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78956e8c196f0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=770182
185.94.236.253200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=770182
IP 185.94.236.253:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (398), with CRLF, LF line terminators
Hash b8447948cd3bcd3608dae4429b21a2b3
0a2a759b3dcccee3093b13e3d6793b7c3e4d327e
6f57e551bcdfb7b0948247054e8e85e39d2c420583bbaaa8596a475c8676f1a9
GET /adshow.php?adzone=770182 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Cookie: surferid=05efb1c5305e0559844ebf1a5e8f94cf; imps26903=1; juicy_data_1=YToxOntpOjE1MDg2ODU7aToxNjczOTQ4NjUxO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps53761=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: imps53761=2; expires=Sun, 15-Jan-2023 09:44:13 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToyOntpOjE1MDg2ODU7aToxNjczOTQ4NjUxO2k6MTUwODY4NjtpOjE2NzM5NDg2NTM7fQ%3D%3D; expires=Tue, 17-Jan-2023 09:44:13 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 17-Jan-2023 09:44:13 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
d.pssy.xyz/t.php
131.153.42.225200 OK 20 B IP 131.153.42.225:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=29c61c76-5094-4ede-96ba-058ebc4b8a62; expires=Sun, 14-Jan-2024 09:44:13 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
i.jads.co/network/user179029/53761-1668593584-0936216001668593584.gif
69.16.175.42200 OK 186 kB URL HTTP/2 i.jads.co/network/user179029/53761-1668593584-0936216001668593584.gif
IP 69.16.175.42:0
File type GIF image data, version 89a, 300 x 250\012- data
Size 186 kB (185531 bytes)
Hash 401d2e9be3f5bd3c0e62d81b29cf7779
c5d6772dd6501829be0580f5592d4a6fcdb3fe18
4493a2a0abd8db20ccf7b346ae7b08fed01e583052f1db138c7274622f267a87
GET /network/user179029/53761-1668593584-0936216001668593584.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=05efb1c5305e0559844ebf1a5e8f94cf; imps26903=1; juicy_data_1=YToyOntpOjE1MDg2ODU7aToxNjczOTQ4NjUxO2k6MTUwODY4NjtpOjE2NzM5NDg2NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps53761=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:13 GMT
etag: "1668593584"
cache-control: max-age=26500751
content-length: 185531
content-type: image/gif
last-modified: Wed, 16 Nov 2022 10:13:04 GMT
accept-ranges: bytes
x-sp-metadata: HS256.CP2Oip4GEoYBCiRjOTBlYjU2MC0wNDdhLTQ0ZmEtOTlkOS03YWE1NzA2OGMzMTMQ8LqN8Z697wIaBgjt8omeBiIMOTEuOTAuNDIuMTU0KMFRMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiQ1OWU0MTMxYy04MTEyLTQ4NzEtYTg5ZS1mYjZlMTAwMWNiZmEYu6kLIhgIAhIUY2RzMjA5LnNrMS5od2Nkbi5uZXQ=.sN9QhA5I7asArVHOHuOCUVv+ZoIS3n2WqYYMTwPjiVU=
x-hw: 1673689453.dop232.sk1.t,1673689453.cds227.sk1.hn,1673689453.cds209.sk1.c
X-Firefox-Spdy: h2
ftte.fun/go/cb.php?c=7741095&b=62651&a=1499393&o=s&s=336x280
131.153.42.224200 OK 1.3 kB URL HTTP/1.1 ftte.fun/go/cb.php?c=7741095&b=62651&a=1499393&o=s&s=336x280
IP 131.153.42.224:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (891)
Hash 7e3404c6536686ba0347f4b6def3cfe2
3937e3e6d41c603f47e4261ad1df8ad8afac49cb
056dd84339fe92760df679196918e5d9fe9de248d53e9879f26943b96ddb3fd7
GET /go/cb.php?c=7741095&b=62651&a=1499393&o=s&s=336x280 HTTP/1.1
Host: ftte.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 09:44:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: woa1quur7O=73e127b051d490b21e4ef8dc32888fca7198d9d2f6740c5bd2de2a5eea8faacad89b8d67bba192bc0dc7046874b737a33fe15af4cc1b68a73439046bbc414d6a; expires=Thu, 13-Jul-2023 09:44:13 GMT; Max-Age=15552000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
static-assets.highwebmedia.com/cachebust/chatembed-prod-374f59df6177.js
104.16.94.42200 OK 318 kB URL HTTP/2 static-assets.highwebmedia.com/cachebust/chatembed-prod-374f59df6177.js
IP 104.16.94.42:0
File type ASCII text, with very long lines (16097)
Size 318 kB (318148 bytes)
Hash 7415f1e8939c09ca19ba9380e9beb2c0
f6b8aac5431af7e21775ff35c71211f58b81bffc
732bb3cdb7fd8d0b9f6271a104fb1eb839fbd19f5d81d2082d23f99457443470
GET /cachebust/chatembed-prod-374f59df6177.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=996247
etag: W/"4115f008f26e694763f81df6ff6d9967"
last-modified: Sat, 14 Jan 2023 03:33:57 GMT
x-amz-id-2: 1//2/JvDiNdF0x2CFGbWp+m0AkgWD0OsG5zCIvj0RlbqFcSISjh3FbJpRHQbap4MIZBqEMw/rc5O/56GHjkTXg==
x-amz-meta-s3cmd-attrs: md5:4115f008f26e694763f81df6ff6d9967
x-amz-request-id: EF4YJMGGTTDG2DCF
cf-cache-status: HIT
age: 22046
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F3EyelSVe2L3ZfPYEG0yVeAjwb2mkNmaU1BDjgbZ3xIUUhzgz0Qh6z7MPfhZcxsx1Mjatf7ktePfw9tgS5QC8kXd%2F3M0lkGQpjS8YfxXMq%2BGQT9J4C8U3VVpKxuU8CQ68wncjpA0bmBBycy4GHyghw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e940f30b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.bc85e791cb2f.js
104.16.94.42200 OK 113 kB URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.bc85e791cb2f.js
IP 104.16.94.42:0
File type Unicode text, UTF-8 text, with very long lines (65328)
Size 113 kB (113140 bytes)
Hash 195a6b88d178e0afb40f1472c1933fa8
7c16484ab4c27d5db0f7e90ecf01414fc91ba4fb
56606732e4d3047d554ef4e2d0127fc4eaa3da296f6a83557a2ed5ef4ca1f96b
GET /CACHE/js/output.bc85e791cb2f.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=202270
etag: W/"7d90e856406997eee24123ea8a61c92d"
last-modified: Fri, 10 Sep 2021 01:29:44 GMT
x-amz-id-2: HJqgrzmpP8NIgQA+YW8wx4YmDeOFkE860/zZrYgEfEOOhSRenFjn4mxx7ChaQYvyWjZAxImMIY8=
x-amz-meta-s3cmd-attrs: md5:7d90e856406997eee24123ea8a61c92d
x-amz-request-id: EVKN10SQAKNB8VZG
cf-cache-status: HIT
age: 987026
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JeUYey6t9dCJvW7iwdn1W%2BwC9hAhoiBDd43j%2BPBerYe1LlYIAPXTX3tsMr0n12w0RS89r%2FJNO2jN7yDmajhrAhaNAaBtLl%2Bry8WZueZFVcFM1K40JMj1dMCb6g3yBKfyq6NL1qKC%2BRI6vhfzxyh%2BMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=BM0VrVV5Xv1p3obxSUiAtJ4jhdnglKeQCBwKMsReYoY-1673689454731-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e940f2fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.7846360772248671
131.153.88.95200 OK 28 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.7846360772248671
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
Hash a12b9cdb2ff7b92e41d93ceca8aa75b5
aeb87242ee4925ffaf66875f6b8e8bb466f70178
d1ebe19c8587c9ace887cb5cd27b43df2125fa6ad0eca6d06c1afe8981fa6166
GET /stream?room=sae__&f=0.7846360772248671 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:15 GMT
content-type: image/jpeg
content-length: 28287
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.3803725651204638
131.153.88.95200 OK 27 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.3803725651204638
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
Hash 2998e26607e130817dad35c1d4f6917b
e31046379bf60c8460627297bc7376ebd0c8a570
