thatpervert.com/tag/chinpokonyan
51.68.155.228200 OK 7.9 kB URL HTTP/1.1 thatpervert.com/tag/chinpokonyan
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (14033)
Hash ecc1a414db8d7068cb101bf69351bbeb
02d4513442634705576d2ae780645d77f8ad559c
b285666ce3fac7ae722c5124c4a3bdc9466f0c74ca41782f519890997c8d4333
GET /tag/chinpokonyan HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Set-Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826; expires=Mon, 06-Feb-2023 17:20:57 GMT; Max-Age=259200; path=/; HttpOnly
Content-Encoding: gzip
Vary: Accept-Encoding
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5632
Expires: Fri, 03 Feb 2023 18:54:49 GMT
Date: Fri, 03 Feb 2023 17:20:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14739
Expires: Fri, 03 Feb 2023 21:26:36 GMT
Date: Fri, 03 Feb 2023 17:20:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 16:36:11 GMT
content-type: application/json
age: 2686
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13926
Expires: Fri, 03 Feb 2023 21:13:03 GMT
Date: Fri, 03 Feb 2023 17:20:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9OCQdv2/2SsBuTruFsrtdPcmFLrE0/ShkFBy3urZuWzVHnR6uhxF/bpigl+b0y1vO72c7yMIfBs=
x-amz-request-id: 78BJ9GEHJ4XHZMNH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 16:52:29 GMT
age: 1708
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:57 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
thatpervert.com/css/bk/thatpervert.css?v=3
51.68.155.228200 OK 501 B URL HTTP/1.1 thatpervert.com/css/bk/thatpervert.css?v=3
IP 51.68.155.228:0
Hash 41bb2402dc130f86bc0bf339f4e29628
0b7d6fdb124b747f973d1b3f287bb93c075777d2
9fe1a809affab3197ce933039a9b42525b20f275432915894e08886f8d27584c
GET /css/bk/thatpervert.css?v=3 HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/tag/chinpokonyan
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: text/css
Content-Length: 501
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-1f5"
Expires: Fri, 10 Feb 2023 17:20:57 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
thatpervert.com/m2/localized.en.js?v=16
51.68.155.228200 OK 833 B URL HTTP/1.1 thatpervert.com/m2/localized.en.js?v=16
IP 51.68.155.228:0
Hash 28c146a64e3f3d5dd9bc9b1a9360d39e
77f7445a37e7fead4d11f9d0d091a81d3d4d3e0d
988a93d0fceafe4a31a0817b9b68c53db50a38fbe2551c02ea031ebcc438c6d5
GET /m2/localized.en.js?v=16 HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/tag/chinpokonyan
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
Last-Modified: Fri, 03 Feb 2023 17:18:56 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Expires: Fri, 10 Feb 2023 17:20:57 GMT
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash a464027d50a862a86d20780c8323c490
b22f0161eec4841bea2a7801749d1c99b4baa4cd
03bc1591d6ddb260350e0262d69e04ebf601448ee854b40cd712931bb302591a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 14:35:30 GMT
Expires: Tue, 07 Feb 2023 14:35:29 GMT
Etag: "b22f0161eec4841bea2a7801749d1c99b4baa4cd"
Cache-Control: max-age=335071,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cd719cca20b3d-OSL
js.thatpervert.com/js/modules/spoiler.js?v=1
51.68.155.228200 OK 133 B URL HTTP/1.1 js.thatpervert.com/js/modules/spoiler.js?v=1
IP 51.68.155.228:0
Hash be8333ce9c68c2efa14d283dfb7b39aa
26c0acb7523f50e78270a0f7a8868e83fb3e9264
45c55055b949b7ad1ed594dde0b8ddc21daa88a940671061c7fc3d1afd26117c
GET /js/modules/spoiler.js?v=1 HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: application/javascript
Content-Length: 133
Last-Modified: Fri, 03 Feb 2023 14:57:22 GMT
Connection: keep-alive
ETag: "63dd20d2-85"
Expires: Fri, 10 Feb 2023 17:20:57 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
poweredby.jads.co/js/jads.js
185.94.237.64301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP 185.94.237.64:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
js.thatpervert.com/js/jquery.min.js?v=1
51.68.155.228200 OK 37 kB URL HTTP/1.1 js.thatpervert.com/js/jquery.min.js?v=1
IP 51.68.155.228:0
File type ASCII text, with very long lines (32072)
Hash 53efd0839cf614e914b80d363515b59b
deb636cc75f57d4fbf3bcb87a99fcdc06240cd52
52ddb1d14cf09ece4b065fd5209a368e79e3e78bbb7e6fcd64c3d99a647fabab
GET /js/jquery.min.js?v=1 HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5f6b765d-16bbd"
Expires: Fri, 10 Feb 2023 17:20:57 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
js.thatpervert.com/css/optimized.css?v=1675436322
51.68.155.228200 OK 49 kB URL HTTP/1.1 js.thatpervert.com/css/optimized.css?v=1675436322
IP 51.68.155.228:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7c5ad485cdd46c86f4f791ec2f9caf19
d7003bb4eb6757eb209d05c85273fbfbfaaaf320
f960e9722ac5d67efcf69a21ae09302746f8ccd5d872e5a7511c687a29a4780d
GET /css/optimized.css?v=1675436322 HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Feb 2023 14:57:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63dd20d2-24ad7"
Expires: Fri, 10 Feb 2023 17:20:57 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
js.thatpervert.com/v/JoG69p6ocLvkKIb-NHiqJdqSWQV9HA?1675439245
51.68.155.228200 OK 176 kB URL HTTP/1.1 js.thatpervert.com/v/JoG69p6ocLvkKIb-NHiqJdqSWQV9HA?1675439245
IP 51.68.155.228:0
File type ASCII text, with very long lines (2081)
Size 176 kB (175596 bytes)
Hash 2889a4684e13851bf3a05460407eec8f
8d5746f8b974f38584db79956cd599c8e60a2179
7ec151c75d2415e7b677e39877ae3bddbfd0a837d29224832f9584e2c9623260
GET /v/JoG69p6ocLvkKIb-NHiqJdqSWQV9HA?1675439245 HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:57 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Feb 2023 15:46:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63dd2c40-7e3b4"
Expires: Fri, 10 Feb 2023 17:20:57 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
185.94.237.64200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP 185.94.237.64:0
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://thatpervert.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 21 Nov 2022 05:24:20 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"637b0b84-eae"
Content-Encoding: gzip
img2.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg
img2.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg
img2.thatpervert.com/pics/avatar/tag/186927
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/186927
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/186927 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/186927
img2.thatpervert.com/pics/avatar/tag/177804
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/177804
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/177804 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/177804
img2.thatpervert.com/pics/avatar/user/244958
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/user/244958
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/user/244958 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/user/244958
img2.thatpervert.com/pics/avatar/tag/202828
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/202828
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/202828 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/202828
img2.thatpervert.com/pics/post/-hentai--chinpokonyan-5968587.jpeg
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/post/-hentai--chinpokonyan-5968587.jpeg
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/post/-hentai--chinpokonyan-5968587.jpeg HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/post/-hentai--chinpokonyan-5968587.jpeg
img2.thatpervert.com/pics/avatar/user/264772
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/user/264772
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/user/264772 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/user/264772
img2.thatpervert.com/pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg
img2.thatpervert.com/pics/avatar/user/659547
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/user/659547
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/user/659547 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/user/659547
img2.thatpervert.com/pics/avatar/tag/200569
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/200569
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/200569 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/200569
img2.thatpervert.com/pics/avatar/tag/191108
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/191108
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/191108 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/191108
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 17:07:19 GMT
age: 819
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
vt894axs16.com/lv/esnk/1820432/code.js
62.122.171.6200 OK 44 kB URL HTTP/1.1 vt894axs16.com/lv/esnk/1820432/code.js
IP 62.122.171.6:0
File type ASCII text, with very long lines (64946)
Hash 48783dcaab5a06074800e823b51d76eb
e2bb558f2c63fa230412c183a7a952c494c544a8
2a80cf1524664d23e93ee16d085d9bb7e48e5e61ad5923c75b3549e779609a55
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1820432/code.js HTTP/1.1
Host: vt894axs16.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: application/javascript
Last-Modified: Tue, 31 Jan 2023 12:19:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63d9076e-1aea4"
X-JS-AB1: var1
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
js.thatpervert.com/images/icon_home.png
51.68.155.228200 OK 1.3 kB URL HTTP/1.1 js.thatpervert.com/images/icon_home.png
IP 51.68.155.228:0
File type PNG image data, 17 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash c7e2f3e50c3824999cc5cea03273266b
a11cb6a4b68e4ee62bde37a6513516c3d0b62898
55667fb7a38aaa5748ef170e8565b0f23e64f317927cb1fd984e3b8da5e5783e
GET /images/icon_home.png HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://js.thatpervert.com/css/optimized.css?v=1675436322
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/png
Content-Length: 1338
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-53a"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
thatpervert.com/images/bk/thatpervert_logo.png
51.68.155.228200 OK 4.6 kB URL HTTP/1.1 thatpervert.com/images/bk/thatpervert_logo.png
IP 51.68.155.228:0
File type PNG image data, 166 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash a3a159cc9a5af658a9b7435062aa1f93
119638f23b7f32e45ed69ae45b4d827e501840eb
647a08fe0b170548c2a243485901f756457712ceb10425e8dbc2028d4d8b52a2
GET /images/bk/thatpervert_logo.png HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/css/bk/thatpervert.css?v=3
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/png
Content-Length: 4644
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-1224"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
js.thatpervert.com/images/icon_search.png
51.68.155.228200 OK 1.2 kB URL HTTP/1.1 js.thatpervert.com/images/icon_search.png
IP 51.68.155.228:0
File type PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash 88160bdbad583333900a9a0f77031225
dd426a10c9af393b32d94211e05c16c813f249b6
81fe72d9d2f1671c356b9ec4ec5cefa8cf24c16bdd84bcd5083483f180474010
GET /images/icon_search.png HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://js.thatpervert.com/css/optimized.css?v=1675436322
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/png
Content-Length: 1215
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-4bf"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
img2.thatpervert.com/pics/avatar/tag/big/122523
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/122523
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/122523 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/122523
img2.thatpervert.com/pics/avatar/tag/big/79992
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/79992
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/79992 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/79992
js.thatpervert.com/images/icon_social.png
51.68.155.228200 OK 4.6 kB URL HTTP/1.1 js.thatpervert.com/images/icon_social.png
IP 51.68.155.228:0
File type PNG image data, 28 x 227, 8-bit/color RGBA, non-interlaced\012- data
Hash c14161310268444a10639e723d09eb25
be2557273ddb42da0b94f9309b11efa79b87b5f4
58791400c767b4e34713c836d3bdee86996d5e58344acecd49520aa54375527f
GET /images/icon_social.png HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://js.thatpervert.com/css/optimized.css?v=1675436322
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/png
Content-Length: 4606
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-11fe"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
js.thatpervert.com/images/icon_smiles.png
51.68.155.228200 OK 8.1 kB URL HTTP/1.1 js.thatpervert.com/images/icon_smiles.png
IP 51.68.155.228:0
File type PNG image data, 73 x 160, 8-bit/color RGBA, non-interlaced\012- data
Hash 19499b02443935a369ec55a2889ad74f
c05e283b01eefacdc06095a965c8e87c8dd65318
bd3013586d696bf35324b9b5c79673379b509c310e78507d30be1e5d39c221a3
GET /images/icon_smiles.png HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://js.thatpervert.com/css/optimized.css?v=1675436322
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/png
Content-Length: 8059
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-1f7b"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
img2.thatpervert.com/pics/avatar/tag/big/36963
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/36963
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/36963 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/36963
img2.thatpervert.com/pics/avatar/tag/big/128880
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/128880
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/128880 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/128880
api.joyreactor.cc/graphql
146.59.26.8204 No Content 0 B URL HTTP/2 api.joyreactor.cc/graphql
IP 146.59.26.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql HTTP/1.1
Host: api.joyreactor.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://thatpervert.com/
Origin: http://thatpervert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 03 Feb 2023 17:20:58 GMT
cache-control: no-cache, private
vary: Origin, Access-Control-Request-Method
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
js.thatpervert.com/images/icon_carrows.png
51.68.155.228200 OK 1.8 kB URL HTTP/1.1 js.thatpervert.com/images/icon_carrows.png
IP 51.68.155.228:0
File type PNG image data, 12 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 08fda657f2e3fd90b6bd21e04330f1e7
7adb7c4cfca9f8fedcd3a4060a006f984c21cdbd
810153d7e247f3724c25423bc7178fa8261969bf216978ffc8191f3f900ac9ad
GET /images/icon_carrows.png HTTP/1.1
Host: js.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://js.thatpervert.com/css/optimized.css?v=1675436322
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/png
Content-Length: 1775
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-6ef"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
img2.thatpervert.com/pics/avatar/tag/big/129794
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/129794
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/129794 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/129794
img2.thatpervert.com/pics/avatar/tag/big/122417
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/122417
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/122417 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/122417
img2.thatpervert.com/pics/avatar/tag/big/204902
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/204902
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/204902 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/204902
img2.thatpervert.com/pics/avatar/tag/big/122423
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/122423
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/122423 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/122423
thatpervert.com/images/bk/porn_background.jpg
51.68.155.228200 OK 141 kB URL HTTP/1.1 thatpervert.com/images/bk/porn_background.jpg
IP 51.68.155.228:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1400x381, components 3\012- data
Size 141 kB (141235 bytes)
Hash 651081a0029ea26856578a4e47da4b41
6fcf88570cf7cfbb83678dec989cd4c3ac0b67e3
f8276cfed6e7b984d29f10883f51c906963edd3354457bd9083b8533a97528b2
GET /images/bk/porn_background.jpg HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/css/bk/thatpervert.css?v=3
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: image/jpeg
Content-Length: 141235
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-227b3"
Expires: Fri, 10 Feb 2023 17:20:58 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
img2.thatpervert.com/pics/avatar/tag/big/122419
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/122419
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/122419 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/122419
img2.thatpervert.com/pics/avatar/tag/big/122418
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/122418
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/122418 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/122418
thatpervert.com/m2/lang
51.68.155.228200 OK 20 B IP 51.68.155.228:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
POST /m2/lang HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 40
Origin: http://thatpervert.com
Connection: keep-alive
Referer: http://thatpervert.com/tag/chinpokonyan
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
Content-Encoding: gzip
Vary: Accept-Encoding
Expires: Fri, 10 Feb 2023 17:20:58 GMT
img2.thatpervert.com/pics/avatar/tag/big/129886
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/129886
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/129886 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/129886
img2.thatpervert.com/pics/avatar/tag/big/122426
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/122426
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/122426 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/122426
img2.thatpervert.com/pics/avatar/tag/big/133876
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/133876
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/133876 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/133876
img2.thatpervert.com/pics/avatar/tag/big/13931
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/13931
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/13931 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/13931
img2.thatpervert.com/pics/avatar/tag/big/186921
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/186921
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/186921 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/186921
img2.thatpervert.com/pics/avatar/tag/big/228677
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/228677
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/228677 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/228677
img2.thatpervert.com/pics/avatar/tag/big/149226
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/149226
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/149226 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/149226
img2.thatpervert.com/pics/avatar/tag/big/287
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/287
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/287 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/287