e5b2b89928ebea9e2b231cbe70c5c0fc5088d37978bb6e516d3e50b242da791e
GET /stream?room=sae__&f=0.3803725651204638 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:15 GMT
content-type: image/jpeg
content-length: 26788
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=2277357614050317
143.204.55.44204 No Content 0 B URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=2277357614050317
IP 143.204.55.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /keys/KSKw2g.L36ISg/requestToken?rnd=2277357614050317 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: ably-agent,content-type,x-ably-version
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Content-Length,Accept,Authorization,X-Ably-Version,X-Ably-Lib,X-Ably-ClientId,Ably-Agent
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-origin: https://chaturbate.com
access-control-max-age: 3600
date: Sat, 14 Jan 2023 09:44:16 GMT
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JWE8pgm_ZjlVZOYSZ3CwApu_A9D7AHsyV1lc2uOnfS9_FMoR4LQJfw==
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/css/output.29f74a450c49.css
104.16.94.42200 OK 39 kB URL HTTP/2 static-assets.highwebmedia.com/CACHE/css/output.29f74a450c49.css
IP 104.16.94.42:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d21fbe2332324163ea36d4347441dbe3
b599acc9a9b58893e4cb25e9da60e0d334499770
39ed38062577413a1cc6868705a1ce2371d26a038c216a3b9e76ef26f0e13236
GET /CACHE/css/output.29f74a450c49.css HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=84251
etag: W/"c4257273e8b956906fe269270c4fde24"
last-modified: Thu, 05 Jan 2023 22:05:58 GMT
x-amz-id-2: D8WOWKPKquhJPAFj8yuxA65mNAg71O5xCPtsQdBR1GlJW3MSAcFWJxjm8ayXigzuRUGytDtPXRo=
x-amz-meta-s3cmd-attrs: md5:c4257273e8b956906fe269270c4fde24
x-amz-request-id: 5TEV2W7QVDF279A9
cf-cache-status: HIT
age: 732955
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EqyypWqJ7t%2FJNsjemxTMFHliyH%2BgI2FpRtJNWLfyWCK90v5iv2el2Ia7vwY9TIb741nFBTz%2Fod7ovNJVy%2B3czlbbo3h6kgo9o6Ahltti9%2BUYlZJPx4BPShRf8yMUCwJFfCYx%2BHLC2IJ2pu8Ev7inQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=Le5H1fP.1BrkNgrLn1zu43Qp_TV.l16p1AorYHHs6j8-1673689454736-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e940f3bb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=2277357614050317
143.204.55.44201 Created 1.0 kB URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=2277357614050317
IP 143.204.55.44:0
File type JSON data\012- , ASCII text, with very long lines (812)
Hash de241089c6e941f6f9595b0359859daa
b247697f4d284e4e975103d2d27b3812fa5bda4c
a7b60fff0b5e0165782af0409e938e85163c7463ff2863e12b374b5fdb894d12
POST /keys/KSKw2g.L36ISg/requestToken?rnd=2277357614050317 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
X-Ably-Version: 1.2
Ably-Agent: ably-js/1.2.13 browser
Content-Length: 1047
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 1044
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.5e98.6.eu-central-1-A.i-0937a562114ac682f.e91WPjLsQBKFCC
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: F0XY9bJG9trqYRw6p04AIJELEJWdmva6TpBs7wZemvbQ7enIjZ471w==
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.5816944018965243
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.5816944018965243
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 5df2a5423ff6137982231b1ced133105
dc85ccaf15a9f027cfb264ca055b3dc04298fe14
ab39afd36a383a4adef451cd3bdb4aa6d021a89c95606919edc87b812642968e
GET /stream?room=sae__&f=0.5816944018965243 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:16 GMT
content-type: image/jpeg
content-length: 28775
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9711950474940274
143.204.55.44204 No Content 0 B URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9711950474940274
IP 143.204.55.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /keys/KSKw2g.L36ISg/requestToken?rnd=9711950474940274 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: ably-agent,content-type,x-ably-version
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Content-Length,Accept,Authorization,X-Ably-Version,X-Ably-Lib,X-Ably-ClientId,Ably-Agent
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-origin: https://chaturbate.com
access-control-max-age: 3600
date: Sat, 14 Jan 2023 09:44:16 GMT
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VKP8QLMdXGlqketTX44W0ztE3bFzbyKXVAmBTPrHYKVSINBc_BnUEQ==
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.11425257120557031
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.11425257120557031
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 5df2a5423ff6137982231b1ced133105
dc85ccaf15a9f027cfb264ca055b3dc04298fe14
ab39afd36a383a4adef451cd3bdb4aa6d021a89c95606919edc87b812642968e
GET /stream?room=sae__&f=0.11425257120557031 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:16 GMT
content-type: image/jpeg
content-length: 28775
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9711950474940274
143.204.55.44201 Created 1.0 kB URL HTTP/2 realtime.pa.highwebmedia.com/keys/KSKw2g.L36ISg/requestToken?rnd=9711950474940274
IP 143.204.55.44:0
File type JSON data\012- , ASCII text, with very long lines (812)
Hash 1eb18319a87f4849a4a1df95bb4bc43d
159a55ee1af2587280486dbcd587614b9df81284
cb8003ef1eb1bb4db5b49d1aa6c38d363c379e3405fdd8881a1c015f886889bf
POST /keys/KSKw2g.L36ISg/requestToken?rnd=9711950474940274 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
X-Ably-Version: 1.2
Ably-Agent: ably-js/1.2.13 browser
Content-Length: 1047
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 1044
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.9972.2.eu-central-1-A.i-09ac2faf6cb3f38f4.e91fvkJWwBKCu2
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ApuKxCvBeY4pWX9OTCtIctCp5WcVxtwwzZTLqcSwZmwNuA7MH1BWXg==
X-Firefox-Spdy: h2
js-agent.newrelic.com/859.25fcbbf1-1221.js
151.101.194.137200 OK 6.0 kB URL HTTP/2 js-agent.newrelic.com/859.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (21758)
Hash 075e387e4c20df5b5c683b913e0a5c9d
53dbc08cad799a04cc54a293e0ceb73e4f7db989
e211ef672d665422463674a4239d0717ba21b6579f8151d4ee98a62fbf2296cf
GET /859.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +goQW8pSNEuaIL/VsSxuQTdOwAWWYzYUnH4OUaVbXC1zyfGdCkQKkZuApSeSUw3SR0m2dnPDMlc=
x-amz-request-id: 33WDWKJ4SEWGQJD2
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "955ba8bb9a6f4fec37ed25b54890b88a"
x-amz-version-id: LcQjPO428dQ4CkCwzu1ctp1i_7pNRF02
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 2863
x-timer: S1673689456.472469,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5994
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/connect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&stream=false&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0&rnd=4756885863466296
143.204.55.44200 OK 2.6 kB URL HTTP/2 realtime.pa.highwebmedia.com/comet/connect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&stream=false&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0&rnd=4756885863466296
IP 143.204.55.44:0
Hash 5c90588a7e00f5999448148045f04789
d39b232c44e06a7f5cfbe3cd7bf57373e5000bf4
972119391ace4714ca15101e8a5e079d960051b74ad1a754421a7a5b77756bb3
GET /comet/connect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&stream=false&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0&rnd=4756885863466296 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 544
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GgCx_Njic8HeT1Hcfzp2sXCKJTB8sGTbdU2DNPi91m4cnOUpaCP71w==
X-Firefox-Spdy: h2
js-agent.newrelic.com/142.25fcbbf1-1221.js
151.101.194.137200 OK 1.1 kB URL HTTP/2 js-agent.newrelic.com/142.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (2345)
Hash 71f961011f858ef2f4b165d179fc64e1
e6a0ec40fd51a661e07002537596ef06199e3115
a27642e9dd8653233b1533ca97571e7aef37ea3a5d9c7546acf0207566d0b4c8
GET /142.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VeM4EsXjiGs8WkKD3wDPXqjkBojUVpHeQYUd6AeIQqW7LgHmLMg0bwonEgLIVE2AI8Q/cHsTdv4=
x-amz-request-id: 33WF30PY4ETGE8WX
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "39c27fcfa6bb15809b306b5c915522b8"
x-amz-version-id: VffeRtNBrgVvjp64eZabDMMkJE1Mt0o3
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1587
x-timer: S1673689457.511797,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1086
X-Firefox-Spdy: h2
js-agent.newrelic.com/885.25fcbbf1-1221.js
151.101.194.137200 OK 6.1 kB URL HTTP/2 js-agent.newrelic.com/885.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (17644)
Hash 97c0d7c1612e142cabc0ad3a0723d6d1
1e7e560af64273095d299e31b6032ad78f0f99d8
e235a42b4b870933ff7636a77f99b738cfc63cecb96f3a44b38d01ad35b126b6
GET /885.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 4KhVyePQ1UPwd2qHRZ4YNJ71iPGoKlXvsppGkw9xRT9IEVemdT8bH3ZyfRm4O6KWMedIpxLgf8w=
x-amz-request-id: 33W7KTW3X5C68N7K
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "24b4856ed39246f3c0d71e48be979862"
x-amz-version-id: Js2cPjVhYFdcC2CsvlVQmVtMWUAuHzkv
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1013
x-timer: S1673689457.514976,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6086
X-Firefox-Spdy: h2
js-agent.newrelic.com/590.25fcbbf1-1221.js
151.101.194.137200 OK 3.9 kB URL HTTP/2 js-agent.newrelic.com/590.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (9523)
Hash 668d6ce7fa988afefd78e62feffc9d9e
b48b8d633d7c76a4e5ff41dbf35d343c6ed5fb75
22e86fcc62d926cd051d6bcd5a311afa0f78efaf8cf3d5a1cbf71b39ca81a6e3
GET /590.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: +WAd0nhhaELU6/6K1u657bMPgMX+p/bi2xBIxo3vsTzBlUlm/Iu/ThNWYpe2wHllyOk30oS/XfA=
x-amz-request-id: 33W9TWZ450414FCB
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "92e1944f8d0a41050f325890fd46d907"
x-amz-version-id: ojurhdR3hlmw0KgBN226TqH.sYUeq1Tt
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 2860
x-timer: S1673689457.515186,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3878
X-Firefox-Spdy: h2
js-agent.newrelic.com/620.25fcbbf1-1221.js
151.101.194.137200 OK 1.4 kB URL HTTP/2 js-agent.newrelic.com/620.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (3382)
Hash 4b76c1a5250116463e0f167307fcf69b
24b552c300a072c6a9c094d826fa993918905ad6
d628c6b3ed9b8ad3a290caf72f89e468d9c0cd04c35bd40c7d6e3d28f2a85782
GET /620.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: G5SPEC1qmgrRz0oifIt7QMuv9dtmloWy7lRJvrQCnEHJ5lhdUfo2e8UspB02z5eWi+nHvDvyOr4=
x-amz-request-id: 33WDHN92DJRQ7NX4
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "7169c597dc2cc2eda7ee9c54a7cceaf6"
x-amz-version-id: 6lV0qmNXhg30w3uSxv0KTWVW7Bqq19jz
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 2855
x-timer: S1673689457.515564,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1442
X-Firefox-Spdy: h2
i0.wp.com/caisealmarahotel.com/img/617175.jpg
192.0.77.2400 Bad Request 2.3 kB URL HTTP/2 i0.wp.com/caisealmarahotel.com/img/617175.jpg
IP 192.0.77.2:0
Hash 195dc6dcf6b07ef489ec9dbc7f62bed7
ba8caa6a9f7bb19e36b7d7640babd7c7d2107e7f
4132119fd987af5bda6c9a9f9f5846a111c643e01f8dc7957a9c95fc33bd8523
GET /caisealmarahotel.com/img/617175.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 2
X-Firefox-Spdy: h2
js-agent.newrelic.com/41.25fcbbf1-1221.js
151.101.194.137200 OK 631 B URL HTTP/2 js-agent.newrelic.com/41.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (1168)
Hash f0143998601aaf0ddfa4097f784a1d58
cf35ce7280d6577318a4e8f5f214db3432457749
4d101cb24ed05e0ed8184b7e7e66f3fc9cf6cb7df01d97ca6a112d5cbcc896e1
GET /41.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: r82uIew/usmqWhUEkzzu5KO/1rJUnKAvtO83PZPzPasUrzLGkl4IsXVRdn/g8+OHsaxGmwGiMNI=
x-amz-request-id: 33W672VSZRDH17MN
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "c1aa4a379e67391a744dd540f1cce912"
x-amz-version-id: kjJhv0udNxPYmQsH0WhUQa7Lt5whW0LX
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 2860
x-timer: S1673689457.515996,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 631
X-Firefox-Spdy: h2
js-agent.newrelic.com/244.25fcbbf1-1221.js
151.101.194.137200 OK 2.8 kB URL HTTP/2 js-agent.newrelic.com/244.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (7207)
Hash b2b420536393bb7215fd18d13309e7a4
1abddfa74581bdfb506ec7c85cf6f22227f0a976
344822f3215baebc2c1c439254d6d2ae59a26882a7a8fa279f68c8b36a4731bd
GET /244.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: xtX8p60ObiW2wx2089/nMoaJ+WWWWcaLHJAWFXXZnmpXx6nh4imo4JafIReNJSSj9U8NqqF2vMw=
x-amz-request-id: 33WD9114YCV8GNXF
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "10761414c69129d7b0eca13654453978"
x-amz-version-id: e2__U5byTFNhVa9OnsLbCmLc69kX_p7Y
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1593
x-timer: S1673689457.516247,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2760
X-Firefox-Spdy: h2
js-agent.newrelic.com/736.25fcbbf1-1221.js
151.101.194.137200 OK 2.3 kB URL HTTP/2 js-agent.newrelic.com/736.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (5220)
Hash 6a75f2958043c251fa41b4d7d5073acc
26785ff7cad1309e9e120ed24e2901565b619fc3
e922b3b6bde60fdf7f102ecd885dbaf79f81eb1cb9c23000d8302021dbea65de
GET /736.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: +IrQBISZYFuk7uIU3yB9SDF9VtuQonIdiaYIveQ+pXMlFui2wli+MFm+3x4s+nbbNMpXmGaKIhA=
x-amz-request-id: 33W7XTJM59R04C51
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "f89e0773b439273abd9cce629a69a68e"
x-amz-version-id: Jd0S.YVh9CaXfPOCqdoECl_Mx9lbK5bG
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1592