img2.thatpervert.com/pics/avatar/tag/big/121694
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/121694
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/121694 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/121694
img2.thatpervert.com/pics/avatar/tag/big/85993
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/85993
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/85993 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/85993
img2.thatpervert.com/pics/avatar/tag/big/838
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/838
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/838 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/838
img2.thatpervert.com/pics/avatar/tag/big/60496
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/60496
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/60496 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img0.thatpervert.com/pics/avatar/tag/big/60496
img2.thatpervert.com/pics/avatar/tag/big/116333
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/116333
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/116333 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/116333
img1.thatpervert.com/pics/avatar/tag/200569
51.83.233.48200 OK 7.9 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/200569
IP 51.83.233.48:0
File type PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced\012- data
Hash 21d6061cea996e9c1c39c56b5acb17fc
ed3fa32e12878b1d39d84500df06b24909afe37f
3161d0b2bfa72306354020d9cf575c5932de228f91aa95d4a32d72abcb7d5200
GET /pics/avatar/tag/200569 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:47 GMT
content-type: image/png
content-length: 7947
last-modified: Wed, 19 Mar 2014 09:27:08 GMT
expires: Mon, 27 Oct 2025 03:47:47 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221590
accept-ranges: bytes
wsr-cache: HIT 33828 (407)
img1.thatpervert.com/pics/avatar/user/659547
51.83.233.48200 OK 5.2 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/user/659547
IP 51.83.233.48:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 7c247cb05ca21ef6992cd2367813cd47
479076acba674e062a19c90d5ea8421e7931c254
a920a1d1886c476cbf16ca485ab1f5f83f3e0410acffe8076ebde6b4876e2369
GET /pics/avatar/user/659547 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:09:25 GMT
content-type: image/jpeg
content-length: 5209
last-modified: Sat, 31 Mar 2018 05:30:05 GMT
expires: Wed, 22 Oct 2025 00:09:25 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666693
accept-ranges: bytes
wsr-cache: HIT 91485 (405)
img2.thatpervert.com/pics/avatar/tag/big/89455
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/89455
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/89455 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/89455
img2.thatpervert.com/pics/avatar/tag/big/257
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/257
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/257 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/257
img2.thatpervert.com/pics/avatar/tag/big/971
51.68.155.228301 Moved Permanently 162 B URL HTTP/1.1 img2.thatpervert.com/pics/avatar/tag/big/971
IP 51.68.155.228:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /pics/avatar/tag/big/971 HTTP/1.1
Host: img2.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 03 Feb 2023 17:20:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://img1.thatpervert.com/pics/avatar/tag/big/971
bg4nxu2u5t.com/solid.gif?z=1854721&abvar=3
62.122.171.6200 OK 43 B URL HTTP/2 bg4nxu2u5t.com/solid.gif?z=1854721&abvar=3
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1854721&abvar=3 HTTP/1.1
Host: bg4nxu2u5t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://thatpervert.com
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img0.thatpervert.com/pics/avatar/tag/big/133876
145.239.26.11200 OK 35 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/133876
IP 145.239.26.11:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash 3aeb1920bcf959856bcf7d9806d2f7a6
3fdf0e16223d2066e127e65260c961853e922b84
f2c998c4a2e549906d4c3471b5267fc178297e0b90f867e9f8c9a65eded2986e
GET /pics/avatar/tag/big/133876 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:56 GMT
content-type: image/png
content-length: 34959
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:56 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659041
accept-ranges: bytes
wsr-cache: HIT 603321 (404)
img0.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg
145.239.26.11200 OK 105 kB URL HTTP/1.1 img0.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 811x1147, components 3\012- data
Size 105 kB (104777 bytes)
Hash 70e48ece7b2e4e7ae52ae8b0e599f954
d0d5f895706695be94955bfd8e5721f935e89ffb
5331c1a616562bb3f272a64cadb8b07c2bf7d898bad9a0a6770610fbd003156c
GET /pics/post/chinpokonyan-megane-Anime-fandoms-7136422.jpeg HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 03 Feb 2023 16:51:47 GMT
content-type: image/jpeg
content-length: 104777
last-modified: Mon, 28 Feb 2022 12:30:03 GMT
expires: Wed, 29 Oct 2025 16:51:47 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 1751
accept-ranges: bytes
wsr-cache: HIT 1 (404)
img1.thatpervert.com/pics/avatar/tag/big/122523
51.83.233.48200 OK 41 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/122523
IP 51.83.233.48:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash 56db28379f69c8ff8deb565ead8a16aa
ef23af999956b15223c194fd43258e6749c11131
61ed8a16d5949b43d916857f3557fc1b96e78e18216c4f194f6e645b925984da
GET /pics/avatar/tag/big/122523 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:50 GMT
content-type: image/png
content-length: 41129
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:50 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659048
accept-ranges: bytes
wsr-cache: HIT 711009 (404)
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5854
Expires: Fri, 03 Feb 2023 18:58:32 GMT
Date: Fri, 03 Feb 2023 17:20:58 GMT
Connection: keep-alive
img1.thatpervert.com/pics/avatar/tag/big/36963
51.83.233.48200 OK 33 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/36963
IP 51.83.233.48:0
File type PNG image data, 257 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash 6641d7f8f612d94c6d758492c4663043
310e1fc7649c2ed028b31f5fb92cf311d7ec5032
125323f3040765a2ad1aa064343d52d3f5939c25ef1e28ac23415d96d3a7b5fd
GET /pics/avatar/tag/big/36963 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:18 GMT
content-type: image/png
content-length: 33308
last-modified: Fri, 02 May 2014 15:19:19 GMT
expires: Mon, 27 Oct 2025 03:47:18 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221620
accept-ranges: bytes
wsr-cache: HIT 232415 (407)
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cfb982ad8ed923904c112ddd9b8f056b
0ab65a6eae52ef2f07e4f10ca219a8e80e1d2f5b
0bb65333f67a4d6230a209d1533e926876e656339d7355dd745584a1a7414095
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BB65333F67A4D6230A209D1533E926876E656339D7355DD745584A1A7414095"
Last-Modified: Thu, 02 Feb 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12479
Expires: Fri, 03 Feb 2023 20:48:57 GMT
Date: Fri, 03 Feb 2023 17:20:58 GMT
Connection: keep-alive
img0.thatpervert.com/pics/avatar/tag/big/838
145.239.26.11200 OK 38 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/838
IP 145.239.26.11:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash a9e145a5b471ce7389d68b961d84e873
14330fc51047bfee858daaf00373cc251ce7ab73
69d92cdc835b6c2470bb0255b63942bcb57d73bafa528bf2282a1bb8c96b652f
GET /pics/avatar/tag/big/838 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:57 GMT
content-type: image/png
content-length: 38258
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:57 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659041
accept-ranges: bytes
wsr-cache: HIT 608407 (404)
img0.thatpervert.com/pics/post/-hentai--chinpokonyan-5968587.jpeg
145.239.26.11200 OK 66 kB URL HTTP/1.1 img0.thatpervert.com/pics/post/-hentai--chinpokonyan-5968587.jpeg
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 811x1147, components 3\012- data
Hash 761b9f0badcb0738059d3b266905d93b
f249a8b552b1c9ae03bf650ac074d471e9beac05
b5d77e28c8d1b56ee2dd7ced679945ff4d7c138766f4df4001a62557ac1a5010
GET /pics/post/-hentai--chinpokonyan-5968587.jpeg HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: image/jpeg
content-length: 65472
last-modified: Tue, 09 Jun 2020 05:45:03 GMT
expires: Wed, 29 Oct 2025 17:20:58 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 0
accept-ranges: bytes
wsr-cache: MISS (405)
img0.thatpervert.com/pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg
145.239.26.11200 OK 191 kB URL HTTP/1.1 img0.thatpervert.com/pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 811x1146, components 3\012- data
Size 191 kB (191008 bytes)
Hash 8e3db4a9af8f38dd4c60199b2bff0fbe
10637bf1c150834ddebb45920cb3fd33c97d4da2
a3af14d3f14cad549c32972424706ded80013edaf049fab1ae7756301fcaa606
GET /pics/post/chinpokonyan-isobe-noriko-Girls-und-Panzer-Anime-6437350.jpeg HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 04:00:53 GMT
content-type: image/jpeg
content-length: 191008
last-modified: Thu, 21 Jan 2021 00:10:03 GMT
expires: Mon, 27 Oct 2025 04:00:53 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 220805
accept-ranges: bytes
wsr-cache: HIT 15 (407)
img0.thatpervert.com/pics/avatar/tag/big/128880
145.239.26.11200 OK 43 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/128880
IP 145.239.26.11:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash d9d1a3611ba42f34f23ddd3fe595669a
6b94a296c2c6972ae04aa106b8769a2b075aed19
6aa7aafe328c4335f1448d3ea556b15c7834ddfbf6ea95aebaa66b56be506275
GET /pics/avatar/tag/big/128880 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:57 GMT
content-type: image/png
content-length: 42757
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:57 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659041
accept-ranges: bytes
wsr-cache: HIT 609428 (404)
img0.thatpervert.com/pics/avatar/tag/big/79992
145.239.26.11200 OK 51 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/79992
IP 145.239.26.11:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash 57cea907da1d54d78f71506a4053dccc
5dda47419e8bb74adb94b6be142ad1f890b0be17
cd0932e3176ca3c8c6d2234e211bc62890c0456810a58c6edf9dfd6fdbeca5ba
GET /pics/avatar/tag/big/79992 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:50 GMT
content-type: image/png
content-length: 50605
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:50 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659048
accept-ranges: bytes
wsr-cache: HIT 621846 (404)
img1.thatpervert.com/pics/avatar/tag/big/122423
51.83.233.48200 OK 49 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/122423
IP 51.83.233.48:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash a730ead14be1f563e1eade13bd3c8d6d
7e95f9bfecb88c2df646601fc1afb240b68000c3
5cc31ad3c632411aa9e4d820a5d8b8d106feed2547940450870aa7a7458b1690
GET /pics/avatar/tag/big/122423 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:17 GMT
content-type: image/gif
content-length: 48555
last-modified: Fri, 02 May 2014 15:33:21 GMT
expires: Mon, 27 Oct 2025 03:47:17 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221620
accept-ranges: bytes
wsr-cache: HIT 235236 (407)
img0.thatpervert.com/pics/avatar/tag/big/204902
145.239.26.11200 OK 31 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/204902
IP 145.239.26.11:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2017:02:13 00:47:18], baseline, precision 8, 300x75, components 3\012- data
Hash 18340137c3a1528c9ce767add601d459
c09629c9af8ce1b9ab65249b226e7e88be5a69bd
cf836baec207f8112bbaf2fb30d0ead6ca2ead066135f3b5216c93a3938bd609
GET /pics/avatar/tag/big/204902 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:32 GMT
content-type: image/jpeg
content-length: 30969
last-modified: Tue, 21 Feb 2017 16:30:03 GMT
expires: Mon, 27 Oct 2025 03:47:32 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221606
accept-ranges: bytes
wsr-cache: HIT 201425 (407)
vt894axs16.com/get/1820432?zoneid=1820432&jp=_cltmo4ox07jspt4xc1erv&nojs=0&ix=0&abvar=1&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=391276933030591
62.122.171.6200 OK 53 kB URL HTTP/2 vt894axs16.com/get/1820432?zoneid=1820432&jp=_cltmo4ox07jspt4xc1erv&nojs=0&ix=0&abvar=1&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=391276933030591
IP 62.122.171.6:0
Hash 2ce0b45d9d19e25ea49b995d632b8d6e
89da4f9818110d0e900b4e7b3744f95015aa16cc
a89bb7e7d5e106c8afaf7e649232f3f097a7f7a5e5bc558ec9ad533e6a83590c
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1820432?zoneid=1820432&jp=_cltmo4ox07jspt4xc1erv&nojs=0&ix=0&abvar=1&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=391276933030591 HTTP/1.1
Host: vt894axs16.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=23020312207647523a265a4584b29e8051da; Path=/; Expires=Sat, 03 Feb 2024 17:20:58 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img0.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg
145.239.26.11200 OK 531 kB URL HTTP/1.1 img0.thatpervert.com/pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 811x1147, components 3\012- data
Size 531 kB (530763 bytes)
Hash 96ebfef3896dd9f97bbbb6698f61cb69
142fd803492d2998444194335385ac336805e946
f831ba99e286f9e3846af239c39919c3c2dc68e2da990d608d7e24a988444e9d
GET /pics/post/chinpokonyan-megane-Anime-fandoms-7136423.jpeg HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 03 Feb 2023 16:51:48 GMT
content-type: image/jpeg
content-length: 530763
last-modified: Mon, 28 Feb 2022 12:30:03 GMT
expires: Wed, 29 Oct 2025 16:51:48 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 1749
accept-ranges: bytes
wsr-cache: HIT 1 (404)
img1.thatpervert.com/pics/avatar/tag/big/122417
51.83.233.48200 OK 50 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/122417
IP 51.83.233.48:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash 1fded9533a17e2056aea256a896f7e7e
0d228cdee33056b7af0083a151a1e1d86bf0444c
20bca268966458dcd77ac7c89529af6a698cb069e7e9a5d88afc16ed61d66aba
GET /pics/avatar/tag/big/122417 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:18 GMT
content-type: image/gif
content-length: 50464
last-modified: Sat, 03 May 2014 21:23:22 GMT
expires: Mon, 27 Oct 2025 03:47:18 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221620
accept-ranges: bytes
wsr-cache: HIT 235975 (407)
img0.thatpervert.com/pics/avatar/tag/big/129886
145.239.26.11200 OK 44 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/129886
IP 145.239.26.11:0
File type PNG image data, 257 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e4be851e6a9fbb0e4a05f2bd6b4d9ea
28ef7e2a4f44b961e2cc1b1dd25d642b4ebe4fea
fc355e97fc114a7aef7a40f19e818ff147a85deaa292333786bd20fca71eb986
GET /pics/avatar/tag/big/129886 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:08:25 GMT
content-type: image/png
content-length: 43950
last-modified: Sat, 03 May 2014 21:38:21 GMT
expires: Wed, 22 Oct 2025 00:08:25 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666753
accept-ranges: bytes
wsr-cache: HIT 703298 (405)
img0.thatpervert.com/pics/avatar/tag/big/122418
145.239.26.11200 OK 59 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/122418
IP 145.239.26.11:0
File type GIF image data, version 89a, 300 x 75\012- data
Hash 2a186aa0114046a81a04d091ca1e2f9a
7671021c22269cf3b56003164092f19fd6f52bc8
e6ac0b8580660b4f4194f4dcf18e7433ab72ddad40bf5e52de343822074b39fe
GET /pics/avatar/tag/big/122418 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:50 GMT
content-type: image/gif
content-length: 58980
last-modified: Mon, 10 Aug 2015 03:10:30 GMT
expires: Wed, 22 Oct 2025 02:16:50 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659048
accept-ranges: bytes
wsr-cache: HIT 709354 (404)
img0.thatpervert.com/pics/avatar/tag/big/129794
145.239.26.11200 OK 59 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/129794
IP 145.239.26.11:0
File type GIF image data, version 89a, 300 x 75\012- data
Hash 2921dc13ade0a47db39437a5da0e5870
1423f62b84ce70f00ac81ff22b8749d4128f3782
b7663c6e18466356ea17c2194ad9d018c38a3a77d90d97ae03fa1932e9ea259e
GET /pics/avatar/tag/big/129794 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:26 GMT
content-type: image/gif
content-length: 59025
last-modified: Mon, 10 Aug 2015 03:10:30 GMT
expires: Mon, 27 Oct 2025 03:47:26 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221612
accept-ranges: bytes
wsr-cache: HIT 234950 (407)
img0.thatpervert.com/pics/avatar/tag/big/122426
145.239.26.11200 OK 45 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/122426
IP 145.239.26.11:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash 75b9816ca56047420c80e7c2297d40d7
bb4f0596ea2dae59ffb9c2ef46e53dbbb705f188
5e3c21938ba3bc717a8f899960432007955c04c07cedc98fd58a3ffc9045e517
GET /pics/avatar/tag/big/122426 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:08:25 GMT
content-type: image/gif
content-length: 45040
last-modified: Fri, 02 May 2014 15:39:06 GMT
expires: Wed, 22 Oct 2025 00:08:25 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666753
accept-ranges: bytes
wsr-cache: HIT 702912 (405)
2ec5f095fb.ebe29efc2c.com/537735440a7ae69f83a7aa16a59a77bd/52347?version_name=a
45.133.44.25200 OK 1.5 kB URL HTTP/2 2ec5f095fb.ebe29efc2c.com/537735440a7ae69f83a7aa16a59a77bd/52347?version_name=a
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (1517), with no line terminators
Hash 68f18bb54b609831966b79bd332adf1c
92b653150017155c9f5d8d047281f5e36a853f50
3684f45be65ce94ae4658c558891070d682049118e88ee9400a87f30a16a216f
GET /537735440a7ae69f83a7aa16a59a77bd/52347?version_name=a HTTP/1.1
Host: 2ec5f095fb.ebe29efc2c.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://thatpervert.com
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: application/json
content-length: 1517
server: nginx/1.18.0
cache-control: max-age=300
expires: Fri, 03 Feb 2023 17:25:58 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img1.thatpervert.com/pics/avatar/tag/big/13931
51.83.233.48200 OK 46 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/13931
IP 51.83.233.48:0
File type PNG image data, 300 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 01a402ed816a7bb964287e1e193581bf
95e8b983383053dbdbf952c08ea7692db9d12c6c
4eed6edabb08490f03d893c73e64f1ea1f16a8d040748122558722875b6eefa2
GET /pics/avatar/tag/big/13931 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:08:28 GMT
content-type: image/png
content-length: 46485
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 00:08:28 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666750
accept-ranges: bytes
wsr-cache: HIT 604589 (405)
push.services.mozilla.com/
35.160.69.117101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.160.69.117:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wZLvv9AtOmwHeraRp9Oo3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: LV1/seVR7ko/gJiWgZD9u4OP7QQ=
img0.thatpervert.com/pics/avatar/tag/big/149226
145.239.26.11200 OK 60 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/149226
IP 145.239.26.11:0
File type GIF image data, version 89a, 300 x 75\012- data
Hash 3d90c9de4ee61e2781b6ddace2f9b9f4
8a15a30ff9eba847e0a972679c92014bb681e13e