x-timer: S1673689457.516564,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2337
X-Firefox-Spdy: h2
js-agent.newrelic.com/466.25fcbbf1-1221.js
151.101.194.137200 OK 3.0 kB URL HTTP/2 js-agent.newrelic.com/466.25fcbbf1-1221.js
IP 151.101.194.137:0
File type ASCII text, with very long lines (7471)
Hash a9231455aa396b0e632e054ea15a9aa3
412861ca0fadddca0a1ace12188a2bee72896a57
e0466a88caa4f467636230d795326b0230d76af128d25da38cc4b4853747ee1c
GET /466.25fcbbf1-1221.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: gkokY6tUrggDoAf4vGDmPhGIZ3bZaK+EEiKSVYell+e/N8+6p5+u+Xq+mKER90YnIWXCzDmB4K4=
x-amz-request-id: 33W8FS94KW84WSYH
last-modified: Fri, 09 Dec 2022 15:30:38 GMT
etag: "eff7d2245d8d47fee06efb3b1f53af37"
x-amz-version-id: qv9p0IVfilK3D.ZTQ1hUosNHmmv.lLd6
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sat, 14 Jan 2023 09:44:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1592
x-timer: S1673689457.516777,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2995
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=5105899562029721
143.204.55.44204 No Content 0 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=5105899562029721
IP 143.204.55.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=5105899562029721 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Content-Length,Accept,Authorization,X-Ably-Version,X-Ably-Lib,X-Ably-ClientId,Ably-Agent
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-origin: https://chaturbate.com
access-control-max-age: 3600
date: Sat, 14 Jan 2023 09:44:16 GMT
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sulKwDqd3CAEQDqNdF8GugSuYXBlTkvxVoMZMnbzb18_gGxeFp7tWg==
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9634092099172861
131.153.88.95200 OK 30 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9634092099172861
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 6314fb31744f45ee9c2a89d6c02539fb
9770b0e20bdda8ae5eb97959847001d0660c630b
de38583398d30b349a028422b9f530dfe5d5434a2cb68f94550f6de2ae1e8971
GET /stream?room=sae__&f=0.9634092099172861 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:16 GMT
content-type: image/jpeg
content-length: 29766
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&upgrade=e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5&format=json&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0
143.204.55.28101 Switching Protocols 0 B URL HTTP/1.1 realtime.pa.highwebmedia.com/?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&upgrade=e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5&format=json&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0
IP 143.204.55.28:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&upgrade=e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5&format=json&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://chaturbate.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: S1k8ci1kMuQKMfOfNiagHQ==
Connection: keep-alive, Upgrade
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 14 Jan 2023 09:44:16 GMT
Connection: upgrade
Sec-Websocket-Accept: 16DqQF/7gUuUUa90LHJhFJ1aFdI=
Upgrade: websocket
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cKmkn_8OXpei3WmLV3I1w4P1-arbznb-4CbUul2GCnCfEuk01lWvHA==
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=5105899562029721
143.204.55.44201 Created 2 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=5105899562029721
IP 143.204.55.44:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
POST /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=5105899562029721 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
Content-Length: 77
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fhxwjz94iQnMeVWX57UbNVSjo9ogdLIHFuhT-Lor7bRd-K7i60Tsjg==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=195562115981183
143.204.55.44200 OK 147 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=195562115981183
IP 143.204.55.44:0
File type JSON data\012- , ASCII text
Hash 1ed00661ad048b2cc15c188281692a5b
2263ccd38669bd200634a3d2be661f063fd1db38
852a741a638af6fd6d6406e0eacfd074e471dcde05a331233006b7a529cdc6b6
GET /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=195562115981183 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 147
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BLDLe-sQaxbNcfAgHbcCw7NFW3ndQ6kEMIyFRIoWChHtIRZ7T0ixuw==
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9496209948647466
131.153.88.95200 OK 30 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9496209948647466
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 6314fb31744f45ee9c2a89d6c02539fb
9770b0e20bdda8ae5eb97959847001d0660c630b
de38583398d30b349a028422b9f530dfe5d5434a2cb68f94550f6de2ae1e8971
GET /stream?room=sae__&f=0.9496209948647466 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:16 GMT
content-type: image/jpeg
content-length: 29766
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=6757964306680725
143.204.55.44204 No Content 0 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=6757964306680725
IP 143.204.55.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=6757964306680725 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Content-Length,Accept,Authorization,X-Ably-Version,X-Ably-Lib,X-Ably-ClientId,Ably-Agent
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
access-control-allow-origin: https://chaturbate.com
access-control-max-age: 3600
date: Sat, 14 Jan 2023 09:44:16 GMT
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: akgET9SlE8Dnm21ABlikHYtHl50d5I-TORw1-Ogkc7FWXCaMIgScVQ==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=7931011438006276
143.204.55.44200 OK 1.5 kB URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=7931011438006276
IP 143.204.55.44:0
File type JSON data\012- , ASCII text
Hash 2ba0fe0c64b671057cde92e691c09bed
1faf2691573fc6e2ef64d436510b8163cefbfd9d
f827599ffff7fd6226889ea07b65f03f2711a436a0a36c4e0b3d93364e5a2687
GET /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=7931011438006276 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1466
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MWGl48uuMp6Lz9BiZh8ZGYHJoBtrtoR44LZQgpRfz21J8jN9uZgRYA==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=6757964306680725
143.204.55.44201 Created 2 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=6757964306680725
IP 143.204.55.44:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
POST /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/send?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=6757964306680725 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: application/json
Content-Length: 1312
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: N534ioSd2BPIXW9AVqF6R2Cm-5vr6Qf2-Nvekimje4GVN7MdCH-3PQ==
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=020816895229738952
143.204.55.44200 OK 1.0 kB URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=020816895229738952
IP 143.204.55.44:0
File type JSON data\012- , ASCII text
Hash 45f1c4173b7ef70e58da123bad8ffa40
602520c0882ccb22dac1926dd460966fd1eee607
dfd611b54e9b0a0ecebafa2d16a9b2cc283d0d15fab78ed0e22f94b6a63d8384
GET /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/recv?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=020816895229738952 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1002
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SQ-ndtY0LigQiAVi6oZniWg7WzkssYkd1y7sO89kT119E-FZDIwSRg==
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.6172487010041602
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.6172487010041602
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 7eaba71b7a71c1fd01582a29e4de5bd4
ecf3c9dd26323bd6797420aac8609c07586ea876
be3a885cb8446173b0f67dced1a9ef77281f3add49c098db61cff36b1a7dae97
GET /stream?room=sae__&f=0.6172487010041602 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:16 GMT
content-type: image/jpeg
content-length: 29204
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/disconnect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=9029986033241935
143.204.55.44204 No Content 0 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/disconnect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=9029986033241935
IP 143.204.55.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comet/e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5/disconnect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&rnd=9029986033241935 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 43r4Nxsut9lISG5-uB3e-YYRnyKxm0S-8BUGgfIEBDIy0dUy8j37mw==
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a610c6e51ee961edf7c34eb0f33a549e
1982532c1f2df05c5a46183ea80ea722005cabe0
5c9e7fcfc6df3915157d836bda023d9831b8b49d8cc360627e571e0ad9afbc8c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2422
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 09:44:16 GMT
Last-Modified: Sat, 14 Jan 2023 09:03:54 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.644611716682254
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.644611716682254
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 946c45d6ffd1594e71cd77f71bbbd71e
ba10f7cff413bb51247b777c2f1721e31dc623d6
372281e4c2fe0b0efc4c9e709b79d9f8e4ddc47423136cc272025d50df1e0c1a
GET /stream?room=sae__&f=0.644611716682254 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 28967
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
bam.nr-data.net/1/6f524845d1?a=24279235&v=1221.PROD&to=MwYEbUdYXxJQWhULDApMIExbWkUIXldOAQsFF0hPXFxGEgtrDg0OMgoDThteVBU%3D&rst=2547&ck=0&s=e48c4f909cde0eaa&ref=https://chaturbate.com/embed/sae__/&ap=81&be=627&fe=1186&dc=418&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1673689437690,%22n%22:0,%22r%22:0,%22re%22:351,%22f%22:351,%22dn%22:351,%22dne%22:351,%22c%22:351,%22s%22:351,%22ce%22:351,%22rq%22:353,%22rp%22:598,%22rpe%22:598,%22dl%22:602,%22di%22:1043,%22ds%22:1044,%22de%22:1051,%22dc%22:1812,%22l%22:1812,%22le%22:1817%7D,%22navigation%22:%7B%22rc%22:2%7D%7D&fcp=1822&at=H0ETGw9CExRCXBM9CgBBXAkZG0QSVEsPAw4BQVwbamZQD15XPj1BSEEVUFJXRBFuXQAWBkZZVhUXenc%2BY1gYQFlGVF4AAA9UWAMJBFcHBlcACBh2Yi0TFUMhJTshCU0XAwhTHRsiJDwmDBJ8TU1DABMDQwQCCBADFVNYXRJUG01AEQECCmZcSRNbEwBQTFpUTVILGwgEVRMVQwMNCw05X1lYVhITA0NAT0YBA0pBZlYUVEoSPQoUQVwbDAgfWAEXVVBNVVZSGxkbUwRCTT4FFgEQFWZSXF5DCxsvLUFIQQ9JalpeFF9NExtBXkEodhcVEwhBZgINFgoXFEBqWl4PV1AFBw0HBkQDFwAIQx0bCBI8CgYSTlpLWkMLGwMOChxNBVZYGx1DWEk%2BDREDAghQT1hFCF5XQ1hBJg8PQRVqXg1ETQgNDRdBShtcSW4IQklDWEEmDw9BFWpeDURNCA0NF0FKG1xJbgBCV0NYVlRQVg0ZG1gRblgSDDwLEQEbDxtzDVhBQTEMCBYSUFpXQkFwakNOQQ0TOVpaV18EUk0IDQ07Fx9JUBsLQ3JYAw4GSyc1dRcVEwhBZhQRBhY8EkBFXBNbE0sEEQoABghNXFhdQx0bEwcSEQYVTWpJUBVZG1tATAEOBFxRFkIAVGY%2BTUFIQRFValFeEkUbW0AADAISTEdbUBVUFwINDkZPREpcTVQ%2BWF1DWFJIQRVQQVxuBV5UAAsNRllEWl1YRRRDWwAWBkoACVQXFRMTVEgUBxAQPA5WRk0TWxNaCQMXEREEWEFcHwJeVENOQQYRCU5GXEM%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%3D&jsonp=NREUM.setToken
162.247.241.14200 OK 690 B URL HTTP/1.1 bam.nr-data.net/1/6f524845d1?a=24279235&v=1221.PROD&to=MwYEbUdYXxJQWhULDApMIExbWkUIXldOAQsFF0hPXFxGEgtrDg0OMgoDThteVBU%3D&rst=2547&ck=0&s=e48c4f909cde0eaa&ref=https://chaturbate.com/embed/sae__/&ap=81&be=627&fe=1186&dc=418&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1673689437690,%22n%22:0,%22r%22:0,%22re%22:351,%22f%22:351,%22dn%22:351,%22dne%22:351,%22c%22:351,%22s%22:351,%22ce%22:351,%22rq%22:353,%22rp%22:598,%22rpe%22:598,%22dl%22:602,%22di%22:1043,%22ds%22:1044,%22de%22:1051,%22dc%22:1812,%22l%22:1812,%22le%22:1817%7D,%22navigation%22:%7B%22rc%22:2%7D%7D&fcp=1822&at=H0ETGw9CExRCXBM9CgBBXAkZG0QSVEsPAw4BQVwbamZQD15XPj1BSEEVUFJXRBFuXQAWBkZZVhUXenc%2BY1gYQFlGVF4AAA9UWAMJBFcHBlcACBh2Yi0TFUMhJTshCU0XAwhTHRsiJDwmDBJ8TU1DABMDQwQCCBADFVNYXRJUG01AEQECCmZcSRNbEwBQTFpUTVILGwgEVRMVQwMNCw05X1lYVhITA0NAT0YBA0pBZlYUVEoSPQoUQVwbDAgfWAEXVVBNVVZSGxkbUwRCTT4FFgEQFWZSXF5DCxsvLUFIQQ9JalpeFF9NExtBXkEodhcVEwhBZgINFgoXFEBqWl4PV1AFBw0HBkQDFwAIQx0bCBI8CgYSTlpLWkMLGwMOChxNBVZYGx1DWEk%2BDREDAghQT1hFCF5XQ1hBJg8PQRVqXg1ETQgNDRdBShtcSW4IQklDWEEmDw9BFWpeDURNCA0NF0FKG1xJbgBCV0NYVlRQVg0ZG1gRblgSDDwLEQEbDxtzDVhBQTEMCBYSUFpXQkFwakNOQQ0TOVpaV18EUk0IDQ07Fx9JUBsLQ3JYAw4GSyc1dRcVEwhBZhQRBhY8EkBFXBNbE0sEEQoABghNXFhdQx0bEwcSEQYVTWpJUBVZG1tATAEOBFxRFkIAVGY%2BTUFIQRFValFeEkUbW0AADAISTEdbUBVUFwINDkZPREpcTVQ%2BWF1DWFJIQRVQQVxuBV5UAAsNRllEWl1YRRRDWwAWBkoACVQXFRMTVEgUBxAQPA5WRk0TWxNaCQMXEREEWEFcHwJeVENOQQYRCU5GXEM%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%3D&jsonp=NREUM.setToken
IP 162.247.241.14:0
Hash 03ccc0bc1e39b8f9bcb1ba6715bd1f2b
6c6de0a12307bb11da7214eac3f4b4d82b7fd378
4e2036011b1972ca4eba93b6c4b63d1367b23e5a37fe51b72b24e39b1618e58b
GET /1/6f524845d1?a=24279235&v=1221.PROD&to=MwYEbUdYXxJQWhULDApMIExbWkUIXldOAQsFF0hPXFxGEgtrDg0OMgoDThteVBU%3D&rst=2547&ck=0&s=e48c4f909cde0eaa&ref=https://chaturbate.com/embed/sae__/&ap=81&be=627&fe=1186&dc=418&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1673689437690,%22n%22:0,%22r%22:0,%22re%22:351,%22f%22:351,%22dn%22:351,%22dne%22:351,%22c%22:351,%22s%22:351,%22ce%22:351,%22rq%22:353,%22rp%22:598,%22rpe%22:598,%22dl%22:602,%22di%22:1043,%22ds%22:1044,%22de%22:1051,%22dc%22:1812,%22l%22:1812,%22le%22:1817%7D,%22navigation%22:%7B%22rc%22:2%7D%7D&fcp=1822&at=H0ETGw9CExRCXBM9CgBBXAkZG0QSVEsPAw4BQVwbamZQD15XPj1BSEEVUFJXRBFuXQAWBkZZVhUXenc%2BY1gYQFlGVF4AAA9UWAMJBFcHBlcACBh2Yi0TFUMhJTshCU0XAwhTHRsiJDwmDBJ8TU1DABMDQwQCCBADFVNYXRJUG01AEQECCmZcSRNbEwBQTFpUTVILGwgEVRMVQwMNCw05X1lYVhITA0NAT0YBA0pBZlYUVEoSPQoUQVwbDAgfWAEXVVBNVVZSGxkbUwRCTT4FFgEQFWZSXF5DCxsvLUFIQQ9JalpeFF9NExtBXkEodhcVEwhBZgINFgoXFEBqWl4PV1AFBw0HBkQDFwAIQx0bCBI8CgYSTlpLWkMLGwMOChxNBVZYGx1DWEk%2BDREDAghQT1hFCF5XQ1hBJg8PQRVqXg1ETQgNDRdBShtcSW4IQklDWEEmDw9BFWpeDURNCA0NF0FKG1xJbgBCV0NYVlRQVg0ZG1gRblgSDDwLEQEbDxtzDVhBQTEMCBYSUFpXQkFwakNOQQ0TOVpaV18EUk0IDQ07Fx9JUBsLQ3JYAw4GSyc1dRcVEwhBZhQRBhY8EkBFXBNbE0sEEQoABghNXFhdQx0bEwcSEQYVTWpJUBVZG1tATAEOBFxRFkIAVGY%2BTUFIQRFValFeEkUbW0AADAISTEdbUBVUFwINDkZPREpcTVQ%2BWF1DWFJIQRVQQVxuBV5UAAsNRllEWl1YRRRDWwAWBkoACVQXFRMTVEgUBxAQPA5WRk0TWxNaCQMXEREEWEFcHwJeVENOQQYRCU5GXEM%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%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:17 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 78956ea24cc5b4ee-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.04065114501634337