89e28da1554ff31c17aaaf7d17dda17c8dfaa4ceb9041adfb9d25e22ed6a3698
GET /pics/avatar/tag/big/149226 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:26 GMT
content-type: image/gif
content-length: 59796
last-modified: Sat, 01 Apr 2017 21:05:15 GMT
expires: Mon, 27 Oct 2025 03:47:26 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221612
accept-ranges: bytes
wsr-cache: HIT 232388 (407)
img0.thatpervert.com/pics/avatar/tag/177804
145.239.26.11200 OK 3.3 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/177804
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Intel(R) JPEG Library, version [1.51.13.45]", baseline, precision 8, 100x100, components 3\012- data
Hash 08d04f5cf4e63f317a371b9c4f5e3b8a
6b35185aa1399b0c144196e53add9a4bdfc99d28
fb3a106785877dded9824bbfe78f9716ffee17286f6946b74f817294986f4c28
GET /pics/avatar/tag/177804 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:50 GMT
content-type: image/jpeg
content-length: 3324
last-modified: Tue, 22 Mar 2016 23:55:01 GMT
expires: Mon, 27 Oct 2025 03:47:50 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221588
accept-ranges: bytes
wsr-cache: HIT 17901 (407)
img0.thatpervert.com/pics/avatar/user/244958
145.239.26.11200 OK 2.0 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/user/244958
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 003890a7bd8c511f2da14eda53e85f72
e86360d9353cf74144f333cef8d79aaff830f2ae
014deddeddad28437055e3bcc607b040c6ebc6818f9d4fcef5037398dcb5624e
GET /pics/avatar/user/244958 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:55 GMT
content-type: image/jpeg
content-length: 2036
last-modified: Mon, 01 Apr 2019 19:40:02 GMT
expires: Mon, 27 Oct 2025 03:47:55 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221583
accept-ranges: bytes
wsr-cache: HIT 83637 (407)
img1.thatpervert.com/pics/avatar/tag/big/228677
51.83.233.48200 OK 40 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/228677
IP 51.83.233.48:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash 941b711dd1f9e7254b004ba5d2f9a12a
e57fc5df4045927dc2cf4cf5221135ea298d1d48
c1e680725358945b0f8763e266ca57de89624c198c5d989529f38003f26f9821
GET /pics/avatar/tag/big/228677 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:08:28 GMT
content-type: image/gif
content-length: 39570
last-modified: Wed, 31 Dec 2014 11:55:06 GMT
expires: Wed, 22 Oct 2025 00:08:28 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666750
accept-ranges: bytes
wsr-cache: HIT 705632 (405)
img1.thatpervert.com/pics/avatar/tag/big/186921
51.83.233.48200 OK 43 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/186921
IP 51.83.233.48:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash 23e73ce62784eb3c97cafeece951782e
afc5b085022c3a0ceee9e1981e4c2eb4287d9231
bc415d7819158fd009e8d8c970e2a6abcb9245666f15d48cc7c87d8d872a9e7b
GET /pics/avatar/tag/big/186921 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:53 GMT
content-type: image/gif
content-length: 42830
last-modified: Sat, 03 May 2014 21:43:22 GMT
expires: Wed, 22 Oct 2025 02:16:53 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659045
accept-ranges: bytes
wsr-cache: HIT 613725 (404)
img0.thatpervert.com/pics/avatar/tag/202828
145.239.26.11200 OK 23 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/202828
IP 145.239.26.11:0
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash c24c1927480663b4c9e70cda75a6a025
646e45894d7bc2acaad1ecf0e8a6a54fbaba3fad
c579dc3a426d2f598bb7c96659aec5f86e9f62554089cabafa4232edcbbcb6b6
GET /pics/avatar/tag/202828 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:55 GMT
content-type: image/png
content-length: 23098
last-modified: Sun, 12 Jun 2016 06:45:02 GMT
expires: Mon, 27 Oct 2025 03:47:55 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221583
accept-ranges: bytes
wsr-cache: HIT 30667 (407)
img0.thatpervert.com/pics/avatar/tag/big/121694
145.239.26.11200 OK 49 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/121694
IP 145.239.26.11:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash c396b8d49c2cdaccd93e666bfa5f6fb2
f3425c7e0ce36bf8df8ac1fbb121ebba483c3b94
11d0a4058f8f132a22e02919294b212c9bde57a6c73f79ff285ef205f16d1e0a
GET /pics/avatar/tag/big/121694 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:32 GMT
content-type: image/png
content-length: 49372
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Mon, 27 Oct 2025 03:47:32 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221606
accept-ranges: bytes
wsr-cache: HIT 204429 (407)
img0.thatpervert.com/pics/avatar/user/264772
145.239.26.11200 OK 3.5 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/user/264772
IP 145.239.26.11:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash c31f350c6234a696150a9a86e083b9af
b5d5d6027d35c278126e148a8624b3151cc238bb
7d7df1f080d800a6668d2b9cfbd3feefd555b1942cf2e7595af3b7f0928136d7
GET /pics/avatar/user/264772 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:49:50 GMT
content-type: image/jpeg
content-length: 3455
last-modified: Wed, 13 Oct 2021 23:10:06 GMT
expires: Mon, 27 Oct 2025 03:49:50 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221468
accept-ranges: bytes
wsr-cache: HIT 733 (407)
img1.thatpervert.com/pics/avatar/tag/big/287
51.83.233.48200 OK 51 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/287
IP 51.83.233.48:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash 59baefd755da5390f0216f5fe1fcd41e
7285143bb1209256eb3652f3f5e20c4049fe659a
9c99173bd5baa9e5fc62867b50f772bd39a347698fb3129f4395065751fc484b
GET /pics/avatar/tag/big/287 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:08:28 GMT
content-type: image/gif
content-length: 50865
last-modified: Wed, 07 May 2014 20:18:26 GMT
expires: Wed, 22 Oct 2025 00:08:28 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666750
accept-ranges: bytes
wsr-cache: HIT 628756 (405)
img0.thatpervert.com/pics/avatar/tag/191108
145.239.26.11200 OK 22 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/191108
IP 145.239.26.11:0
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash f24fd547a8f2ef43ad8f61d5c1cc087a
86d00b024707a08fac26a00e28c6ca231b3e7905
6aa0ab187d3f3a7ffc77443c55f872ba37feac0d379c84f22a63233312a77f1b
GET /pics/avatar/tag/191108 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:55 GMT
content-type: image/png
content-length: 22158
last-modified: Sun, 12 Jun 2016 04:35:01 GMT
expires: Wed, 22 Oct 2025 02:16:55 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659043
accept-ranges: bytes
wsr-cache: HIT 81919 (404)
img0.thatpervert.com/pics/avatar/tag/big/60496
145.239.26.11200 OK 51 kB URL HTTP/1.1 img0.thatpervert.com/pics/avatar/tag/big/60496
IP 145.239.26.11:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash e7f1068ee1b540c90dc64f4e82e72e1f
6a3903aeea970d4d5519dadb8de2d349a95693a4
3f33f5c641525de473ce4417cdb96d296ec9126e244d59bf5c8f442bb1ce68dc
GET /pics/avatar/tag/big/60496 HTTP/1.1
Host: img0.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:32 GMT
content-type: image/gif
content-length: 50922
last-modified: Sat, 03 May 2014 21:43:22 GMT
expires: Mon, 27 Oct 2025 03:47:32 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221606
accept-ranges: bytes
wsr-cache: HIT 202727 (407)
img1.thatpervert.com/pics/avatar/tag/big/116333
51.83.233.48200 OK 39 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/116333
IP 51.83.233.48:0
File type PNG image data, 300 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash c601dc496d16abe43e439e5065ad7c1f
19540d179c13a3971b7464a83b940e77dcc0bf28
9d51157ce088668ec6316fd4bc47538d8118c3c1dd34f7d4df692a7db758b6b5
GET /pics/avatar/tag/big/116333 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 01 Feb 2023 03:47:18 GMT
content-type: image/png
content-length: 39186
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Mon, 27 Oct 2025 03:47:17 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 221620
accept-ranges: bytes
wsr-cache: HIT 202856 (407)
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash db328390b1e37573a0a01ed4b8b87976
5a47437b409dd86a2f8b7a4a384aa76df24ff074
3c62ab843b5b918f339b80d8ad188b2e70b821c066bc981c665e896aa1bea5e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4839
Cache-Control: max-age=88626
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:20:59 GMT
Etag: "63dbe6c6-117"
Expires: Sat, 04 Feb 2023 17:58:05 GMT
Last-Modified: Thu, 02 Feb 2023 16:37:26 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash db328390b1e37573a0a01ed4b8b87976
5a47437b409dd86a2f8b7a4a384aa76df24ff074
3c62ab843b5b918f339b80d8ad188b2e70b821c066bc981c665e896aa1bea5e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4839
Cache-Control: max-age=88626
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:20:59 GMT
Etag: "63dbe6c6-117"
Expires: Sat, 04 Feb 2023 17:58:05 GMT
Last-Modified: Thu, 02 Feb 2023 16:37:26 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
cdn.bncloudfl.com/bn/d72/57c/872/d7257c872cf09e6feb0eb555b20920ff28aea08f.gif
172.67.39.215200 OK 270 kB URL HTTP/2 cdn.bncloudfl.com/bn/d72/57c/872/d7257c872cf09e6feb0eb555b20920ff28aea08f.gif
IP 172.67.39.215:0
File type GIF image data, version 89a, 300 x 100\012- data
Size 270 kB (269988 bytes)
Hash bf697efd67c7bc916699a5cfe1dd005f
d7257c872cf09e6feb0eb555b20920ff28aea08f
39fce10f59ebb9da307d8f32d1b3827cc7a580a31dfe2e2a4397d595ff1badba
GET /bn/d72/57c/872/d7257c872cf09e6feb0eb555b20920ff28aea08f.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: image/gif
content-length: 269988
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: bf697efd67c7bc916699a5cfe1dd005f
expires: Sun, 05 Feb 2023 16:37:30 GMT
last-modified: Thu, 12 Jan 2023 16:20:25 GMT
x-openstack-request-id: txca243b4299ce4be1b000e-0063c033b3
x-proxy-cache: HIT
x-timestamp: 1673540424.69581
x-trans-id: txca243b4299ce4be1b000e-0063c033b3
cf-cache-status: HIT
age: 2609
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 793cd720e849b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img1.thatpervert.com/pics/avatar/tag/big/89455
51.83.233.48200 OK 59 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/89455
IP 51.83.233.48:0
File type PNG image data, 300 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash eb6ebbe27b61c0f0fedecdcc2e40cbc8
9b118b939e4275e8d562fc4b73cb80b1181e1cac
4aa9d0b362e229012150fc092f17b95c32dd1a327cbed035d15b82a58f46448e
GET /pics/avatar/tag/big/89455 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:53 GMT
content-type: image/png
content-length: 58961
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:53 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659045
accept-ranges: bytes
wsr-cache: HIT 614686 (404)
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 766a6fdd090edee8009b0bff43218a59
65db763709927f3736ef92b5873e8c8b601e8a16
413bb29ba3d71743bb625efd445aa2fdb45249e2b0e52211ecb6c1b38f4c9549
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "413BB29BA3D71743BB625EFD445AA2FDB45249E2B0E52211ECB6C1B38F4C9549"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8807
Expires: Fri, 03 Feb 2023 19:47:46 GMT
Date: Fri, 03 Feb 2023 17:20:59 GMT
Connection: keep-alive
img1.thatpervert.com/pics/avatar/tag/big/85993
51.83.233.48200 OK 42 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/85993
IP 51.83.233.48:0
File type PNG image data, 300 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash b3035e39e20daf3cfbc5fd1551fc4109
59bd18f7d15746911ecfd856eb6ad58596d22458
1245330c5a95e73e4f7cfe7a31d08697910648ba109ab5b99148e501d088ae76
GET /pics/avatar/tag/big/85993 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:50 GMT
content-type: image/png
content-length: 41850
last-modified: Mon, 27 Jul 2015 20:50:03 GMT
expires: Wed, 22 Oct 2025 02:16:50 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659048
accept-ranges: bytes
wsr-cache: HIT 618921 (404)
img1.thatpervert.com/pics/avatar/tag/big/257
51.83.233.48200 OK 41 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/257
IP 51.83.233.48:0
File type PNG image data, 257 x 75, 8-bit/color RGB, non-interlaced\012- data
Hash 70daf797d53c65977e5706c40f962d05
c90899995ac56092bc39a66d6b768754e7732f11
a77413b576e216d379de862529f7ebbb75fe40e5c97326d37d441999ed589ac8
GET /pics/avatar/tag/big/257 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 00:08:28 GMT
content-type: image/png
content-length: 40656
last-modified: Fri, 02 May 2014 15:14:31 GMT
expires: Wed, 22 Oct 2025 00:08:28 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 666750
accept-ranges: bytes
wsr-cache: HIT 608037 (405)
cdn.bncloudfl.com/bn/eef/ef8/00d/eefef800d3f0b1fd4c868580d6b48dd42a0cea7f.gif
172.67.39.215200 OK 288 kB URL HTTP/2 cdn.bncloudfl.com/bn/eef/ef8/00d/eefef800d3f0b1fd4c868580d6b48dd42a0cea7f.gif
IP 172.67.39.215:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 288 kB (288512 bytes)
Hash a94407c09fe96ba5aabdca9f1c741484
676d278a21b688ba7892be1b8fcdfee3b4b2cffa
b4e061cc874cbb775d71f2c309b78dd381728a360057d7b7ba4b3d54d1032953
GET /bn/eef/ef8/00d/eefef800d3f0b1fd4c868580d6b48dd42a0cea7f.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: image/webp
content-length: 288512
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=353301
content-disposition: inline; filename="eefef800d3f0b1fd4c868580d6b48dd42a0cea7f.webp"
etag: 2159cf86628fb6ee6a4006a5cdf8c145
expires: Sun, 05 Feb 2023 14:03:39 GMT
last-modified: Thu, 12 Jan 2023 17:05:00 GMT
vary: Accept
x-openstack-request-id: txac9d966b35c44764bb31d-0063c03e24
x-proxy-cache: HIT
x-timestamp: 1673543099.45643
x-trans-id: txac9d966b35c44764bb31d-0063c03e24
cf-cache-status: HIT
age: 11840
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 793cd7211889b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img1.thatpervert.com/pics/avatar/tag/big/971
51.83.233.48200 OK 49 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/big/971
IP 51.83.233.48:0
File type GIF image data, version 89a, 257 x 75\012- data
Hash f0cda4e59de3e5d99694412fc2d35b37
780c265e65780f12f74f237d211e94e07916e7ae
1679c7c831acf76d2d670cbd49730a9c65a70a4df10000ed85280a49502d943e
GET /pics/avatar/tag/big/971 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:16:53 GMT
content-type: image/gif
content-length: 48708
last-modified: Fri, 02 May 2014 15:08:21 GMT
expires: Wed, 22 Oct 2025 02:16:53 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659045
accept-ranges: bytes
wsr-cache: HIT 591895 (404)
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash db328390b1e37573a0a01ed4b8b87976
5a47437b409dd86a2f8b7a4a384aa76df24ff074
3c62ab843b5b918f339b80d8ad188b2e70b821c066bc981c665e896aa1bea5e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4839
Cache-Control: max-age=88626
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:20:59 GMT
Etag: "63dbe6c6-117"
Expires: Sat, 04 Feb 2023 17:58:05 GMT
Last-Modified: Thu, 02 Feb 2023 16:37:26 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
2ec5f095fb.ebe29efc2c.com/b8e91787a71affebdf042fb8b4561fab.js
45.133.44.25200 OK 36 kB URL HTTP/2 2ec5f095fb.ebe29efc2c.com/b8e91787a71affebdf042fb8b4561fab.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 9f32026613d8cd45085486f70f2aea22
4c71ee1ccfe1d889cec71f6a1a291e287deab192
a350f924ca750cc843d7c20830212c34f32a7225eac0f23da327582c7c9c8e49
GET /b8e91787a71affebdf042fb8b4561fab.js HTTP/1.1
Host: 2ec5f095fb.ebe29efc2c.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://thatpervert.com
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 02 Feb 2023 09:20:02 GMT
etag: W/"63db8042-18c39"
content-encoding: gzip
expires: Fri, 03 Feb 2023 17:25:58 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
vt894axs16.com/chicken.gif?z=1820432&pb=e6d60096dbc54754abedd85aeb67409c1675452058&psp=wUreezNG5T-DmAakcv7_d0NpOoCKR2t9Pw-KDqN-fqbf2PfCH6SvO2hvo3IlPUeKIYNAZwAIE7sqsWRKam7gWzBM4T3xnrxkjfVtX8ifoWQj9MfghOv2YTQPfjAZR6T-wqgzPjD87iPcBtrXWq6h4FU8hJHkzLZVGirnPhkqP-OUTvcL5gnPsp0BwayIc4h2eqlcPeiBC8qPehgE2SuVzuDCfSy6hRoO74t4N73jwY8BEghVV3FIQeiXuzwqYcv8_UMY1R4LMt1TmWTSHq9MN-k8xvelYuUeZitj59YSNtc_SNhEjLtaixw0W7U-FGODajMqEqE5j2WXeORRgkpuxWMhMieD3Emg7hfk12yTGo-JpiKrqz0bHmN3AC7RftApDm6xQNcvYNYQJqmg7DcoatSsT7UeyWHC3n-ee3cs7SYSdR6OkHVHUUfpavTYoXkhWe5vg4C80Sy6EGub2RjSqA4SObyBKn3ss5FAszqoqaFY8lNs1jWprSoBJTN77oBf3U-jRWh6acW0xaTXcVVIm1tkDLI1Gw6ghpfyz57Crq22sXDdcoAJNrKdFPk2ddIq70aJd-KFhjbeL_K6HX14fT12sNIzaH1EwIduQ6pkh3E4O7_AOwUaFPAQWzLpPpc5H07EbVw4jLJ6_L04ZN9IJUXHo4PCGQ-RyZpUc5Ylin6y4NtlgQbJO3QbltXHGTbPIyXhEgbfQ7DE1xYl2d6-HoWELBnyP3jvUg6OuquNHuYp2DWr9P3Xz4EIpcPUyzagRdUdRnf26htpC1ti2niIYGRRSzBVvoZWOMj0YaCYvKkMzAtmVop4XyT3uqJ8Ax5nF6FSq8A9PUr8DV3zwwci0pKLhosTnaVGvh4ePr8e43-jxJn0U9wTeiQxctsADnntY3kV6bUFHg1cNCl-1lFolJQ0Q0172wkk3l2waoAHmstZ-C-Mh_be3IBD7Y4kt_0iXmgpZbAyuqdawdAyIiIYJ_YeUAnxin0YPJeZBls=&abvar=1&os=0
62.122.171.6200 OK 43 B URL HTTP/2 vt894axs16.com/chicken.gif?z=1820432&pb=e6d60096dbc54754abedd85aeb67409c1675452058&psp=wUreezNG5T-DmAakcv7_d0NpOoCKR2t9Pw-KDqN-fqbf2PfCH6SvO2hvo3IlPUeKIYNAZwAIE7sqsWRKam7gWzBM4T3xnrxkjfVtX8ifoWQj9MfghOv2YTQPfjAZR6T-wqgzPjD87iPcBtrXWq6h4FU8hJHkzLZVGirnPhkqP-OUTvcL5gnPsp0BwayIc4h2eqlcPeiBC8qPehgE2SuVzuDCfSy6hRoO74t4N73jwY8BEghVV3FIQeiXuzwqYcv8_UMY1R4LMt1TmWTSHq9MN-k8xvelYuUeZitj59YSNtc_SNhEjLtaixw0W7U-FGODajMqEqE5j2WXeORRgkpuxWMhMieD3Emg7hfk12yTGo-JpiKrqz0bHmN3AC7RftApDm6xQNcvYNYQJqmg7DcoatSsT7UeyWHC3n-ee3cs7SYSdR6OkHVHUUfpavTYoXkhWe5vg4C80Sy6EGub2RjSqA4SObyBKn3ss5FAszqoqaFY8lNs1jWprSoBJTN77oBf3U-jRWh6acW0xaTXcVVIm1tkDLI1Gw6ghpfyz57Crq22sXDdcoAJNrKdFPk2ddIq70aJd-KFhjbeL_K6HX14fT12sNIzaH1EwIduQ6pkh3E4O7_AOwUaFPAQWzLpPpc5H07EbVw4jLJ6_L04ZN9IJUXHo4PCGQ-RyZpUc5Ylin6y4NtlgQbJO3QbltXHGTbPIyXhEgbfQ7DE1xYl2d6-HoWELBnyP3jvUg6OuquNHuYp2DWr9P3Xz4EIpcPUyzagRdUdRnf26htpC1ti2niIYGRRSzBVvoZWOMj0YaCYvKkMzAtmVop4XyT3uqJ8Ax5nF6FSq8A9PUr8DV3zwwci0pKLhosTnaVGvh4ePr8e43-jxJn0U9wTeiQxctsADnntY3kV6bUFHg1cNCl-1lFolJQ0Q0172wkk3l2waoAHmstZ-C-Mh_be3IBD7Y4kt_0iXmgpZbAyuqdawdAyIiIYJ_YeUAnxin0YPJeZBls=&abvar=1&os=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1820432&pb=e6d60096dbc54754abedd85aeb67409c1675452058&psp=wUreezNG5T-DmAakcv7_d0NpOoCKR2t9Pw-KDqN-fqbf2PfCH6SvO2hvo3IlPUeKIYNAZwAIE7sqsWRKam7gWzBM4T3xnrxkjfVtX8ifoWQj9MfghOv2YTQPfjAZR6T-wqgzPjD87iPcBtrXWq6h4FU8hJHkzLZVGirnPhkqP-OUTvcL5gnPsp0BwayIc4h2eqlcPeiBC8qPehgE2SuVzuDCfSy6hRoO74t4N73jwY8BEghVV3FIQeiXuzwqYcv8_UMY1R4LMt1TmWTSHq9MN-k8xvelYuUeZitj59YSNtc_SNhEjLtaixw0W7U-FGODajMqEqE5j2WXeORRgkpuxWMhMieD3Emg7hfk12yTGo-JpiKrqz0bHmN3AC7RftApDm6xQNcvYNYQJqmg7DcoatSsT7UeyWHC3n-ee3cs7SYSdR6OkHVHUUfpavTYoXkhWe5vg4C80Sy6EGub2RjSqA4SObyBKn3ss5FAszqoqaFY8lNs1jWprSoBJTN77oBf3U-jRWh6acW0xaTXcVVIm1tkDLI1Gw6ghpfyz57Crq22sXDdcoAJNrKdFPk2ddIq70aJd-KFhjbeL_K6HX14fT12sNIzaH1EwIduQ6pkh3E4O7_AOwUaFPAQWzLpPpc5H07EbVw4jLJ6_L04ZN9IJUXHo4PCGQ-RyZpUc5Ylin6y4NtlgQbJO3QbltXHGTbPIyXhEgbfQ7DE1xYl2d6-HoWELBnyP3jvUg6OuquNHuYp2DWr9P3Xz4EIpcPUyzagRdUdRnf26htpC1ti2niIYGRRSzBVvoZWOMj0YaCYvKkMzAtmVop4XyT3uqJ8Ax5nF6FSq8A9PUr8DV3zwwci0pKLhosTnaVGvh4ePr8e43-jxJn0U9wTeiQxctsADnntY3kV6bUFHg1cNCl-1lFolJQ0Q0172wkk3l2waoAHmstZ-C-Mh_be3IBD7Y4kt_0iXmgpZbAyuqdawdAyIiIYJ_YeUAnxin0YPJeZBls=&abvar=1&os=0 HTTP/1.1
Host: vt894axs16.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=23020312207647523a265a4584b29e8051da
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