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.04065114501634337
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 292738d1463484ea6c8b6e61350af0b8
1bde23e97501efbcf3f1c3e0c185ae09b1a07b22
cd222a357fbd257c2ec16df560ad753fb24ffd08581d0a9b31bdd8d4d2645a10
GET /stream?room=sae__&f=0.04065114501634337 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 29107
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.4001557299474253
131.153.88.95200 OK 30 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.4001557299474253
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash b5013c045cfdd63cf3d5661466ef8aef
b971bc4bf5622f1b1101c666eafb9154cda04e57
abf04f8cea5056c8f06b491d84b95337a3235a96493afe711a6bd298cd0ec817
GET /stream?room=sae__&f=0.4001557299474253 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 29718
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
bam.nr-data.net/events/1/6f524845d1?a=24279235&v=1221.PROD&to=MwYEbUdYXxJQWhULDApMIExbWkUIXldOAQsFF0hPXFxGEgtrDg0OMgoDThteVBU%3D&rst=3131&ck=0&s=e48c4f909cde0eaa&ref=https://chaturbate.com/embed/sae__/
162.247.241.14200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/6f524845d1?a=24279235&v=1221.PROD&to=MwYEbUdYXxJQWhULDApMIExbWkUIXldOAQsFF0hPXFxGEgtrDg0OMgoDThteVBU%3D&rst=3131&ck=0&s=e48c4f909cde0eaa&ref=https://chaturbate.com/embed/sae__/
IP 162.247.241.14:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/6f524845d1?a=24279235&v=1221.PROD&to=MwYEbUdYXxJQWhULDApMIExbWkUIXldOAQsFF0hPXFxGEgtrDg0OMgoDThteVBU%3D&rst=3131&ck=0&s=e48c4f909cde0eaa&ref=https://chaturbate.com/embed/sae__/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
content-type: text/plain
Content-Length: 2552
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 14 Jan 2023 09:44:17 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 78956ea37e3db4ee-OSL
Access-Control-Allow-Origin: https://chaturbate.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.8275820740927233
131.153.88.95200 OK 30 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.8275820740927233
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash bc12de057e893f9d596bab6d18689de9
4ec8e4fc83c089f2acb63d15cdd220aa458bfb1c
35f23cac07dce67db433d63031760bf412d65c66be750c89436a08a875cabb26
GET /stream?room=sae__&f=0.8275820740927233 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 29830
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9916085015052873
131.153.88.95200 OK 30 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9916085015052873
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash bc12de057e893f9d596bab6d18689de9
4ec8e4fc83c089f2acb63d15cdd220aa458bfb1c
35f23cac07dce67db433d63031760bf412d65c66be750c89436a08a875cabb26
GET /stream?room=sae__&f=0.9916085015052873 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 29830
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.5625054750231825
131.153.88.95200 OK 26 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.5625054750231825
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 96f371470c68a1acf821f19718e2ae6c
01c289281629c886afe0b488be0de0902c02db0e
ad6132a832ff6c6a25d4f39a0602f02346e76776c61ca14c93515d1a054605dd
GET /stream?room=sae__&f=0.5625054750231825 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 25583
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.42476382419989533
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.42476382419989533
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 367766d317db9ff8c8418de6a5c2e3e0
935f70b2b35c0df0e893a048a8ff927fd3211829
62f6e37baf61121e591c62ce517b54d12e3d6656c2c711b7f1a36d930035743d
GET /stream?room=sae__&f=0.42476382419989533 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:17 GMT
content-type: image/jpeg
content-length: 29336
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9192927969523705
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.9192927969523705
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 367766d317db9ff8c8418de6a5c2e3e0
935f70b2b35c0df0e893a048a8ff927fd3211829
62f6e37baf61121e591c62ce517b54d12e3d6656c2c711b7f1a36d930035743d
GET /stream?room=sae__&f=0.9192927969523705 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:18 GMT
content-type: image/jpeg
content-length: 29336
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.8331706599707365
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.8331706599707365
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 3e149f9a4b4c028634a8aa8b90dc6525
73d264b12addce1f7048c0169e0b4af460f23fa0
e46a1c1536344c2766e2a77c5f2b3f8353898aa5a1ea04947039ef1ed12520cf
GET /stream?room=sae__&f=0.8331706599707365 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:18 GMT
content-type: image/jpeg
content-length: 29085
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.0743068924814776
131.153.88.95200 OK 29 kB URL HTTP/2 cbjpeg.stream.highwebmedia.com/stream?room=sae__&f=0.0743068924814776
IP 131.153.88.95:0
ASN #50389 Phoenix Nap, LLC.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 854x480, components 3\012- data
Hash 3e149f9a4b4c028634a8aa8b90dc6525
73d264b12addce1f7048c0169e0b4af460f23fa0
e46a1c1536344c2766e2a77c5f2b3f8353898aa5a1ea04947039ef1ed12520cf
GET /stream?room=sae__&f=0.0743068924814776 HTTP/1.1
Host: cbjpeg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 09:44:18 GMT
content-type: image/jpeg
content-length: 29085
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
cache-tag: cbjpeg
x-frame-options: DENY
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.21e4d7885076.js
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.21e4d7885076.js
IP 104.16.94.42:0
GET /CACHE/js/output.21e4d7885076.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=114830
etag: W/"b4ad9510a310ef8a83f71a5f317f091d"
last-modified: Wed, 02 Nov 2022 16:55:42 GMT