vt894axs16.com/chicken.gif?z=1820432&pb=e6d60096dbc54754abedd85aeb67409c1675452058&psp=ZuVntkMSiwIqqNeRm1_l8_KtxFwlSGCmEWt6Hh42kOl8_cRMBc1ONbwks96_IKI7gaRlux_m_IasZXTesUKoDFhyY5eKTwCmnOI14eBZdyvgMxC3cjzDj89NNH-Eig5KBlwV7F-M0MA668U59drQ7YybE7HLtDu5Mb4UqBTAdIx6pYaMpLeoMZ-JSTrGQF6TaD4bWSNNUazFtx0fDUbV0aKDco2dCkF0XEqY_F4-RIExt6mnvBSiOI_FMPAkk9MN185abuXh1T4_6JTUApbHDWHDh8v9fnaxw1Kl5Xf5gy2Jvp8WwZ4nyGGvs0rkhl_UToFQJHY_XdEXpdxAVTpboFkS3vJe-lrmhFSjFaRQ4-4q7gofo5n56XzBZO0Rmk9lsYCY8JEnPTOA8waOT4jlWwB7-iG1JDF8Jb1E7WI0ESNr2Nqfoqb2IP46bt4zIkVAfJV86NVWh-LFffDi_q1_qRT5_6k8ZSh_9ELxUE_oBrltUn4A0gcy6fjgVuu7MffP9vaQjQtoE2I7sPvFzP16hYK0H0pNuWdrNu8m8JA6UsKATH-HdvRL4bnMHctZ9wS9CcRQwfQ-yRRmrao8v1wdFepT4s96T1qISdNLRh3I-tESoON40CWCQBfyVd3G-Rm13SkGbTPcamgAv-kTzimab7vbklp1l25-DrK8bBo21gmNOj_D0ueWi0NvotKWhkAMVdvv3elUk1c32k2iK5w2Aot6yRcqtcX9DyRnJzMH-a2nas8LRSdotUAjkETVoRU_XwyjOQuZe42E-QSUj3oxZaY2kM3rHnWGJMcvGuXd2AntkPDuaqJ65ZSIH3NYzB-NUlOh5HqcaQ95iJyoufMvOe9nGmHEvYb3LegdZ2_CwTqU2Q==&abvar=1&os=0
62.122.171.6200 OK 43 B URL HTTP/2 vt894axs16.com/chicken.gif?z=1820432&pb=e6d60096dbc54754abedd85aeb67409c1675452058&psp=ZuVntkMSiwIqqNeRm1_l8_KtxFwlSGCmEWt6Hh42kOl8_cRMBc1ONbwks96_IKI7gaRlux_m_IasZXTesUKoDFhyY5eKTwCmnOI14eBZdyvgMxC3cjzDj89NNH-Eig5KBlwV7F-M0MA668U59drQ7YybE7HLtDu5Mb4UqBTAdIx6pYaMpLeoMZ-JSTrGQF6TaD4bWSNNUazFtx0fDUbV0aKDco2dCkF0XEqY_F4-RIExt6mnvBSiOI_FMPAkk9MN185abuXh1T4_6JTUApbHDWHDh8v9fnaxw1Kl5Xf5gy2Jvp8WwZ4nyGGvs0rkhl_UToFQJHY_XdEXpdxAVTpboFkS3vJe-lrmhFSjFaRQ4-4q7gofo5n56XzBZO0Rmk9lsYCY8JEnPTOA8waOT4jlWwB7-iG1JDF8Jb1E7WI0ESNr2Nqfoqb2IP46bt4zIkVAfJV86NVWh-LFffDi_q1_qRT5_6k8ZSh_9ELxUE_oBrltUn4A0gcy6fjgVuu7MffP9vaQjQtoE2I7sPvFzP16hYK0H0pNuWdrNu8m8JA6UsKATH-HdvRL4bnMHctZ9wS9CcRQwfQ-yRRmrao8v1wdFepT4s96T1qISdNLRh3I-tESoON40CWCQBfyVd3G-Rm13SkGbTPcamgAv-kTzimab7vbklp1l25-DrK8bBo21gmNOj_D0ueWi0NvotKWhkAMVdvv3elUk1c32k2iK5w2Aot6yRcqtcX9DyRnJzMH-a2nas8LRSdotUAjkETVoRU_XwyjOQuZe42E-QSUj3oxZaY2kM3rHnWGJMcvGuXd2AntkPDuaqJ65ZSIH3NYzB-NUlOh5HqcaQ95iJyoufMvOe9nGmHEvYb3LegdZ2_CwTqU2Q==&abvar=1&os=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1820432&pb=e6d60096dbc54754abedd85aeb67409c1675452058&psp=ZuVntkMSiwIqqNeRm1_l8_KtxFwlSGCmEWt6Hh42kOl8_cRMBc1ONbwks96_IKI7gaRlux_m_IasZXTesUKoDFhyY5eKTwCmnOI14eBZdyvgMxC3cjzDj89NNH-Eig5KBlwV7F-M0MA668U59drQ7YybE7HLtDu5Mb4UqBTAdIx6pYaMpLeoMZ-JSTrGQF6TaD4bWSNNUazFtx0fDUbV0aKDco2dCkF0XEqY_F4-RIExt6mnvBSiOI_FMPAkk9MN185abuXh1T4_6JTUApbHDWHDh8v9fnaxw1Kl5Xf5gy2Jvp8WwZ4nyGGvs0rkhl_UToFQJHY_XdEXpdxAVTpboFkS3vJe-lrmhFSjFaRQ4-4q7gofo5n56XzBZO0Rmk9lsYCY8JEnPTOA8waOT4jlWwB7-iG1JDF8Jb1E7WI0ESNr2Nqfoqb2IP46bt4zIkVAfJV86NVWh-LFffDi_q1_qRT5_6k8ZSh_9ELxUE_oBrltUn4A0gcy6fjgVuu7MffP9vaQjQtoE2I7sPvFzP16hYK0H0pNuWdrNu8m8JA6UsKATH-HdvRL4bnMHctZ9wS9CcRQwfQ-yRRmrao8v1wdFepT4s96T1qISdNLRh3I-tESoON40CWCQBfyVd3G-Rm13SkGbTPcamgAv-kTzimab7vbklp1l25-DrK8bBo21gmNOj_D0ueWi0NvotKWhkAMVdvv3elUk1c32k2iK5w2Aot6yRcqtcX9DyRnJzMH-a2nas8LRSdotUAjkETVoRU_XwyjOQuZe42E-QSUj3oxZaY2kM3rHnWGJMcvGuXd2AntkPDuaqJ65ZSIH3NYzB-NUlOh5HqcaQ95iJyoufMvOe9nGmHEvYb3LegdZ2_CwTqU2Q==&abvar=1&os=0 HTTP/1.1
Host: vt894axs16.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=23020312207647523a265a4584b29e8051da
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img1.thatpervert.com/pics/avatar/tag/186927
51.83.233.48200 OK 29 kB URL HTTP/1.1 img1.thatpervert.com/pics/avatar/tag/186927
IP 51.83.233.48:0
File type GIF image data, version 89a, 60 x 60\012- data
Hash 66d4b9b887f9ce64e32b6090004676d7
542f7feef4e4587dbe69ab16a1a3820331735a6f
535c4a73fac84b85fb50f56a0eb581fcda8530837d7f0e86b9c36fecb6b6b619
GET /pics/avatar/tag/186927 HTTP/1.1
Host: img1.thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://thatpervert.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Fri, 27 Jan 2023 02:17:24 GMT
content-type: image/gif
content-length: 29213
last-modified: Sun, 16 Mar 2014 07:52:22 GMT
expires: Wed, 22 Oct 2025 02:17:24 GMT
cache-control: public, max-age=86313600, stale-while-revalidate=17262720
age: 659014
accept-ranges: bytes
wsr-cache: HIT 71896 (404)
thatpervert.com/images/apple-icon.png
51.68.155.228200 OK 4.9 kB URL HTTP/1.1 thatpervert.com/images/apple-icon.png
IP 51.68.155.228:0
File type PNG image data, 57 x 57, 8-bit/color RGB, non-interlaced\012- data
Hash 109968c9f3d7b18fa28aee6cfaf749b5
140cecbf681fdf4f4392fc77b07fef9b25070f89
6855e2882921d53822451b81bad2c8b7f2722d996c8147f69d8789061272a045
GET /images/apple-icon.png HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/tag/chinpokonyan
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: image/png
Content-Length: 4863
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-12ff"
Expires: Fri, 10 Feb 2023 17:20:59 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
thatpervert.com/favicon.ico
51.68.155.228200 OK 4.3 kB URL HTTP/1.1 thatpervert.com/favicon.ico
IP 51.68.155.228:0
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 7d25e7e2d38e08a3ec3a0a652e2ac3a9
8a5730c2ca65bab51226dfff39c1052996943aae
2da64c872d1cea4e343d96a63ab8f48ddf67bd30aa44869dd0e815ed9c658b8a
GET /favicon.ico HTTP/1.1
Host: thatpervert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/tag/chinpokonyan
Cookie: joyreactor_sess3=ver3a637efdd4019fd87fc984447282b97f7:e19b5c90809fd35224adce51ace4a0c038e0cb43eaa7616fdac478d5c9ffc826
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: image/x-icon
Content-Length: 4286
Last-Modified: Wed, 23 Sep 2020 16:22:53 GMT
Connection: keep-alive
ETag: "5f6b765d-10be"
Expires: Fri, 10 Feb 2023 17:20:59 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
counter.yadro.ru/hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276
88.212.201.198302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
HTTP/1.1 302 Moved Temporarily
Date: Fri, 03 Feb 2023 17:20:59 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276
Content-Length: 32
Expires: Wed, 02 Feb 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
poweredby.jads.co/adshow.php?adzone=637907
185.94.237.64200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=637907
IP 185.94.237.64:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (398), with CRLF, LF line terminators
Hash 69a0af66d6a721d990af17681dd2e51d
1ba3c3e731b188d9ec3544c0febd5ef4577d1508
0c63662eafeba866cce801d17aa95daba4c8a868009c5e2b0934a68a84be7467
GET /adshow.php?adzone=637907 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=351e19cf5c5b0bea4ad7bfbb52fc7734; expires=Sat, 03-Feb-2024 17:20:58 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps61=1; expires=Sat, 04-Feb-2023 17:20:58 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjExOTY5NjE7aToxNjc1NzA0MDU4O30%3D; expires=Mon, 06-Feb-2023 17:20:58 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Mon, 06-Feb-2023 17:20:58 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d604c94e8c5845191740c70ec9502908
9f68120df098486c1ca12d6b992eccf39e4d5ad6
9d83a7970684c2b9b85910935cf48f03bcdddfa538a98108c703d591282f5d1a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9D83A7970684C2B9B85910935CF48F03BCDDDFA538A98108C703D591282F5D1A"
Last-Modified: Thu, 02 Feb 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9148
Expires: Fri, 03 Feb 2023 19:53:27 GMT
Date: Fri, 03 Feb 2023 17:20:59 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=52347
157.90.84.242204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=52347
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=52347 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://thatpervert.com/
Origin: http://thatpervert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 03 Feb 2023 17:20:59 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: http://thatpervert.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
i.jads.co/network/user1037/131-1573234883-0437306001573234883.gif
69.16.175.10200 OK 105 kB URL HTTP/1.1 i.jads.co/network/user1037/131-1573234883-0437306001573234883.gif
IP 69.16.175.10:0
File type GIF image data, version 89a, 728 x 90\012- data
Size 105 kB (105088 bytes)
Hash 0438c1689b9bfd6a00e57a7534cb530f
11fcb2ebc3c5aa64552e2abddb4470bea7b2f567
10a5062a5c649ae6d604deaa6f2cd4afd7c8490084126b997eed4c157c06478d
GET /network/user1037/131-1573234883-0437306001573234883.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:20:59 GMT
Connection: Keep-Alive
ETag: "1573234883"
Cache-Control: max-age=4205823
Content-Length: 105088
Content-Type: image/gif
Last-Modified: Fri, 08 Nov 2019 17:41:23 GMT
Accept-Ranges: bytes
X-HW: 1675444859.dop203.sk1.t,1675444859.cds201.sk1.c
poweredby.jads.co/adshow.php?adzone=897092
185.94.237.64200 OK 1.6 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=897092
IP 185.94.237.64:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (463), with CRLF, LF line terminators
Hash 43f239b7f9f8749c61c3e344049b14e9
f22face9cdd2deadbd8d406c20dc32d7477e40d3
97aaf85581e527bad245a6bee1a166ebb3ecddb848c245cfdc7b34184632e89a
GET /adshow.php?adzone=897092 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatpervert.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=351e19cf5c5b0bea4ad7bfbb52fc7734; expires=Sat, 03-Feb-2024 17:20:58 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Mon, 06-Feb-2023 17:20:58 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Mon, 06-Feb-2023 17:20:58 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
714b09d975.58915e0a30.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMjEwMDM4MzEyMjM5NjgxNTAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMjIuMCIsInRhZ19pZCI6NTIzNDcsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4yNCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiY2hpbnBva29ueWFuJTJDZnVubnklMkNjb2NrcyUyQ2Jlc3QlMkNmcmVlJTJDcG9ybiUyQ3IzNCUyQ2Z1dGFuYXJpJTJDc2hlbWFsZSUyQ2hlbnRhaSUyQ2ZlbWRvbSUyQ2FuZCUyQ2ZhbmRvbSUyQ3Bvcm4lMkNXYW5uYSUyQ3NlZSUyQ3NvbWUlMkNuYXVnaHR5JTJDcGljdHVyZXMlMkNDbGljayUyQ2hlcmUlMkMlMkNjaGlucG9rb255YW4lMkMoJTJCNSUyQ3BpY3R1cmVzJTJDcmF0aW5nJTJDMjguMCUyQ2NoaW5wb2tvbnlhbikifQ==
45.133.44.24200 OK 0 B URL HTTP/2 714b09d975.58915e0a30.com/in/track?data=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
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: 714b09d975.58915e0a30.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://thatpervert.com
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:20:59 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 70619a01a259e93d04b19cc5286f7c8f
11198e97bc68a3a19ea7e8373201fa26a381fa46
c9fac9746346f8c30661f803937466b0b09fadd46f2f875580962ccdc5f4264a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9FAC9746346F8C30661F803937466B0B09FADD46F2F875580962CCDC5F4264A"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17778
Expires: Fri, 03 Feb 2023 22:17:17 GMT
Date: Fri, 03 Feb 2023 17:20:59 GMT
Connection: keep-alive
js.capndr.com/interstitial-admanager/build.m.js
45.133.44.24200 OK 8.0 kB URL HTTP/2 js.capndr.com/interstitial-admanager/build.m.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash f12fa049aa1bc28d2941aac364058607
d91b6f62c88203fb9c694ccfdef95357c44b5dc9
5398b3cc38fdec60ce4579f0c2c34a530544349231bfeb6c3fb0dd44cb16958d
GET /interstitial-admanager/build.m.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 19 Jan 2023 09:24:32 GMT
etag: W/"63c90c50-5185"
content-encoding: gzip
expires: Fri, 03 Feb 2023 17:25:59 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=52347
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=52347
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=52347 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22286
Origin: http://thatpervert.com
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://thatpervert.com
Set-Cookie: id=5832660170135484378; Expires=Sat, 03 Feb 2024 17:20:59 GMT; Secure; SameSite=None
Vary: Origin
ocsp.usertrust.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 05713cb6ce653c4668edbc049283a25b
f9a8eda042db3c5a4cc43328d9baf93d4905f516
7e5236cc298e60f0359724835ba5c456bda891ceb2b24d6654cfd02b9b3d1074
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 20:56:05 GMT
Expires: Thu, 09 Feb 2023 20:56:04 GMT
Etag: "f9a8eda042db3c5a4cc43328d9baf93d4905f516"
Cache-Control: max-age=601660,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 32
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cd723889f0b39-OSL
bongacams.com/track?c=751666
195.85.23.88302 Found 138 B URL HTTP/2 bongacams.com/track?c=751666
IP 195.85.23.88:0
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /track?c=751666 HTTP/1.1
Host: bongacams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: text/html
content-length: 138
location: https://bngtrk.com/hit.php?c=751666
x-bc: ded7850
x-zone: 5a-web51
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=1Nhjy6ZgdSkRBdjAYASrrymaZ4sOOIwRaTZcLucYG8g-1675444859-0-AcQ834Tfoz49oe10L5I/qmAcdd4boSNNDem3JqGXjYnpmdvGVXKtvdrBBwaTZWQ/suB8qNepQ0RvVIwyaqMyXNI=; path=/; expires=Fri, 03-Feb-23 17:50:59 GMT; domain=.bongacams.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 793cd7236a5d0b06-OSL
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash 1e584738b37d432c39d9012dbf3cb080
dfb73a18a32b6c41fd7d4ab584421dfa786a2b6a
1ccac725515ff426deab3ccaeeafdb5a9cdd2f1718a3838848fc7f9ff8a72d2a
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 07 Feb 2023 15:24:53 GMT
ETag: "dfb73a18a32b6c41fd7d4ab584421dfa786a2b6a"
Last-Modified: Fri, 03 Feb 2023 15:24:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1864
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cd723eb10b4f3-OSL
ocsp.usertrust.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash a1d9c6dd5da433e6de91c17269b234a0
d89a8e6d6a227382651a47b2f334f88515d8cdea
2d30d2c0e5e56db3edbf75511325d8c08b633308466d8304b00d2847d3c54bfd
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 18:10:18 GMT
Expires: Thu, 09 Feb 2023 18:10:17 GMT
Etag: "d89a8e6d6a227382651a47b2f334f88515d8cdea"
Cache-Control: max-age=603521,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 14
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cd724091a0b39-OSL
counter.yadro.ru/hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276
88.212.201.198200 OK 144 B URL HTTP/1.1 counter.yadro.ru/hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 15\012- data
Hash 74789043303bb2995b903221ab30686e
8eccf26eee7c0a41d0ce2389b86cc90e25955021
ce164af09182dc5d41e55b90b2e84219ae4e34f392ed010253ecbb66a45ab3b7
GET /hit?t26.6;r;s1280*1024*24;uhttp%3A//thatpervert.com/tag/chinpokonyan;0.40994860092205276 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://thatpervert.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 03 Feb 2023 17:20:59 GMT
Content-Type: image/gif
Content-Length: 144
Connection: keep-alive
Expires: Wed, 02 Feb 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f93dc5fe150938447a857ab16abe45db
ce9d6a0278c52ea5818971620ff0012603f5c5d5
09bc219b8e04da7d690190245d77030757e4ae9af5e0f8390fddf00a3a9c71c7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09BC219B8E04DA7D690190245D77030757E4AE9AF5E0F8390FDDF00A3A9C71C7"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6319
Expires: Fri, 03 Feb 2023 19:06:18 GMT
Date: Fri, 03 Feb 2023 17:20:59 GMT
Connection: keep-alive
ocsp.usertrust.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 2dbbadd0fd61e5de103cd6759256b612
52a91eeb99cba9b4d23d32d07cdc0331b9df03d4
26ccac2a0656a00f827eaf042e05d400cd285eefe27ba6031a5009e7e6bc2368
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:21:00 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 02:38:45 GMT
Expires: Fri, 10 Feb 2023 02:38:44 GMT
Etag: "52a91eeb99cba9b4d23d32d07cdc0331b9df03d4"
Cache-Control: max-age=602812,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1016
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cd727ac660b39-OSL
mcpuwpsh.com/get/?go=1&data=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%3D
94.130.197.134302 Found 0 B URL HTTP/2 mcpuwpsh.com/get/?go=1&data=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%3D
IP 94.130.197.134:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /get/?go=1&data=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%3D HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thatpervert.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.16.0
date: Fri, 03 Feb 2023 17:21:00 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://mcpuwpsh.com/popunder/in/click/?mid=9083350109979921139&pid=0&site=93317&sc=NO&usage_type=DCH&subid=249121095&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=thatpervert.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=93317&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=IAB25&min_cpm=0.257375&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=a&original_bid=0&user_fp=0&v2=0&pop_type=0&space_id=2442&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ssp=3758&rc=0&v2_track=0&otype=0&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F2459%2F%3Fsource%3D249121095%26site_id%3D93317%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D93317%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttp%253A%252F%252Fthatpervert.com%252Ftag%252Fchinpokonyan%26sid%3D2442%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.257375&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=1
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 655990688aa6b5e66e8ae2645147bab6
21851dc0e0742f809d9933025c06c66e7ace9d72
cf782d9e1166f4d8206b571070faf4461d0198ef787186563864bc1b5ae44f7a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3610
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Last-Modified: Fri, 03 Feb 2023 16:20:50 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 655990688aa6b5e66e8ae2645147bab6
21851dc0e0742f809d9933025c06c66e7ace9d72
cf782d9e1166f4d8206b571070faf4461d0198ef787186563864bc1b5ae44f7a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3489
Cache-Control: max-age=109552
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Etag: "63dc3dcb-118"
Expires: Sat, 04 Feb 2023 23:46:52 GMT
Last-Modified: Thu, 02 Feb 2023 22:48:43 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 655990688aa6b5e66e8ae2645147bab6
21851dc0e0742f809d9933025c06c66e7ace9d72
cf782d9e1166f4d8206b571070faf4461d0198ef787186563864bc1b5ae44f7a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3610
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Last-Modified: Fri, 03 Feb 2023 16:20:50 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 655990688aa6b5e66e8ae2645147bab6
21851dc0e0742f809d9933025c06c66e7ace9d72
cf782d9e1166f4d8206b571070faf4461d0198ef787186563864bc1b5ae44f7a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3489
Cache-Control: max-age=109552
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Etag: "63dc3dcb-118"
Expires: Sat, 04 Feb 2023 23:46:52 GMT
Last-Modified: Thu, 02 Feb 2023 22:48:43 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 655990688aa6b5e66e8ae2645147bab6
21851dc0e0742f809d9933025c06c66e7ace9d72
cf782d9e1166f4d8206b571070faf4461d0198ef787186563864bc1b5ae44f7a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4292
Cache-Control: max-age=110355
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Etag: "63dc3dcb-118"
Expires: Sun, 05 Feb 2023 00:00:15 GMT
Last-Modified: Thu, 02 Feb 2023 22:48:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
bcprm.com/promo.php?c=751666&type=banner&size=300x250&name=st_bigbanner_gc
185.75.252.140200 OK 63 kB URL HTTP/2 bcprm.com/promo.php?c=751666&type=banner&size=300x250&name=st_bigbanner_gc
IP 185.75.252.140:0
ASN #48684 Viking Host B.V.
Hash e7f3d49619c3982fa4443d6b1824059b
9d609bceeac2126ad525513cad21153a89c4fe97
4b14776f347e0fa4e9c8be76133c49d83482000f1b409c3ae59a0d15ee0b81ac
GET /promo.php?c=751666&type=banner&size=300x250&name=st_bigbanner_gc HTTP/1.1
Host: bcprm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin:
expires: Fri, 03 Feb 2023 17:20:58 GMT
x-bcs: ded7724
strict-transport-security: max-age=0;
cache-control: no-cache, public
content-encoding: gzip
x-bc-bl: 103
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/189/2ec/xbig_lq/27b8fc.webp
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/0a1/189/2ec/xbig_lq/27b8fc.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 91d14c1dda2d7ceea903f4f12068fb51
83e94b6301bb9f07dc044b7d7e6a11d888b473fd
da3b9a92c3516b3f0393b11ae0278c70b042430fe19e08f73f6a3f72b88e3b12
GET /live/0a1/189/2ec/xbig_lq/27b8fc.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11232
last-modified: Fri, 03 Feb 2023 17:20:05 GMT
etag: "63dd4245-2be0"
expires: Fri, 10 Feb 2023 17:20:16 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: HIT
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf69b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07d/081/26e/xbig_lq/9741e4.webp
195.85.23.226200 OK 23 kB URL HTTP/2 i.bcicdn.com/live/07d/081/26e/xbig_lq/9741e4.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 677534c1ddd170bb7b292e0037f70713
9e5d74f51aa9b9e8bdd6659a6086b13997d4fa44
f75a2dae15c26df4129cfefb704f2b97ba7c47f6a18f7d56e3f67f0a20c2aeb5
GET /live/07d/081/26e/xbig_lq/9741e4.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 23336
last-modified: Fri, 03 Feb 2023 17:19:07 GMT
etag: "63dd420b-5b28"
expires: Fri, 10 Feb 2023 17:19:12 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 107
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf6ab4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07d/081/261/xbig_lq/f388dc.webp
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/07d/081/261/xbig_lq/f388dc.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 512e288edda5d6ab83969ba0ac97a86e
05ea89c9dc9a5175169bc6bacbfea42d92fee676
d930e1ed36f8cc1194af86c3a26af077e9f094812062617153b382d64a73b041
GET /live/07d/081/261/xbig_lq/f388dc.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 15798
last-modified: Fri, 03 Feb 2023 17:19:35 GMT
etag: "63dd4227-3db6"
expires: Fri, 10 Feb 2023 17:19:37 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 66
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf6db4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/042/38f/292/xbig_lq/978260.webp
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/042/38f/292/xbig_lq/978260.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 80a0638df314fa28ab8f93693011a883
f49fe114864d671efaf3ca5e2b1d17020505bab2
88d4303b685198658a9d2e968b46dba1a5bc7cc13b6c78e2e028175eb7ae775b
GET /live/042/38f/292/xbig_lq/978260.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11366
last-modified: Fri, 03 Feb 2023 17:19:54 GMT
etag: "63dd423a-2c66"
expires: Fri, 10 Feb 2023 17:19:55 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 65
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf67b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/061/2bd/0f0/xbig_lq/9741e4.webp
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/061/2bd/0f0/xbig_lq/9741e4.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a0280b77b15783da5848c1379492fad6
172fd9ff20628a6704446b71461bd8f88b319ba1
4ea4c2c961767cebfdc7795f1315649aadd1e6c30d425ba307c358a9d33ffdd2
GET /live/061/2bd/0f0/xbig_lq/9741e4.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 15170
last-modified: Fri, 03 Feb 2023 17:19:12 GMT
etag: "63dd4210-3b42"
expires: Fri, 10 Feb 2023 17:19:23 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf6bb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/096/1e7/3e0/xbig_lq/1afe0f.webp
195.85.23.226200 OK 6.1 kB URL HTTP/2 i.bcicdn.com/live/096/1e7/3e0/xbig_lq/1afe0f.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 01600e2054f9c009344150196848dc2c
4dd3dc70308d3eca155a3f315cc49b6184e10583
88f1f9a4d6cef77dce592fb51a48e312715891f174399f8a460e8e3d5b75e89d
GET /live/096/1e7/3e0/xbig_lq/1afe0f.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 6144
last-modified: Fri, 03 Feb 2023 17:16:30 GMT
etag: "63dd416e-1800"
expires: Fri, 10 Feb 2023 17:16:31 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: HIT
cf-cache-status: HIT
age: 268
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf70b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/050/0a8/1f0/xbig_lq/57e3e9.webp
195.85.23.226200 OK 10 kB URL HTTP/2 i.bcicdn.com/live/050/0a8/1f0/xbig_lq/57e3e9.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 58233e7407004a5adfdb5abed0b30b02
a3e67f27b39014dfdb3f137b8c9bea662d7e5ed5
96555c92fd67fa6710cd0607dfe3c517ae3a3510133279ffb0bc1ca07af07194
GET /live/050/0a8/1f0/xbig_lq/57e3e9.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 10248
last-modified: Fri, 03 Feb 2023 17:19:08 GMT
etag: "63dd420c-2808"
expires: Fri, 10 Feb 2023 17:19:12 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 106
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf68b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/375/114/xbig_lq/8df3cd.webp
195.85.23.226200 OK 8.8 kB URL HTTP/2 i.bcicdn.com/live/0a3/375/114/xbig_lq/8df3cd.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df9a84da5c4c3ad690b727758b04aed7
7b681e05535ae7a61518050d7d397219d7364e7c
e998dc422045fe00f1f1c5f654a53d9cf188d2093b5c5832fda106b961582722
GET /live/0a3/375/114/xbig_lq/8df3cd.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 8832
last-modified: Fri, 03 Feb 2023 17:16:46 GMT
etag: "63dd417e-2280"
expires: Fri, 10 Feb 2023 17:16:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 251
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf6fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/068/28d/272/xbig_lq/43dd87.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/068/28d/272/xbig_lq/43dd87.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 01e0204e647708f4a28f86aac22a3812
4a215485d6349a4131a4c973bee704844f13a32c
ca3218819b59a748346a3ae7fc6125e6df98c9c1b66d4763185260507c27e151
GET /live/068/28d/272/xbig_lq/43dd87.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 12748
last-modified: Fri, 03 Feb 2023 17:19:17 GMT
etag: "63dd4215-31cc"
expires: Fri, 10 Feb 2023 17:19:22 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf73b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/024/3e3/10a/xbig_lq/9d9c0c.webp
195.85.23.226200 OK 4.7 kB URL HTTP/2 i.bcicdn.com/live/024/3e3/10a/xbig_lq/9d9c0c.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7d4c7c34d3c05da9efda7a7ac7745785
9b09a39590ead3602dc3f23323c2b2576fb7bb7c
84fc65e2248be3a9846e0fa6db7330446b2ea00e964732104dfbb1af69d30228
GET /live/024/3e3/10a/xbig_lq/9d9c0c.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 4658
last-modified: Fri, 03 Feb 2023 17:16:06 GMT
etag: "63dd4156-1232"
expires: Fri, 10 Feb 2023 17:16:06 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 283
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf85b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/067/375/265/xbig_lq/eede64.webp
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/067/375/265/xbig_lq/eede64.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0463123523ed4866f575e75222b5bcfb
9f7dbb43fb39758fec76e088992cce573cabdc56
c1313b55864ffc489248b710bdec820b8e16ce109894dc3ec769462f7d4cbcdb
GET /live/067/375/265/xbig_lq/eede64.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11254
last-modified: Fri, 03 Feb 2023 17:16:38 GMT
etag: "63dd4176-2bf6"
expires: Fri, 10 Feb 2023 17:16:39 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: HIT
cf-cache-status: HIT
age: 259
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf75b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07d/081/39c/xbig_lq/1afe0f.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/07d/081/39c/xbig_lq/1afe0f.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 27401349c0f91fda1ef8852ff9321f11
26e5073e97f0288b5cf04d473e9ea4d263a67383
b141c4a3a1ace8b8109775647666b117873bbe741fcd92555da42b25c73d1b45
GET /live/07d/081/39c/xbig_lq/1afe0f.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13204
last-modified: Fri, 03 Feb 2023 17:16:31 GMT
etag: "63dd416f-3394"
expires: Fri, 10 Feb 2023 17:16:31 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 259
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf76b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/067/019/0b5/xbig_lq/b1f755.webp
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/067/019/0b5/xbig_lq/b1f755.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4a018218b5f2983647901d06aedafedc
3b44dfd67e1bfdeb4417a0aeba27d6cbe644affa
cd41eca5b8cef33481ef858883069b4cad0c1a91c7b764767d3f597cbf0544bf
GET /live/067/019/0b5/xbig_lq/b1f755.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11972
last-modified: Fri, 03 Feb 2023 17:18:16 GMT
etag: "63dd41d8-2ec4"
expires: Fri, 10 Feb 2023 17:18:18 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 162
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf78b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/196/318/xbig_lq/5e40d6.webp
195.85.23.226200 OK 8.9 kB URL HTTP/2 i.bcicdn.com/live/0a3/196/318/xbig_lq/5e40d6.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d086e4016c95c6b7f00a32f822fe7423
bb420a79583b061acf731f8fed2c7804056541d2
630345d476d60411db3e8b6663ca5cddcbe187ee50f86df3ba2fe4b697be1406
GET /live/0a3/196/318/xbig_lq/5e40d6.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 8892
last-modified: Fri, 03 Feb 2023 17:15:08 GMT
etag: "63dd411c-22bc"
expires: Fri, 10 Feb 2023 17:15:09 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 350
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf7bb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a4/09c/2c1/xbig_lq/11a3a8.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/0a4/09c/2c1/xbig_lq/11a3a8.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 804b82d50ea3a126be38dfa84faf2854
938ff52620a3b7c97937b06179cde0c95b03e23f
14989e8818f890803d2334243454c2e12da8158fae01fe7b04568fa96748eaab
GET /live/0a4/09c/2c1/xbig_lq/11a3a8.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13410
last-modified: Fri, 03 Feb 2023 17:18:40 GMT
etag: "63dd41f0-3462"
expires: Fri, 10 Feb 2023 17:18:40 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 140
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf7db4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/03c/2b4/3a9/xbig_lq/e2b233.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/03c/2b4/3a9/xbig_lq/e2b233.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f74a64a215a8dfcc85f4e8ba3f923ba1
e500d14ecfde780f82c6de7149ee3d2a7194b7fb
0b403691a201760d70436e72f5f8a755e4ed0cafcc2daa9d28bf6a72d0e691e3
GET /live/03c/2b4/3a9/xbig_lq/e2b233.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 14108
last-modified: Fri, 03 Feb 2023 17:20:10 GMT
etag: "63dd424a-371c"
expires: Fri, 10 Feb 2023 17:20:15 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 42
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf7fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/070/22a/1a5/xbig_lq/91a368.webp
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/070/22a/1a5/xbig_lq/91a368.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 58747e6a73360811981cd891090f0860
ac57cdb115c4a4c3caf56908fa4f039c33865e9c
eaf6666f9fa742c2c27738cedb09ab931c70c744011f03bdb2b29ce407d45294
GET /live/070/22a/1a5/xbig_lq/91a368.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 20224
last-modified: Fri, 03 Feb 2023 17:15:59 GMT
etag: "63dd414f-4f00"
expires: Fri, 10 Feb 2023 17:16:00 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: HIT
cf-cache-status: HIT
age: 291
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf81b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/042/2dd/164/xbig_lq/c698ae.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/042/2dd/164/xbig_lq/c698ae.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 18699f4e4248625e115b34ea6b91fd2a
c322a14bba58a1a063f443104429e5f9a9142bc2
9dfc453075a42e7666a39789a73c98292f0d8383430470a988890896dcf79708
GET /live/042/2dd/164/xbig_lq/c698ae.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13476
last-modified: Fri, 03 Feb 2023 17:19:21 GMT
etag: "63dd4219-34a4"
expires: Fri, 10 Feb 2023 17:19:22 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: HIT
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf82b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a4/13a/16d/xbig_lq/5274e7.webp
195.85.23.226200 OK 33 kB URL HTTP/2 i.bcicdn.com/live/0a4/13a/16d/xbig_lq/5274e7.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 843b91fb2a5bec351b67c32a2e322117
d2039d7741a7a719d90f8dcd6063a163e35a64ee
300bf1685f3c12185e7975f9575149803b1db676fbe5b6c0929dfb8158a7d47d
GET /live/0a4/13a/16d/xbig_lq/5274e7.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 32652
last-modified: Fri, 03 Feb 2023 17:17:00 GMT
etag: "63dd418c-7f8c"
expires: Fri, 10 Feb 2023 17:17:01 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 230
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf79b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/398/1ba/xbig_lq/46890a.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/0a3/398/1ba/xbig_lq/46890a.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7636c5799977c2aeda2f0dcd0161f5a6
c7acc00aaa12e93b918aabf4e2fe79bfb5dc7862
71ff4d14f6edf78f2c1f6648bd23ca1af4f30b50e60bef7338f6f64fb9690fc6
GET /live/0a3/398/1ba/xbig_lq/46890a.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13182
last-modified: Fri, 03 Feb 2023 17:16:47 GMT
etag: "63dd417f-337e"
expires: Fri, 10 Feb 2023 17:16:48 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 240
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf87b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09c/00e/29b/xbig_lq/7115d3.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/09c/00e/29b/xbig_lq/7115d3.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e2d29ce9658c78d10a1d633837503366
ce693c283a2a706d3a1acde72a550194451fdd61
bb9e1eaaf6c9ccb86d066dfd57f4ffdb9da2321bc307d63bca86b2cdaa12377e
GET /live/09c/00e/29b/xbig_lq/7115d3.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13368
last-modified: Fri, 03 Feb 2023 17:20:18 GMT
etag: "63dd4252-3438"
expires: Fri, 10 Feb 2023 17:20:20 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 30
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf86b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/043/27e/3b3/xbig_lq/ac3dfc.webp
195.85.23.226200 OK 7.3 kB URL HTTP/2 i.bcicdn.com/live/043/27e/3b3/xbig_lq/ac3dfc.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9d7d221bcafcb039fb7146ae3fb0006b
226bf89bc0e5113ecd64b8571c06cea8094c68ae
71cd2c4c2899715e3b0a89546da62b46d423588ffcce49fb889fd366cfc8aaae
GET /live/043/27e/3b3/xbig_lq/ac3dfc.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7286
last-modified: Fri, 03 Feb 2023 17:18:23 GMT
etag: "63dd41df-1c76"
expires: Fri, 10 Feb 2023 17:18:28 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 143
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf8cb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07a/239/0a2/xbig_lq/9f9eaf.webp
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/07a/239/0a2/xbig_lq/9f9eaf.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3d270f54636cef68c06035ec3551a742
a49998f21d7ab8afb677e4f07897cee2bed57687
35c56729011d008977aafa31072d16b70356925723be24769069c6c37f79b3de
GET /live/07a/239/0a2/xbig_lq/9f9eaf.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 16888
last-modified: Fri, 03 Feb 2023 17:18:42 GMT
etag: "63dd41f2-41f8"
expires: Fri, 10 Feb 2023 17:18:44 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 123
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf89b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/059/1ed/336/xbig_lq/733778.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/059/1ed/336/xbig_lq/733778.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3fbc8ac388d01c70de1af82f9ba4aca8
0ee4a635a6ea3b391a3a3b629ea455e0c8c8e71e
93af292399d588f40e0d9f6f62544c6c9ff2163502b65413daef85c1fc20cd67
GET /live/059/1ed/336/xbig_lq/733778.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13572
last-modified: Fri, 03 Feb 2023 17:18:31 GMT
etag: "63dd41e7-3504"
expires: Fri, 10 Feb 2023 17:18:32 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: HIT
cf-cache-status: HIT
age: 141
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf8bb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/070/330/31d/xbig_lq/5df21a.webp
195.85.23.226200 OK 7.6 kB URL HTTP/2 i.bcicdn.com/live/070/330/31d/xbig_lq/5df21a.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5b3b3b614adfe4d410b7b6f9270802b0
3543f57b48facc5d61cac570db3bd13919b0f554
1792c5ece2b9b248738a0776ec1815030448dc127421229497b01e205369e09e
GET /live/070/330/31d/xbig_lq/5df21a.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7598
last-modified: Fri, 03 Feb 2023 17:16:42 GMT
etag: "63dd417a-1dae"
expires: Fri, 10 Feb 2023 17:16:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 240
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf95b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/057/351/010/xbig_lq/df5728.webp
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/057/351/010/xbig_lq/df5728.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash faa3abf85073ad0b0fbe6cfb25f6d6a8
026fe8798b648c150952a6ed932e19da807e28c8
07ce6be2e93747864ce6e66fe90dcb6b66266f3020f1f7bfc2f564a8584019d4
GET /live/057/351/010/xbig_lq/df5728.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 17918
last-modified: Fri, 03 Feb 2023 17:15:23 GMT
etag: "63dd412b-45fe"
expires: Fri, 10 Feb 2023 17:15:24 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 332
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf8eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/098/262/2c0/xbig_lq/36d28d.webp
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/098/262/2c0/xbig_lq/36d28d.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 72115ab17919852e4a5370fd46271e5a
fe01e574732ec7d145de8f5d28ca432adc152412
5f81727c528b776f49bc58239bec2f292eaced49064d055f1b485262dbfea576
GET /live/098/262/2c0/xbig_lq/36d28d.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 12062
last-modified: Fri, 03 Feb 2023 17:17:51 GMT
etag: "63dd41bf-2f1e"
expires: Fri, 10 Feb 2023 17:17:59 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: HIT
cf-cache-status: HIT
age: 178