x-amz-id-2: PsN3iv65Njn7hNZwOdYd1oAvY+pAIQWUXN9tndhJWmeM1MvoPlyG8vIpgAHr+IS5kjdZ1+l3zUY=
x-amz-meta-s3cmd-attrs: md5:b4ad9510a310ef8a83f71a5f317f091d
x-amz-request-id: QXPZJGZRTB4AE79K
cf-cache-status: HIT
age: 1097160
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1CUZY6zJBBPtRU%2B93DiFCYXWPOhEbw518u9Me8l7ZfloNfzDFF5nFNIsdObG2%2FYh5XZqxW3868twsp7SWcmvVySDtAsoQzTtw6uv8ZuoyEaoZWM%2BgT%2F%2BoU0KSQgQGEN6oQFjPUEiYnl%2FX20sfq%2FSJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=BM0VrVV5Xv1p3obxSUiAtJ4jhdnglKeQCBwKMsReYoY-1673689454731-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e940f34b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/hypnohub.net/data/image/741b38499e241882dca90f2e2069add2.gif
192.0.77.2404 Not Found 0 B URL HTTP/2 i0.wp.com/hypnohub.net/data/image/741b38499e241882dca90f2e2069add2.gif
IP 192.0.77.2:0
GET /hypnohub.net/data/image/741b38499e241882dca90f2e2069add2.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 3
X-Firefox-Spdy: h2
chaturbate.com/gotoroom/embed/?join_overlay=1&tour=9oGW&campaign=sEuAC&room=sae__&disable_sound=1&bgcolor=white
104.18.100.40302 Found 0 B URL HTTP/2 chaturbate.com/gotoroom/embed/?join_overlay=1&tour=9oGW&campaign=sEuAC&room=sae__&disable_sound=1&bgcolor=white
IP 104.18.100.40:0
GET /gotoroom/embed/?join_overlay=1&tour=9oGW&campaign=sEuAC&room=sae__&disable_sound=1&bgcolor=white HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ftte.fun/
Connection: keep-alive
Cookie: __cf_bm=YRGN1RcQ6EGly.e5iUpXjB2jI.WYxu2ZIG0BmCho1Ss-1673689454-0-Acf/L0plJ+tJJwxNZXmsUmn3QW1MbQ3yJAuc0kA2mBFmnF3U0T6MOBIeGIhXr1vj5bp6GYTB9YCJVwOLnRUTfH0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: text/html; charset=utf-8
location: /embed/sae__/?join_overlay=1&tour=9oGW&campaign=sEuAC&room=sae__&disable_sound=1&bgcolor=white
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
set-cookie: affkey="eJyrVipSslJQyigpKSi20tdPKylJ1UsrzdNXqgUAbhsIcQ=="; Domain=.chaturbate.com; expires=Mon, 13 Feb 2023 09:44:14 GMT; Max-Age=2592000; Path=/
sbr=sec:sbrcb862213-4a89-4610-80e1-fb1f7fe574f8:1pGd5C:udu-aaVlJ5CNeqZEhvklYqlesik; Domain=.chaturbate.com; expires=Thu, 09 Oct 2025 09:44:14 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78956e90f8061c02-OSL
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.e1067846ea15.js
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.e1067846ea15.js
IP 104.16.94.42:0
GET /CACHE/js/output.e1067846ea15.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=108152
etag: W/"97a23c5e27826ee4bed1dbcfe0601da8"
last-modified: Thu, 24 Jun 2021 21:24:09 GMT
x-amz-id-2: gJdq637yDaGW5b/k/xLZcaVgKR2zPrz11wa1iwf3/kEEAF2JWIngCVC4T9LIrDSnBaklrTBcytM=
x-amz-meta-s3cmd-attrs: md5:97a23c5e27826ee4bed1dbcfe0601da8
x-amz-request-id: C8A0N4S7KE12CYZQ
cf-cache-status: HIT
age: 2463404
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=klcqpklMC3paykPuYNHLCAenuYXR3fePXOxOnoMHKKJlWcBnwqHMOrOCbeDkPIGNuVm2zgPQWsVbKwpLhTWoLj1mh5K5vQyQy1KwqOHgZ16uGyafUzlORmJChuCMHOXCmhc9v2RpQw1DGoQGITpyeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=Tv3FEw08xfHi5rxLqO105jqKnmQHGczBRAppgxTB8hU-1673689454728-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e93ff28b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/cachebust/theatermode-react-374f59df6177.js
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/cachebust/theatermode-react-374f59df6177.js
IP 104.16.94.42:0
GET /cachebust/theatermode-react-374f59df6177.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=218816
etag: W/"f6484344b1b351f17310ba14e238f5f6"
last-modified: Sat, 14 Jan 2023 03:33:58 GMT
x-amz-id-2: QhkRI7/ErqKkjQlVhpaxdy8dnaXRobuiwMFyuQTqTHKPMGpBXimS+kPe6a5gNmOdGen7hGbU1KU=
x-amz-meta-s3cmd-attrs: md5:f6484344b1b351f17310ba14e238f5f6
x-amz-request-id: Z9QY58RHNQBZ8NED
cf-cache-status: HIT
age: 22046
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bDgeuCA6LV9kzIZsUm6GOEX6%2FSXi%2B1pYSjKaj0PGOVMinaFQrPPZq4s2IORyGWjdHmEljiZRv89YeoSN7NJDkb8G86VCE3hwSo%2FPv22DX4HxPF9veGnJJ1LHhMlM5Vr3gUhlsbOSQ7lV2fwwW3T%2FpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=qvhre2lbgr7fbV_L557LHcsfbKOo._XQ.DkxVf7eMVs-1673689454729-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e93ff2cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/hypnohub.net/data/image/741b38499e241882dca90f2e2069add2.gif
192.0.77.2404 Not Found 0 B URL HTTP/2 i0.wp.com/hypnohub.net/data/image/741b38499e241882dca90f2e2069add2.gif
IP 192.0.77.2:0
GET /hypnohub.net/data/image/741b38499e241882dca90f2e2069add2.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 14 Jan 2023 09:44:13 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 3
X-Firefox-Spdy: h2
wankgod.com/links-en.php?&jl=4
188.114.97.1200 OK 0 B URL HTTP/2 wankgod.com/links-en.php?&jl=4
IP 188.114.97.1:0
GET /links-en.php?&jl=4 HTTP/1.1
Host: wankgod.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:11 GMT
content-type: application/javascript
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T0GL%2Fk%2FqZVn7bZ%2F9SHWwHNmmazjTkv3qOQ5uoraN1C5rvG5ti0jz0UvnZMwNi9LDm2Gd0lPCQFJRagLgcDh8IXzebcFKE8dysFwjqJlNQZyVaerpWXJUJWX20sTU2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78956e7e189fb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.caee332d326d.js
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.caee332d326d.js
IP 104.16.94.42:0
GET /CACHE/js/output.caee332d326d.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
etag: W/"b61e15511bf0db70d0d422e98c465403"
last-modified: Thu, 24 Jun 2021 21:24:08 GMT
x-amz-id-2: gAJe87IyJM0OkbaBgua73HTcoEANURYYk4wpsNNClr414DBIRL/v+K+9hxRFHrgcwnw38qlmXmM=
x-amz-meta-s3cmd-attrs: md5:b61e15511bf0db70d0d422e98c465403
x-amz-request-id: 2D5TZ021KE4200HB
cf-cache-status: HIT
age: 2463410
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ruNHNusa03i4Q0K3U6LbIyeHg0RPUKc00n7AEqclhv%2B2vyMHCPXgm6AmpA46Fpk3e6bEmo6hhMlZcTQdpyw9N3FvtZKqBDz5MHQlvjRA5EBMUo1ToQhUA7QZ6iQszxDq3SK9MvLpS9lLtSXwmiVROg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=986CBxj4UAlqZ8HHdtWZfAq6M_b_tLF89rdOXu1P3oo-1673689454725-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e93ff24b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.90a7a6687776.js
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.90a7a6687776.js
IP 104.16.94.42:0
GET /CACHE/js/output.90a7a6687776.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
etag: W/"eba6018c1d2ab593c234e5750506e38a"
last-modified: Mon, 17 Oct 2022 21:37:31 GMT
x-amz-id-2: MuRi9INFlyZ8s0MfpOqtyosRRye3EDr/cdpWTRrQUKKo6PNFSGfohJwm10zs48bLswjVhUc8b0Z/eZ9oVm3U4Q==
x-amz-meta-s3cmd-attrs: md5:eba6018c1d2ab593c234e5750506e38a
x-amz-request-id: VR1ABN9AAN3FB4KK
cf-cache-status: HIT
age: 2462653