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf8fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/068/265/0c5/xbig_lq/8f8046.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/068/265/0c5/xbig_lq/8f8046.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aabd558ba3de4dcc363f2e66667b9e21
394d153de1a9dd101e86102133085959ee0359a4
6b03d955952d770258e06134850dfecc54e1b8e02b1325bc4a8e5535c5b9f0c8
GET /live/068/265/0c5/xbig_lq/8f8046.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 12724
last-modified: Fri, 03 Feb 2023 17:16:43 GMT
etag: "63dd417b-31b4"
expires: Fri, 10 Feb 2023 17:16:49 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 240
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf90b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09c/0fd/32f/xbig_lq/3a76e9.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/09c/0fd/32f/xbig_lq/3a76e9.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b77453a6c102d2035c9cd10b7ed73ac9
89eae6aa12cca49d74f379ee43c4e3d84f932178
ebb62106e06ce33a83739ca5ce1781c58cd6dd40381bc00ffeeb01b4ac2f449d
GET /live/09c/0fd/32f/xbig_lq/3a76e9.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 14428
last-modified: Fri, 03 Feb 2023 17:16:37 GMT
etag: "63dd4175-385c"
expires: Fri, 10 Feb 2023 17:16:38 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 258
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf92b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07c/3de/002/xbig_lq/acd101.webp
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/07c/3de/002/xbig_lq/acd101.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4f90242f345dc84fadb502ecb8ec0f87
56d0df6a4b1e06788b72e3b646be43d3ec2a07bc
c22e9a249ae6b524758605228df62d14dc48e04aeeb73af732bdb7de85b9a7db
GET /live/07c/3de/002/xbig_lq/acd101.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11614
last-modified: Fri, 03 Feb 2023 17:20:32 GMT
etag: "63dd4260-2d5e"
expires: Fri, 10 Feb 2023 17:20:33 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 15
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf93b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/151/39b/xbig_lq/5254e1.webp
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/0a1/151/39b/xbig_lq/5254e1.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b057864b564d47e9527d1f7b2eb7c1c0
ac6828d1e093c60e516085ab33f2eb68be79c2ec
a581b3587384e482f50f40c8f0d3dfa2ff70686053381c2795f733242670604e
GET /live/0a1/151/39b/xbig_lq/5254e1.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11620
last-modified: Fri, 03 Feb 2023 17:18:28 GMT
etag: "63dd41e4-2d64"
expires: Fri, 10 Feb 2023 17:18:31 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 143
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf94b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09e/0ba/1f1/xbig_lq/1e07b9.webp
195.85.23.226200 OK 25 kB URL HTTP/2 i.bcicdn.com/live/09e/0ba/1f1/xbig_lq/1e07b9.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cadbe10c1fd26ad284c3c93ea4187f52
9b8eff075ee7aadea0f510a7cd4d4993913fca79
25aefc3f1846e9c945d50497ba5c9de95013edaec8fa2299d9a43e7204513c8b
GET /live/09e/0ba/1f1/xbig_lq/1e07b9.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 25160
last-modified: Fri, 03 Feb 2023 17:17:19 GMT
etag: "63dd419f-6248"
expires: Fri, 10 Feb 2023 17:17:22 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 213
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf8db4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/38a/36b/xbig_lq/71e63a.webp
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/0a3/38a/36b/xbig_lq/71e63a.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash be3fffabaf0dce21e20038a6acca4114
cd75da52742891ea969556fbbfcb922252763fcd
c1419443755cb685e9db22ff39caba5a4501d6428416f6208027dfa100e776d1
GET /live/0a3/38a/36b/xbig_lq/71e63a.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 18418
last-modified: Fri, 03 Feb 2023 17:16:00 GMT
etag: "63dd4150-47f2"
expires: Fri, 10 Feb 2023 17:16:01 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 285
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf91b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/153/2b7/xbig_lq/fd9361.webp
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/0a3/153/2b7/xbig_lq/fd9361.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6bc54cb43aaf1b55465fbe5e0b2020a3
fa7d5e4be2258213c60970f9e56dd0d6da168654
f11879fe7e46458d8f4f0299338f2fb3798e6ec8f192b4698a330110dc74063d
GET /live/0a3/153/2b7/xbig_lq/fd9361.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 15336
last-modified: Fri, 03 Feb 2023 17:19:30 GMT
etag: "63dd4222-3be8"
expires: Fri, 10 Feb 2023 17:19:42 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 66
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf97b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a0/015/350/xbig_lq/978260.webp
195.85.23.226200 OK 7.3 kB URL HTTP/2 i.bcicdn.com/live/0a0/015/350/xbig_lq/978260.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 131a000cc397dd487e07c390fbf3e91e
c04dad359bd0381b4677d9c8f8addb2520e22e01
f9ff9d794d28de35bbbe4dec2c6cec6f7cfeccbebbea85b7f312b48129ab0e51
GET /live/0a0/015/350/xbig_lq/978260.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7264
last-modified: Fri, 03 Feb 2023 17:19:55 GMT
etag: "63dd423b-1c60"
expires: Fri, 10 Feb 2023 17:19:56 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 52
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bfa1b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/2d3/1a1/xbig_lq/952fe7.webp
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/0a1/2d3/1a1/xbig_lq/952fe7.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 840769600e65b5de138c36d7b717001c
8221ef9ef2746bdefe08fc640c7928ab9fcdf069
60bafa13a19fbff1cb6ca4cec957d97e416027132639bc8f1b1e3961637c562f
GET /live/0a1/2d3/1a1/xbig_lq/952fe7.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 18438
last-modified: Fri, 03 Feb 2023 17:20:03 GMT
etag: "63dd4243-4806"
expires: Fri, 10 Feb 2023 17:20:17 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf96b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/221/21d/xbig_lq/00c0a3.webp
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/0a1/221/21d/xbig_lq/00c0a3.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cf411be88423ed7159cb1eca2ab72162
aa68f41f6d5ec12ec32239dbe82127bdbaa77751
d192b54231f748bb3039a473ec44db216d95ac697bfa66a64c5fb036aef631c2
GET /live/0a1/221/21d/xbig_lq/00c0a3.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 17220
last-modified: Fri, 03 Feb 2023 16:55:25 GMT
etag: "63dd3c7d-4344"
expires: Fri, 10 Feb 2023 16:55:26 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 1534
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf98b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06e/00d/20b/xbig_lq/d76904.webp
195.85.23.226200 OK 9.0 kB URL HTTP/2 i.bcicdn.com/live/06e/00d/20b/xbig_lq/d76904.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6bd0927f7204405e902d608eb208a52f
362b5866ed03eafd12a46bd4205baee2950c469f
ff0c0115a33ecf13df0c28fdcd1ae2f9f80eba1494a44db45d54ef1d08119751
GET /live/06e/00d/20b/xbig_lq/d76904.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 8978
last-modified: Fri, 03 Feb 2023 17:13:07 GMT
etag: "63dd40a3-2312"
expires: Fri, 10 Feb 2023 17:13:08 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 472
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf9db4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09f/180/331/xbig_lq/ac3dfc.webp
195.85.23.226200 OK 10 kB URL HTTP/2 i.bcicdn.com/live/09f/180/331/xbig_lq/ac3dfc.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 019466dce88d2b42edb31bb89a6a1b98
a51e0ed80fa0740d6b7c2ca726925c9db6067a0f
134dbf8b5e90eb1997029c869a57a9de7c226d6524a9f54b0f69f5c2e6a27f75
GET /live/09f/180/331/xbig_lq/ac3dfc.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 10260
last-modified: Fri, 03 Feb 2023 17:18:23 GMT
etag: "63dd41df-2814"
expires: Fri, 10 Feb 2023 17:18:25 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 143
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf9eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/093/258/0f7/xbig_lq/9726ff.webp
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/093/258/0f7/xbig_lq/9726ff.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 81d0746ad853074be939cfad4bd80656
5d8ac95b68ec48b8d0a10e20e185f3efd44db46f
55be58dd27549ff8fa35cbb300a19531b4be6c20f93f51b8e73d88c7582b4c0b
GET /live/093/258/0f7/xbig_lq/9726ff.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 15424
last-modified: Fri, 03 Feb 2023 17:19:43 GMT
etag: "63dd422f-3c40"
expires: Fri, 10 Feb 2023 17:19:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 66
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bfa2b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/097/164/1cf/xbig_lq/9d9c0c.webp
195.85.23.226200 OK 7.6 kB URL HTTP/2 i.bcicdn.com/live/097/164/1cf/xbig_lq/9d9c0c.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 64b4c29a5afc7bfbf236acb395bae661
5425a6572f7eeaae4c7e21d5f2c19f8f537538ac
0b7bd0177cbc7915c165c17f0a451b702679cab98ce11cdcfba83bb2ca0e51c6
GET /live/097/164/1cf/xbig_lq/9d9c0c.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7632
last-modified: Fri, 03 Feb 2023 17:16:08 GMT
etag: "63dd4158-1dd0"
expires: Fri, 10 Feb 2023 17:16:10 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 283
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bfa4b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/042/283/08a/xbig_lq/907fba.webp
195.85.23.226200 OK 26 kB URL HTTP/2 i.bcicdn.com/live/042/283/08a/xbig_lq/907fba.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d53a9452c90b5727c11b9b10adf62199
710ebfcd9748ef2e1c2c9baf42cb77a0c89723ca
0966265e5dd5524a7285377ce4937c96adc4b0d1c9546c364e2b4023fa99f7a3
GET /live/042/283/08a/xbig_lq/907fba.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 26010
last-modified: Fri, 03 Feb 2023 17:17:30 GMT
etag: "63dd41aa-659a"
expires: Fri, 10 Feb 2023 17:17:31 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf9ab4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/048/066/21f/xbig_lq/a7ef3a.webp
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/048/066/21f/xbig_lq/a7ef3a.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 973a7f5f7251ada7fcc32bca4979ae90
b49fcbd3c0bee7c8d751c1a643b78e146196015a
8f719181241605167d0c8248ef6bab30fa82ecf905eeeb1fed178eb3fb24c65f
GET /live/048/066/21f/xbig_lq/a7ef3a.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 16556
last-modified: Fri, 03 Feb 2023 17:15:14 GMT
etag: "63dd4122-40ac"
expires: Fri, 10 Feb 2023 17:15:20 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 332
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf9fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/062/03f/3cb/xbig_lq/9be6b0.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/062/03f/3cb/xbig_lq/9be6b0.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4eeb1e1c865ccf07b3fa034b7942ff76
073c2802d4e933cc8a545b5c3c875310437fcace
13e46d371f46f64f54259763b0443a50aa1f1ea69fab86e6b5ae9c46d74b33bb
GET /live/062/03f/3cb/xbig_lq/9be6b0.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13508
last-modified: Fri, 03 Feb 2023 17:20:24 GMT
etag: "63dd4258-34c4"
expires: Fri, 10 Feb 2023 17:20:24 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 30
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bfa3b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06c/05f/2b6/xbig_lq/f96248.webp
195.85.23.226200 OK 9.9 kB URL HTTP/2 i.bcicdn.com/live/06c/05f/2b6/xbig_lq/f96248.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d8d03f071ca60070f32238671d5a6b90
b661946670d3bfa9da7827e5ea5ff2607b9c16c9
d58d6aaf244acdd18a6f0fece8d29e20f3077be181b246c6cc6a27508e11a069
GET /live/06c/05f/2b6/xbig_lq/f96248.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 9866
last-modified: Fri, 03 Feb 2023 17:18:36 GMT
etag: "63dd41ec-268a"
expires: Fri, 10 Feb 2023 17:18:44 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 123
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728cfaab4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07b/281/055/xbig_lq/b6d491.webp
195.85.23.226200 OK 8.8 kB URL HTTP/2 i.bcicdn.com/live/07b/281/055/xbig_lq/b6d491.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d4476b12bbcbcb525479a19fa0bc67d7
c50196c1e3bfe81833fa87ef2f5a6ec95777137a
d073b400d8408b32fce0ab91abd04b12eb7fe020506f5053e33319a673754f39
GET /live/07b/281/055/xbig_lq/b6d491.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 8786
last-modified: Fri, 03 Feb 2023 17:17:36 GMT
etag: "63dd41b0-2252"
expires: Fri, 10 Feb 2023 17:17:37 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728cfabb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/391/292/xbig_lq/c82677.webp
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/0a3/391/292/xbig_lq/c82677.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c76c2f1558b29021c9d1d185eac6bf51
e19f23056cba277e2f71ef365d24dc1c92f7d536
0e4d3414a2b0cb41172fc03d7cf20906905a336772d3b844b5c769f33d4ec098
GET /live/0a3/391/292/xbig_lq/c82677.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 10990
last-modified: Fri, 03 Feb 2023 16:31:29 GMT
etag: "63dd36e1-2aee"
expires: Fri, 10 Feb 2023 16:31:30 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 2963
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728dfc1b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09f/0e9/0d2/xbig_lq/b6d491.webp
195.85.23.226200 OK 7.3 kB URL HTTP/2 i.bcicdn.com/live/09f/0e9/0d2/xbig_lq/b6d491.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d71238a1fd3b9a3f842ce163cb01a1fa
0cfe2f27c24c708181d907f9f8fa47c1744b5d7f
51b054f5f7958c25f13f8bcc6f8fcbd46dbd1b60cef57595eb0148a13d910e44
GET /live/09f/0e9/0d2/xbig_lq/b6d491.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7312
last-modified: Fri, 03 Feb 2023 17:17:36 GMT
etag: "63dd41b0-1c90"
expires: Fri, 10 Feb 2023 17:17:37 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728dfc6b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07d/082/3ad/xbig_lq/ef083d.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/07d/082/3ad/xbig_lq/ef083d.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3e1103dfb8fccd7bafc0771258008b71
3b2a69e4dbdcc8b53a700da9c87f5dc66e9220a3
5de29f4d82ea5613ea671b2be7a49c06974b853533e45930cd570db8112fbf7c
GET /live/07d/082/3ad/xbig_lq/ef083d.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 14378
last-modified: Fri, 03 Feb 2023 17:17:46 GMT
etag: "63dd41ba-382a"
expires: Fri, 10 Feb 2023 17:17:47 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 180
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728dfc7b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/039/226/3a3/xbig_lq/121366.webp
195.85.23.226200 OK 26 kB URL HTTP/2 i.bcicdn.com/live/039/226/3a3/xbig_lq/121366.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5d83f4849eca5cbd2d0a3e251829d50a
f91d4ecc3830fd8dedce9ecb99f64c257c3b1683
506063dbd2ff451597e37cd0d321289428edef2ffef7a3fe94a608ff10cf6afe
GET /live/039/226/3a3/xbig_lq/121366.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 26408
last-modified: Fri, 03 Feb 2023 17:20:34 GMT
etag: "63dd4262-6728"
expires: Fri, 10 Feb 2023 17:20:35 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 15
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bfa6b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/099/0ba/37f/xbig_lq/cbd882.webp
195.85.23.226200 OK 32 kB URL HTTP/2 i.bcicdn.com/live/099/0ba/37f/xbig_lq/cbd882.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 864a9186eb2e558235794627b51be797
e0d1d029937777e89e3db67b2db6f3b7bcac5332
5ba2b7b11548ca22c32aef12023a581152430f09ddaee11815ee2f260c493f78
GET /live/099/0ba/37f/xbig_lq/cbd882.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 32096
last-modified: Fri, 03 Feb 2023 17:19:14 GMT
etag: "63dd4212-7d60"
expires: Fri, 10 Feb 2023 17:19:24 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728dfc4b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/026/1ac/07f/xbig_lq/473c6d.webp
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/026/1ac/07f/xbig_lq/473c6d.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 61be2312ccd784c446bcf54e1b946ae6
036142f6b4d6ec6277815e0c9585acae39ca1b95
2da22695c10563a2fb1a66a4a76651c5c6abf08558b49a4a9327f0081bcb36f8
GET /live/026/1ac/07f/xbig_lq/473c6d.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 18270
last-modified: Fri, 03 Feb 2023 17:19:39 GMT
etag: "63dd422b-475e"
expires: Fri, 10 Feb 2023 17:19:42 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 66
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728dfc8b4e8-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19316
Expires: Fri, 03 Feb 2023 22:42:56 GMT
Date: Fri, 03 Feb 2023 17:21:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19316
Expires: Fri, 03 Feb 2023 22:42:56 GMT
Date: Fri, 03 Feb 2023 17:21:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19316
Expires: Fri, 03 Feb 2023 22:42:56 GMT
Date: Fri, 03 Feb 2023 17:21:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19316
Expires: Fri, 03 Feb 2023 22:42:56 GMT
Date: Fri, 03 Feb 2023 17:21:00 GMT
Connection: keep-alive
i.bcicdn.com/live/069/252/0ed/xbig_lq/9726ff.webp
195.85.23.226200 OK 7.8 kB URL HTTP/2 i.bcicdn.com/live/069/252/0ed/xbig_lq/9726ff.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c6ed4d57113dfc1c91ff7a648f041a6c
cf9aa35e7aa96ec3a7b8c8ecaa89429b118dc696
23772ba1a11a09e794d259d65f32942158ece61db72c1a2897e1846fd7838178
GET /live/069/252/0ed/xbig_lq/9726ff.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7780
last-modified: Fri, 03 Feb 2023 17:19:44 GMT
etag: "63dd4230-1e64"
expires: Fri, 10 Feb 2023 17:19:45 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 66
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7292844b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06d/070/0a7/xbig_lq/262daf.webp
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/06d/070/0a7/xbig_lq/262daf.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c3c0d1f466d533c6009f92d0c2a636e7
d9588f97bbd757e9388ade8e4c4f4b016267462f
b2a6df4d6863ffa29d6a283aedbdfe9c5144214803393285c522a9b9148e5292
GET /live/06d/070/0a7/xbig_lq/262daf.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 10854
last-modified: Fri, 03 Feb 2023 17:19:00 GMT
etag: "63dd4204-2a66"
expires: Fri, 10 Feb 2023 17:19:23 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729284cb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06b/15e/27f/xbig_lq/acfb90.webp
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/06b/15e/27f/xbig_lq/acfb90.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0563ecc73ce7aee3437f1199e64fc5c8
bac9b38e36a1dba73bf2900eebfba0a20b573b6e
90fc9661d33c2a4823aaf5e8e5643a5df5ed42c5ac3d13787aaf60d42c562765
GET /live/06b/15e/27f/xbig_lq/acfb90.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11858
last-modified: Fri, 03 Feb 2023 17:19:52 GMT
etag: "63dd4238-2e52"
expires: Fri, 10 Feb 2023 17:19:53 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 52
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7292848b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/037/2bf/1c9/xbig_lq/def781.webp
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/037/2bf/1c9/xbig_lq/def781.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d6fd97cb15057e2104f2bf614379e3b2
55fec002798ee08b29f40b7084f84f9727c0d7c3
f625768be16118ff34363f633e61d169c6a2c1fb65544006bfa307054dd3ce7e
GET /live/037/2bf/1c9/xbig_lq/def781.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 19788
last-modified: Fri, 03 Feb 2023 17:20:18 GMT
etag: "63dd4252-4d4c"
expires: Fri, 10 Feb 2023 17:20:25 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 30
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7292845b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/053/3db/3e6/xbig_lq/f9ff44.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/053/3db/3e6/xbig_lq/f9ff44.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 611c7cc2445667e38596c60fd540403d
08760f673d7f126b2d0a11969ec3f75c43bb3f02
43d4fe71c76acbe48240e8e247be409c0067f3afc2107cdccd81a09b62e3182f
GET /live/053/3db/3e6/xbig_lq/f9ff44.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13588
last-modified: Fri, 03 Feb 2023 17:17:32 GMT
etag: "63dd41ac-3514"
expires: Fri, 10 Feb 2023 17:17:33 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729284bb4e8-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.bcicdn.com/live/057/156/039/xbig_lq/679405.webp
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/057/156/039/xbig_lq/679405.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ebc28f618be04da0d63d1a5cf513c226
8f31b23ae9d33c90a2fe08797c3699d2e8e7181f
ac9401870c7332433532900cbe886d8407a76340a938a7080a5e4e617c8065a5
GET /live/057/156/039/xbig_lq/679405.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 11918
last-modified: Fri, 03 Feb 2023 17:17:02 GMT
etag: "63dd418e-2e8e"
expires: Fri, 10 Feb 2023 17:17:05 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 230
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7292842b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/0ba/371/xbig_lq/601b4f.webp
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/0a1/0ba/371/xbig_lq/601b4f.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2730e973a0de4abe2b3bb035bdb19c51
0d58fd6d940f0885240268d2b5892456f044deb2
76cc55fa7ed3bf7839b0bf0226a863f781682d755de0d291335fca7cdbe372f1
GET /live/0a1/0ba/371/xbig_lq/601b4f.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 10562
last-modified: Fri, 03 Feb 2023 17:16:55 GMT
etag: "63dd4187-2942"
expires: Fri, 10 Feb 2023 17:16:56 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 238
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729384eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a2/2eb/1c6/xbig_lq/8eedb3.webp
195.85.23.226200 OK 10 kB URL HTTP/2 i.bcicdn.com/live/0a2/2eb/1c6/xbig_lq/8eedb3.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6b79c61bd535cccc5e49c37e2bd713e0
22f10495952093e885307bb0a0c1eb5686f9c9b4
73a6128c84ebe8090ee93a891b6973325228b67c6876a87742611ff7a67c3ce8
GET /live/0a2/2eb/1c6/xbig_lq/8eedb3.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 10016
last-modified: Fri, 03 Feb 2023 17:17:04 GMT
etag: "63dd4190-2720"
expires: Fri, 10 Feb 2023 17:17:06 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 230
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293852b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09c/31d/015/xbig_lq/479cdf.webp
195.85.23.226200 OK 9.1 kB URL HTTP/2 i.bcicdn.com/live/09c/31d/015/xbig_lq/479cdf.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 73c389eb55acd7acfc743fd36b797505
2e2c922fbe4ac2fdb7ac3353969a59bdfdbebd9a
8d42461163008389e9db8866bdf5131f61d3198035b87e63a3ccd710edf8559a
GET /live/09c/31d/015/xbig_lq/479cdf.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 9062
last-modified: Fri, 03 Feb 2023 17:18:55 GMT
etag: "63dd41ff-2366"
expires: Fri, 10 Feb 2023 17:19:18 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729385eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/094/3e6/330/xbig_lq/f040c3.webp
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/094/3e6/330/xbig_lq/f040c3.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a69ed9e4bc20e9d629eba739dc762bf8
6881601b657d8954cdad94d6ba3288f6c09b900b
2923d7edd5beace1a27d268e659af2da8aea7e41c7dafc2cc3ff9716eb409a0d
GET /live/094/3e6/330/xbig_lq/f040c3.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 17742
last-modified: Fri, 03 Feb 2023 17:17:22 GMT
etag: "63dd41a2-454e"
expires: Fri, 10 Feb 2023 17:17:24 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 205
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293856b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/000/1cb/273/xbig_lq/b4188f.webp
195.85.23.226200 OK 24 kB URL HTTP/2 i.bcicdn.com/live/000/1cb/273/xbig_lq/b4188f.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f96a41a3f02ffb519f6300924fe35412
76b886d837c69719d7e070a05de79fed642e4201
ac12e28c2751b8822e1a00f3e5c15ed4e0591222315bf99028e355ca5726845b
GET /live/000/1cb/273/xbig_lq/b4188f.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 24472
last-modified: Fri, 03 Feb 2023 17:19:33 GMT
etag: "63dd4225-5f98"
expires: Fri, 10 Feb 2023 17:19:36 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 66
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7292846b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a2/3a3/3b5/xbig_lq/8df3cd.webp
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/0a2/3a3/3b5/xbig_lq/8df3cd.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 08c6d717966de1ea833d26f34b99a112
6325415e52fb3a2437f7980c8545c42ceb394ebc
1b6233fb407678e597a1b45bcf507009445f6c0cab89e4ba5a28632b470ed4b5
GET /live/0a2/3a3/3b5/xbig_lq/8df3cd.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 18054
last-modified: Fri, 03 Feb 2023 17:16:49 GMT
etag: "63dd4181-4686"
expires: Fri, 10 Feb 2023 17:16:51 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 239
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293861b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/061/2e9/082/xbig_lq/acfb90.webp
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/061/2e9/082/xbig_lq/acfb90.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fa5dde202a9bef89c8085beef18a242f
cd2554116bcef1d1eb9cbd084ac2403e736134b1
7b78a5382dfcc7838f3de0cf58ebf01d4db4e419c7f1b609bdde5798099c3463
GET /live/061/2e9/082/xbig_lq/acfb90.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 12916
last-modified: Fri, 03 Feb 2023 17:19:52 GMT
etag: "63dd4238-3274"
expires: Fri, 10 Feb 2023 17:19:53 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 57
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293850b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/images/frontend/free_tokens/navbar_panel/1x/title/no.png
195.85.23.226200 OK 1.1 kB URL HTTP/2 i.bcicdn.com/images/frontend/free_tokens/navbar_panel/1x/title/no.png
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 80 x 58, 8-bit colormap, non-interlaced\012- data
Hash 533fabde7633feb1fc89ec1cf97ade51
39d3d45d62a36919f5f80577b555528007b216a7
4258268716f85951c4208f0313082cb4e2f95c4d27608faae7be36647a36ad65
GET /images/frontend/free_tokens/navbar_panel/1x/title/no.png HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/png
content-length: 1121
last-modified: Wed, 19 May 2021 10:11:38 GMT
etag: "60a4e45a-461"
expires: Thu, 16 Feb 2023 13:48:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 1481575
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293869b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/070/1d6/2b7/12cadb14c1dbbe70eb6c994d02f127cb_thumb_medium.jpg
195.85.23.226200 OK 8.4 kB URL HTTP/2 i.bcicdn.com/070/1d6/2b7/12cadb14c1dbbe70eb6c994d02f127cb_thumb_medium.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 232x174, components 3\012- data
Hash 0a6f99fd246b154451857f382ac159eb
ea60d67c031a89a46f6cec401e46a89fd60469e9
3ee459b712f551299328c54974662d8f678f7501cda7a90625bd76cc0a9eb563
GET /070/1d6/2b7/12cadb14c1dbbe70eb6c994d02f127cb_thumb_medium.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/jpeg
content-length: 8385
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "63931d6a-20c1"
expires: Wed, 01 Feb 2023 22:53:28 GMT
last-modified: Fri, 09 Dec 2022 11:35:06 GMT
x-o3-p6: EXPIRED
cf-cache-status: HIT
age: 415037
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293868b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/015/338/269/xbig_lq/b36390.webp
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/015/338/269/xbig_lq/b36390.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ef6efff2ca1df7a1b74148ba886c7e22
2cd704bac12ad6aebf5386e2fff7d9abae020190
647135114a21f3dca6ebd9e5de64877afba24a56aaceb29dddfdb67be0d14ae0
GET /live/015/338/269/xbig_lq/b36390.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 20024
last-modified: Fri, 03 Feb 2023 17:16:36 GMT
etag: "63dd4174-4e38"
expires: Fri, 10 Feb 2023 17:16:38 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 258
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293854b4e8-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:28:50 GMT
age: 67930
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i.bcicdn.com/i18n-min/1675397425/messages/no.js
195.85.23.226200 OK 66 kB URL HTTP/2 i.bcicdn.com/i18n-min/1675397425/messages/no.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5b668a8dde426fe5267e33cfa24714b0
d0c2f64e99ecf8330d4e988e150a7eb4e894a879
4bd95f2b9a66eb9353e4695ae32f74819240722aeb39383e6248d733c748f82e
GET /i18n-min/1675397425/messages/no.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 04:10:44 GMT
etag: W/"63dc8944-330e4"
expires: Sun, 05 Mar 2023 04:11:17 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 47320
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf65b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/203/16a/xbig_lq/36d28d.webp
195.85.23.226200 OK 9.5 kB URL HTTP/2 i.bcicdn.com/live/0a1/203/16a/xbig_lq/36d28d.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4e1aebac9f115eea0772219c656d5c09
6e482ba6765ab370851e8d8f31f31bd9995da19e
185f8e8f7fb8b2b2ea07072446f841cfc875c19836bb197a48516d561d14c7a9
GET /live/0a1/203/16a/xbig_lq/36d28d.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 9524
last-modified: Fri, 03 Feb 2023 17:17:51 GMT
etag: "63dd41bf-2534"
expires: Fri, 10 Feb 2023 17:17:57 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 178
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729385ab4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07d/083/108/xbig_lq/a6f9dd.webp
195.85.23.226200 OK 7.0 kB URL HTTP/2 i.bcicdn.com/live/07d/083/108/xbig_lq/a6f9dd.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b2b8d2ca8248d89e1a7d869352bbc097
5a23cfebdf60601036a2566fa77e2203c7c33c0c
68e1505929cc8e8a9d39f62552572ec46cb3bfec6689a7720e5bc6ca0cc07471
GET /live/07d/083/108/xbig_lq/a6f9dd.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 7044
last-modified: Fri, 03 Feb 2023 17:18:54 GMT
etag: "63dd41fe-1b84"
expires: Fri, 10 Feb 2023 17:18:55 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 122
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293863b4e8-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F999ec9b9-96eb-4927-a0d5-3e4a89cca4ad.png
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F999ec9b9-96eb-4927-a0d5-3e4a89cca4ad.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24261df857fd20898ed41615ff44efd2
5ebaae7786e95f6daf7e837ce741f96611a64335
b947696fced12e35736691fb27c5cc4ddb28e4b4781cfbb69b8b4011b84aca5b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F999ec9b9-96eb-4927-a0d5-3e4a89cca4ad.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10971
x-amzn-requestid: 87d6a618-4ddf-4e40-aaeb-f6e38c274c23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: feH0jHisoAMFgpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d58683-2de413f446505ec44ab2a390;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 20:33:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bSK5RmNEDZxTn_J6zk6eGwhUexiPYxHRnvs7h0DtRM-fXMJ1QsmtHw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 09:43:13 GMT
age: 27467
etag: "5ebaae7786e95f6daf7e837ce741f96611a64335"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/17f/322/xbig_lq/f5f8d4.webp
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/0a1/17f/322/xbig_lq/f5f8d4.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ac831c6482af7ea26ff6dafe6ecd5b62
da32ab830ffbeeba2649c43cd39fb02d948a807a
d39f96c1b1a7a06f917d4b54a911d3c15f33c124fdf4eb23fddd3b8205f95a57
GET /live/0a1/17f/322/xbig_lq/f5f8d4.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 13864
last-modified: Fri, 03 Feb 2023 17:17:39 GMT
etag: "63dd41b3-3628"
expires: Fri, 10 Feb 2023 17:17:40 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 198
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293855b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/090/133/059/xbig_lq/c5426c.webp
195.85.23.226200 OK 9.7 kB URL HTTP/2 i.bcicdn.com/live/090/133/059/xbig_lq/c5426c.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 37447aac48100ccc4092dbea2847b47d
44a6b480512bfbbbcd3773f584a3fa3607c2625f
efdef1b1e71002c97c934629919165be8303d8409e547742f69fbc402d1edac9
GET /live/090/133/059/xbig_lq/c5426c.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 9654
last-modified: Fri, 03 Feb 2023 17:17:00 GMT
etag: "63dd418c-25b6"
expires: Fri, 10 Feb 2023 17:17:05 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 230
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7292849b4e8-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 00:25:04 GMT
age: 60956
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i.bcicdn.com/live/096/11b/2f1/xbig_lq/886bec.webp
195.85.23.226200 OK 5.0 kB URL HTTP/2 i.bcicdn.com/live/096/11b/2f1/xbig_lq/886bec.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d4d743842c9263a7e8d5a68e78b55b91
7ca036e190dc572961c44ee6dae7297a71ae8615
192b74c94637e651d60045a7d15090dd027e1b19966bfe27730fb31fb70e4004
GET /live/096/11b/2f1/xbig_lq/886bec.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 5010
last-modified: Fri, 03 Feb 2023 17:19:14 GMT
etag: "63dd4212-1392"
expires: Fri, 10 Feb 2023 17:19:26 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 88
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729385cb4e8-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aTs6L8dJENFRdtBn7ggAbY5yaYRAzSY2B0bmElV4YNPrJg-KRDAyNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 70444
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 04:53:21 GMT
age: 44859
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G0R-0w9HtLB5OXb-w-RyR9QCnrddkS29FqF_GeAQa1CRWkqaUJwQoA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:27:53 GMT
age: 67987
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-10874655-24
172.217.21.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-10874655-24
IP 172.217.21.168:0
File type ASCII text, with very long lines (1759)
Hash 302375e2aa0d1e0bdc66651dee7bf772
672911fcf1b98e91df61ee0619876db2e0b051bb
e8b517d6efc135dca4f9d39ee001257324d044509bfe737cc31fe95947f5b99b
GET /gtag/js?id=UA-10874655-24 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 17:21:00 GMT
expires: Fri, 03 Feb 2023 17:21:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44860
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9c45ea25709afbea416f215ee34611b0
117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed
7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 685f365a7a99e3e08a4c254a6397546c
856223b7b519a642beb380d922a3eeb16309818e
e86d066489ff8ce499ae78c583e896bbee3c26eaed5e9c86686465553bd1afd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E86D066489FF8CE499AE78C583E896BBEE3C26EAED5E9C86686465553BD1AFD8"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7722
Expires: Fri, 03 Feb 2023 19:29:42 GMT
Date: Fri, 03 Feb 2023 17:21:00 GMT
Connection: keep-alive
ts.cvastico.com/in/2459/?source=249121095&site_id=93317&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=93317&mo=&ve=&ad_tags=&p=http%3A%2F%2Fthatpervert.com%2Ftag%2Fchinpokonyan&sid=2442&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.257375
62.122.173.28302 Found 0 B URL HTTP/2 ts.cvastico.com/in/2459/?source=249121095&site_id=93317&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=93317&mo=&ve=&ad_tags=&p=http%3A%2F%2Fthatpervert.com%2Ftag%2Fchinpokonyan&sid=2442&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.257375
IP 62.122.173.28:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/2459/?source=249121095&site_id=93317&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=93317&mo=&ve=&ad_tags=&p=http%3A%2F%2Fthatpervert.com%2Ftag%2Fchinpokonyan&sid=2442&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.257375 HTTP/1.1
Host: ts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://thatpervert.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://twinrdsyn.com/link.engine?z=55102&guid=93f2395e-1b51-4bbd-8d26-19ab372d0df3&tid=249121095
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 2459.853=1; expires=Sat, 04 Feb 2023 17:21:00 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/l8HjmKKYXz4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/l8HjmKKYXz4
IP 142.250.74.131:0
Hash c235d1a09b326150404c46c70a0921cc
2110d0ade26326b8ebc39ee474a75f8ce4e1da74
eb5ce159c3898d3d6e2dc91fac2c957f13e5a7350e30b9805a377c22e4a6d58f
POST /s/gts1p5/l8HjmKKYXz4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:21:00 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.bcicdn.com/js-min/2ks9K/244c.js
195.85.23.226200 OK 7.1 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/244c.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (6095), with no line terminators
Hash 596f8d888b34beb042eb01a99cd2f924
59429317fe4e3ad985c3e9a9ee9f2a8569c5686c
be76644bb53380849ba6991b0e46490660975fe9c248858a83a43e40f35e8234
GET /js-min/2ks9K/244c.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-17cf"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21888
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72a9a1db4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/682cb.js
195.85.23.226200 OK 29 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/682cb.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (3292), with no line terminators
Hash fe13e97dcfc1ea74fb8aac79e135a230
b212c5f21a0a07c5bf8e943dc7542ae9b882a1d7