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2FlsMwiVW4USMN5yobNPLn4zCZWhjhpp0KZ%2BdlLIld3rdtKzLGF8UnDBgyIJ1CdT0aBzMy9Xz8mxMihYkU38yUy%2FEw1z3gn3E0WYpN5eshWj3YhdKhrlsM6wFjKHHZayeaAF8%2B%2BRfLluTo%2FcrRTecQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=6ff3fe7OnP69KuuOX3jIhB15R6wmqQ1K3G1yRoRUoDI-1673689454732-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e93ff2bb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chaturbate.com/in/?tour=9oGW&campaign=sEuAC&track=rem_ban_62651_336x280&room=sae__&disable_sound=1&bgcolor=white
104.18.100.40302 Found 0 B URL HTTP/2 chaturbate.com/in/?tour=9oGW&campaign=sEuAC&track=rem_ban_62651_336x280&room=sae__&disable_sound=1&bgcolor=white
IP 104.18.100.40:0
GET /in/?tour=9oGW&campaign=sEuAC&track=rem_ban_62651_336x280&room=sae__&disable_sound=1&bgcolor=white HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ftte.fun/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: text/html; charset=utf-8
location: /gotoroom/embed/?join_overlay=1&tour=9oGW&campaign=sEuAC&room=sae__&disable_sound=1&bgcolor=white
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_9oGW=1; expires=Thu, 19 Jan 2023 09:44:14 GMT; Max-Age=432000; Path=/
us_9oGW=1; Path=/
affkey="eJyrVipRslJQssx3D1fSUVBKzi0AcYtdSx2dQfySomwQvyg1Nz4pMS/ezMjM1DDe2NiswsjCACRfBJLNKCkpKLbS108rKUnVSyvN0wfJJKalgeQKckrTi0qLM0BCYKONDJVqAU3yIBE="; Domain=.chaturbate.com; expires=Mon, 13 Feb 2023 09:44:14 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Sat, 14 Jan 2023 15:44:14 GMT; Max-Age=21600; Path=/
sbr=sec:sbr7f8fbef7-8c82-41c9-92d8-63a79dd3bbf0:1pGd5C:yYcPvUvdKac52QJ7NiWHEb9u1KI; Domain=.chaturbate.com; expires=Thu, 09 Oct 2025 09:44:14 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=YRGN1RcQ6EGly.e5iUpXjB2jI.WYxu2ZIG0BmCho1Ss-1673689454-0-Acf/L0plJ+tJJwxNZXmsUmn3QW1MbQ3yJAuc0kA2mBFmnF3U0T6MOBIeGIhXr1vj5bp6GYTB9YCJVwOLnRUTfH0=; path=/; expires=Sat, 14-Jan-23 10:14:14 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78956e8fff411c02-OSL
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/jsi18n/en/djangojs.js?hash=374f59df6177
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/jsi18n/en/djangojs.js?hash=374f59df6177
IP 104.16.94.42:0
GET /jsi18n/en/djangojs.js?hash=374f59df6177 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=3271
etag: W/"32cad827f4958bb8450fc33065ba4b42"
last-modified: Thu, 28 Apr 2022 02:42:35 GMT
x-amz-id-2: 6tnnTpUJvfVZEYLO3PIkFeZJ+BZ8Y6deE4qOiLgs/lnJalBilep2QsDOhXI51ZL7qGlJD4pBpOd4pSdRnUuhTQ==
x-amz-meta-s3cmd-attrs: md5:32cad827f4958bb8450fc33065ba4b42
x-amz-request-id: EF4R7J42XNX1BXGF
cf-cache-status: HIT
age: 22046
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e3fdhqyPvdQh77YpPAnAJWvmSpBLJxjDGK%2BjS%2FfInOQwkEjWFlvMshdwC8g5gTXhH%2BAqsNiHYo0iJ49KZF1CWfVzPmUHDsjBbRyG9DvVlpCDsrJh%2FCczeMMP2iQ%2BcTAwEk%2B62nuPXmJNZgoIJPzE1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=rCYHAWi2eOny_3sOFDaBtkyYcF2ZT2ddhicSm4BCmt8-1673689454733-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e940f39b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.97a5db11ca63.js
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.97a5db11ca63.js
IP 104.16.94.42:0
GET /CACHE/js/output.97a5db11ca63.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=827275
etag: W/"692ec922d2a39b4037073f70286968b3"
last-modified: Fri, 13 May 2022 09:09:46 GMT
x-amz-id-2: VZ8ol5gj9DR4cR1Ys+gd3EdgeEH8vduV/GWCX0hMYtqbtTyLc8wtgelbUHUwXR/km7ekid2PJdA=
x-amz-meta-s3cmd-attrs: md5:692ec922d2a39b4037073f70286968b3
x-amz-request-id: WKBNH94P832M1DR9
cf-cache-status: HIT
age: 519931
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LU5iH3SkpzAWsnVtChhjoJmYnlVfR3EaPtZE93dalJNCxYUQOTMtSmtbuWH2kFrzMrsJHpiMDTHxQJyjx29GPyMaL8LkgW5uLl1EvF24SiXYT7FLpUISXhQkjCBb0xk09pyMILELJS3KTqog0vTbig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=NbOzCaiKKXxDAEjTMlyLPJceMwZoAiuEQSfqfSx06i0-1673689454726-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e93ff29b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
realtime.pa.highwebmedia.com/comet/connect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&upgrade=e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0&rnd=45741715617202117
143.204.55.44200 OK 0 B URL HTTP/2 realtime.pa.highwebmedia.com/comet/connect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&upgrade=e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0&rnd=45741715617202117
IP 143.204.55.44:0
GET /comet/connect?access_token=KSKw2g.AL36ISgy8nnB3si8dkzzsWUKXNSIiqkkpAS51JBelou26BE-Pc&upgrade=e912va4zABKCsH!InpV9BqJFxFUT2NP-908a5&heartbeats=true&v=1.2&agent=ably-js%2F1.2.13%20browser&remainPresentFor=0&rnd=45741715617202117 HTTP/1.1
Host: realtime.pa.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://chaturbate.com
access-control-expose-headers: Link,Transfer-Encoding,Content-Length,X-Ably-ErrorCode,X-Ably-ErrorMessage,X-Ably-ServerId,X-Ably-Cluster,Server
date: Sat, 14 Jan 2023 09:44:16 GMT
vary: Origin
x-ably-cluster: production:highwebmedia
x-ably-serverid: frontend.cda2.3.eu-central-1-A.i-0c339a2ae5e1ae422.e912va4zABKCsH
x-content-type-options: nosniff
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZCY6YUxurAXiuCxiUU100mYEzJPTy6lHOLz6Jq7gWVqSEr0nbWP6Fw==
X-Firefox-Spdy: h2
i0.wp.com/caisealmarahotel.com/img/617175.jpg
192.0.77.2400 Bad Request 0 B URL HTTP/2 i0.wp.com/caisealmarahotel.com/img/617175.jpg
IP 192.0.77.2:0
GET /caisealmarahotel.com/img/617175.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igfap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
date: Sat, 14 Jan 2023 09:44:13 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 2
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/css/output.4f2b3f54ddd3.css
104.16.94.42200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/css/output.4f2b3f54ddd3.css
IP 104.16.94.42:0
GET /CACHE/css/output.4f2b3f54ddd3.css HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 09:44:14 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=212831
etag: W/"86efc58330e2b2586de465f8f7f02f20"
last-modified: Thu, 05 Jan 2023 22:05:58 GMT
x-amz-id-2: p3Whd/tw9cOm1dFM4LImWP8iZmqBIt38s8DeGFdsnVcGvnrGhIpNMsWzN1K1b+UWgwTEc9PV804=
x-amz-meta-s3cmd-attrs: md5:86efc58330e2b2586de465f8f7f02f20
x-amz-request-id: 5TEG7ENQNJXDZD6H
cf-cache-status: HIT
age: 732955
expires: Mon, 13 Feb 2023 09:44:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4xFGMBtvvPRMMnIiXg4S10tMtkRo7ZbL%2BboA%2B4IsrPp3jCG4NHEXcNHUm92wEJSma2sP0T0De3bB4UQx1xass5jP667Hws%2FtEQsQdzxrvG2NJQmzoKspZPQU7UAdZo7OSLbwVceVwNT2GPWfnQCMyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=FyzA.03SVD7efxOpQP79u1QFS97iov3QQXghh5f2k84-1673689454727-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78956e93ff23b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2