ee73cf4ced207c650ddeb012da45b8448c18f4696f9eaac17905d7a0177f76ae
GET /js-min/2ks9K/682cb.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-cdc"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72aaa3cb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/8adcd.js
195.85.23.226200 OK 35 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/8adcd.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (2130), with no line terminators
Hash beda6e5edf1b4e7a84738cc17375f8ce
ac55986169faac08a29d900b2d7516ff5650d5e8
47e273ad1588bf0ea85935ea9935020292be7c23328134b1aa22ebe33a861366
GET /js-min/2ks9K/8adcd.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-852"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72aaa25b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/c62c6.js
195.85.23.226200 OK 24 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/c62c6.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (4891), with no line terminators
Hash b789d7bef398ef0dea072e3eb832bc65
393faf79fdce3b4d6e1326ce384e860c7870f950
2605697ee27adc7d221fa5d355b06978a3c8a9823708c055c9a03b176050d876
GET /js-min/2ks9K/c62c6.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-131b"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21888
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72aca68b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/promotions/free_tokens_ab_test/regular/default/european/straight/182x600/february/2023/no/10.svg
195.85.23.226200 OK 57 kB URL HTTP/2 i.bcicdn.com/promotions/free_tokens_ab_test/regular/default/european/straight/182x600/february/2023/no/10.svg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (62707)
Hash 1e1719f32b3d616aafbce6461387a89d
21ac4f65a7dee08445ee8a5d0c1dd7fadf303432
c0fd105ca5be9061969678b5406d4f91e2d0a6fac8e93bd1e5737b116f528326
GET /promotions/free_tokens_ab_test/regular/default/european/straight/182x600/february/2023/no/10.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Feb 2023 11:21:33 GMT
etag: W/"63da4b3d-11854"
expires: Fri, 03 Mar 2023 11:52:45 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 192495
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293866b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
twinrdsyn.com/link.engine?z=55102&guid=93f2395e-1b51-4bbd-8d26-19ab372d0df3&tid=249121095
172.66.41.6302 Found 1.3 kB URL HTTP/2 twinrdsyn.com/link.engine?z=55102&guid=93f2395e-1b51-4bbd-8d26-19ab372d0df3&tid=249121095
IP 172.66.41.6:0
Hash a0447b7e516ee563c8aef73d98091f7a
000a0cb9dce982c535716d6a675c852fbd2c455d
668dc86c07b6e94c957598c75dffe53d2b7324e7c10a83e9aebc1e77267a772c
GET /link.engine?z=55102&guid=93f2395e-1b51-4bbd-8d26-19ab372d0df3&tid=249121095 HTTP/1.1
Host: twinrdsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://thatpervert.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: text/html; charset=utf-8
location: https://twinrdsyn.com/Redirect.eng?MediaSegmentId=44647&dcid=3_ctx_1f62dabe-0ef7-454a-9dd3-4fab15c3011e&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=DVehoproWse9vFIvcp9K-Nq6l-3KIDLZ0xTEo7X7kA515cj6MjVbj0BfLIxZbFB_AMDJPTfK10PzoTsmADwsCGvoAPDrfcyk8_7l8v5nA52-VDxeZSZp3hx0Pp1o0oTQ28DoMwdMoQjU1S6Krwxy1YV8rx7IWYhTZtrM3HMewc1vSKY7M8bzCxcg_1tfXY2TndZzuDITse2O2SC5gI9K39o_irk66AKCDXoCz4S2TXAZuF8XIx7STe9GUHwk_Tn6xcet_nt_3GS9flU8_7-71U3NVAXY8QCspwXFX6f6SmRTooahfLf3PEY-N2CYZdzJ7GZtUpBAfE6O_-jOUIh9EzpsBUZ7fgNy-QvypSHnM1IFQyclKglJltfRCdQG6UK_ZAHaZ0RhrybelqDL2vX-rcQpnWXhZFYd_GQ5v3VjYFf65IDvZEXsJooARYNKXGTIoISQnV-lt3ZHdbvkNxoePW-ypWY547SJc_A_QCI1fDCV6Mh8nKbV4KTiT53LobmOT4uOamVxK8xLTE6Tz2MFWymUSvJGuWenL91Z1afqUGOucdX-3eVBdB8AHRs97SFou4fs4hx70iqHc4FlIagYdrWZ_lpl_9ZfhWrZObEQLB4iAkPsIP_cr7OHx_fZRASHrGg0RotWS9lAKCzuMTjp4Rv5unAU2QxC8aY6u9NsnqNZe0r4yDXFf12jAciEZvxXs2C0YRuT8zTDfndT68NBnHPh9CNUtLJauJ2srOWyjiUVVCsnN65A7DiEvriHys428uoBc9MuM6GQWagYGw3nxsXH0O3vrB37OnN7u95AwLpyURt8gqZzlUcdS0Kc0-qI0Sg9DW8d3w9QJl9enknHGRKhzt7VKzFr5WVDEon-Z5Nb5Z1WRCOl9YF6d_UcO6ri3vXV4gLCpTZsJyjhfaV7U5tLULhsi8-DNVDizBqrURA1&kw=&mw=1024&mh=768
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=ada53973-754f-4aaa-b3d6-84d16b431faa; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure
ISSH=690F51; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Fri, 03-Feb-2023 21:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"13951":[{"SId":"690F51","D":"23/2/3T9:21:0"}]}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[13951]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Thu, 03-Feb-2033 17:21:00 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cd72b3fa6b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/167a1.js
195.85.23.226200 OK 86 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/167a1.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (12682), with no line terminators
Hash aa54f5d0ed36ebcb14cb4e44951ca280
23e89acd3b4b0e5f8024c04d1bffef4fbc495312
edf945b280a778042f4d2a8f777cdcb74a681151c4c5a4d4c6cdb21208d566b4
GET /js-min/2ks9K/167a1.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-318a"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72ada8bb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/f9ah8.js
195.85.23.226200 OK 41 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/f9ah8.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (10851), with no line terminators
Hash 44a11e0d2ef833523727e96c087ce7f2
b553b0a98548b193c8fdcda12590f29538c81032
5a417224f3dc79661752bf5c6a354bef94c7ca7fc147fd4abab753b197730770
GET /js-min/2ks9K/f9ah8.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-2a63"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21888
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72cfd8cb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/7039t.js
195.85.23.226200 OK 88 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/7039t.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (48567), with no line terminators
Hash d6720e239a5ea39607eacad0b4deb5cd
527028aeb968017b81d4e2cd4f6e7e8cf589f6dd
6d32e1d1e965fe46c469c2f41ada8d7bcacde69ee64b7b0fdd4e6603b987d6ea
GET /js-min/2ks9K/7039t.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-bdb7"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72ada8ab4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/replace/10/arial/999/bnct_add1_v2.svg
195.85.23.226200 OK 21 kB URL HTTP/2 i.bcicdn.com/images/replace/10/arial/999/bnct_add1_v2.svg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (13717)
Hash 912a82c0c1cf8b49e2b7480f280a2fa3
7b7481068b10a58205456267c54d0f132c83ab44
c0dd5de8cdd480fe4a7ed51a3c76f9cfe1b048e77ffa08728fcf067d752ee247
GET /images/replace/10/arial/999/bnct_add1_v2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Mar 2022 11:31:04 GMT
etag: W/"6231ca78-35ac"
expires: Thu, 16 Feb 2023 13:47:23 GMT
cache-control: max-age=2592000
x-o1-css: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 1481593
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729386db4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
no.bongacams.com/images/sprite/bc/category.svg
195.85.23.95200 OK 16 kB URL HTTP/2 no.bongacams.com/images/sprite/bc/category.svg
IP 195.85.23.95:0
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (783), with no line terminators
Hash c86cf42cd136cbbd130f0696b26d6998
943015b7726f1de2f2bcdb4832ae5700c253ecf7
d22889355425ab14806834107a45734291be98fd7d0a373a1e61e8d0eb8e26a3
GET /images/sprite/bc/category.svg HTTP/1.1
Host: no.bongacams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no.bongacams.com/?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~
Connection: keep-alive
Cookie: __cf_bm=1Nhjy6ZgdSkRBdjAYASrrymaZ4sOOIwRaTZcLucYG8g-1675444859-0-AcQ834Tfoz49oe10L5I/qmAcdd4boSNNDem3JqGXjYnpmdvGVXKtvdrBBwaTZWQ/suB8qNepQ0RvVIwyaqMyXNI=; bonga20120608=a2008ba7a4f0d24def8aa079dead2b17; BONGAH_HIT=13f06627d03fb34c5b042913de2b3729%3A%3A191413%3A%3Ahttp%3A%2F%2Fpoweredby.jads.co%2F%3A%3A%3A%3A%3A%3A751666%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2023-02-03%2019%3A20%3A59; sg=295; warning18=%5B%22no_NO%22%5D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jan 2022 02:31:00 GMT
etag: W/"61df8ee4-30f"
expires: Sun, 05 Mar 2023 17:21:00 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 47840
vary: Accept-Encoding
server: cloudflare
cf-ray: 793cd72b0aafb515-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/images/replace/10/arial/999/bnct_add2.svg
195.85.23.226200 OK 58 kB URL HTTP/2 i.bcicdn.com/images/replace/10/arial/999/bnct_add2.svg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (10828)
Hash e335405f4168699db05ae3b32980a800
cd5123aef38de22e413155a3a9b785dfd50ab4a1
2a0b78bfc15cba02cf31ce3e912f4dabe7b815c415d9d89cab17daf0278a4a63
GET /images/replace/10/arial/999/bnct_add2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Jun 2021 09:45:21 GMT
etag: W/"60c08db1-2a63"
expires: Mon, 13 Feb 2023 18:17:28 GMT
cache-control: max-age=2592000
x-o1-css: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 1481593
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293870b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/558hs.js
195.85.23.226200 OK 22 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/558hs.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (454), with no line terminators
Hash 2c95669c1f9edff940c6c4fb06938f8c
549c2812dbedda6b2727d392508817d56d92e182
2af2d149570286710133efe62e93b3b5a90e1ecd830e39486458f452fa0efd75
GET /js-min/2ks9K/558hs.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-1c6"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72aea9bb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/afee6.js
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/afee6.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (975), with no line terminators
Hash 2e521a0d1a372896e77492daac520d77
d06783982372789dfe4b52068afbfaa052eeffbe
1f1ac46741747ff79f24548095195e1c103e6a9e203b914ef996f25223b2d1a6
GET /js-min/2ks9K/afee6.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-3cf"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72b0ab6b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/a54hi.js
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/a54hi.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (1773), with no line terminators
Hash 2fef221dff9eed3437156af8c6ca3c12
511ae7191986da660a8fd73193bf26d3e30b83a3
06fc7602cd5fad3ff57f4dfded6f82ef56555ba827553ae847f59b3fd0ce54f6
GET /js-min/2ks9K/a54hi.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-6ed"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72aeaa1b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/375/114/xbig_lq/8df3cd.jpg
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/0a3/375/114/xbig_lq/8df3cd.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash ce31b1490678bd33e1200aba1c7d9c4e
c5c96c97ac91df077dd072b5bddc1be252fc913f
c5dc1da5567b91913b7877d178f27205dc7d26636e578d587f494dd1e19eb4bf
GET /live/0a3/375/114/xbig_lq/8df3cd.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 13761
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd417e-35c1"
expires: Fri, 10 Feb 2023 17:16:49 GMT
last-modified: Fri, 03 Feb 2023 17:16:46 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7324d5cb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/096/1e7/3e0/xbig_lq/1afe0f.jpg
195.85.23.226200 OK 10 kB URL HTTP/2 i.bcicdn.com/live/096/1e7/3e0/xbig_lq/1afe0f.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash e967677ea9a153f278c46e19c7c55439
dd3e52ff5bd80e67fd99f5bf8869f8eb0e64de3e
906239968dc6bb8807e79fbb8d9788e713f1b7ca8215d43301e04aff0f06b35c
GET /live/096/1e7/3e0/xbig_lq/1afe0f.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 10008
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd416e-2718"
expires: Fri, 10 Feb 2023 17:16:31 GMT
last-modified: Fri, 03 Feb 2023 17:16:30 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 230
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7325d65b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/ce1ei.js
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/ce1ei.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (713), with no line terminators
Hash cdca81b6ef8266f2886e7bf5e36c5eaf
333ddc25ebb7d0192cb323589a2c48063ee9360a
f1a8f260d86866edc4e7425eb3053a4831d5388ee3719fb560c53ade888df7db
GET /js-min/2ks9K/ce1ei.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-2c9"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72afab5b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/067/019/0b5/xbig_lq/b1f755.jpg
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/067/019/0b5/xbig_lq/b1f755.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash a2d22b4515831e0b956aee77517da1d0
fdbe021a15ee61f46ec85bc60b3e19c2d6c6eca5
7bc8780f501733d8fa55d0f5125ff18d255d37a9629c3b615a70c3b3ef5feaf3
GET /live/067/019/0b5/xbig_lq/b1f755.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16364
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41d8-3fec"
expires: Fri, 10 Feb 2023 17:18:19 GMT
last-modified: Fri, 03 Feb 2023 17:18:16 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 142
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7325d86b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/8ec0.js
195.85.23.226200 OK 27 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/8ec0.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (3827), with no line terminators
Hash 3e8aa053657a22f2ce06952015bc6c56
f9a5e6ced204ae3b2b22f9e0085750731c934233
9b541af26de2f9c435bc1ff3774a31927087feede968f07b93280841264c09fb
GET /js-min/2ks9K/8ec0.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-ef3"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72afaa7b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/823eq.js
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/823eq.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (3775), with no line terminators
Hash 35673b66b6a3cbe9ab5a2b0e7988c9de
5a0b39e594603af66d880134cab4f33631920f14
46b0d275632c4c276efe857bba11dfcb61433817cf0e1242e5ce07143d8b3ecd
GET /js-min/2ks9K/823eq.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-ebf"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72afaa5b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/196/318/xbig_lq/5e40d6.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/0a3/196/318/xbig_lq/5e40d6.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 3e52345f892eac956b953254be8d40eb
405a7c824f7c62bbdac9a8f54ed5f60db23e08f7
12e590e27250ff3a450f7bbaec83832d1f78e8dab841fd5118eb7e3713a360ca
GET /live/0a3/196/318/xbig_lq/5e40d6.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11782
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd411c-2e06"
expires: Fri, 10 Feb 2023 17:15:09 GMT
last-modified: Fri, 03 Feb 2023 17:15:08 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 323
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7326d94b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a4/09c/2c1/xbig_lq/11a3a8.jpg
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/0a4/09c/2c1/xbig_lq/11a3a8.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 8ac4bd41b90bce7597450b6eea6113ce
f80f8a2b94b3349c621db7df61fc23cd5456de69
ef0507ff86f22df85fbba8c26595300557c398167e620d77487217cf7b8d0f0d
GET /live/0a4/09c/2c1/xbig_lq/11a3a8.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 17079
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41f0-42b7"
expires: Fri, 10 Feb 2023 17:18:42 GMT
last-modified: Fri, 03 Feb 2023 17:18:40 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 129
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7327da8b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/03c/2b4/3a9/xbig_lq/e2b233.jpg
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/03c/2b4/3a9/xbig_lq/e2b233.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash f9743ff6329aa6fa30ac3f203936a8ba
fabd7725e05e3f5306ccdb8f7b98d57eeecc33bf
33c3725cbc91b2c5d4fe7a84f417d93158fe95af5e65cae627f5c0ee91d709c5
GET /live/03c/2b4/3a9/xbig_lq/e2b233.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16802
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd424a-41a2"
expires: Fri, 10 Feb 2023 17:20:17 GMT
last-modified: Fri, 03 Feb 2023 17:20:10 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 20
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7327db0b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/068/28d/272/xbig_lq/43dd87.jpg
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/068/28d/272/xbig_lq/43dd87.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash a4c3b4708e40822c5d7cf3eaffa0dc81
f8e081e4f80a44ffdda5b5823576e08bcd8f6592
64222f02e746dc97bfde8814d280df82e0fab3a0173294811c9e5da19bc5a4cc
GET /live/068/28d/272/xbig_lq/43dd87.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16866
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4215-41e2"
expires: Fri, 10 Feb 2023 17:19:24 GMT
last-modified: Fri, 03 Feb 2023 17:19:17 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 69
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7325d78b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/042/2dd/164/xbig_lq/c698ae.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/042/2dd/164/xbig_lq/c698ae.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 3fb06a4561d705caa0dad9c75ceb0a6c
1d47af5cd35a85ea7310a08ed9a626bb9a28e6ae
5539d7a0d756bccfba564bdf0b3e4aa507e035db4d4ed14602ce455e243dfd0d
GET /live/042/2dd/164/xbig_lq/c698ae.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14655
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4219-393f"
expires: Fri, 10 Feb 2023 17:19:24 GMT
last-modified: Fri, 03 Feb 2023 17:19:21 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 69
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7327db2b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/070/22a/1a5/xbig_lq/91a368.jpg
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/070/22a/1a5/xbig_lq/91a368.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 4713e15a9f789b09b8219662569e615a
2b149eda3b24c7e28a2c2fb752f8867671e6ec54
b5ea6882dbeb889117eb6f48a982516790ab7bd962192706a7dc0df7cfb91887
GET /live/070/22a/1a5/xbig_lq/91a368.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 18460
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd414f-481c"
expires: Fri, 10 Feb 2023 17:16:00 GMT
last-modified: Fri, 03 Feb 2023 17:15:59 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 256
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7327db1b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/e8afi.js
195.85.23.226200 OK 8.9 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/e8afi.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (836), with no line terminators
Hash ca900c1e37622e2056473c82986c20cf
c634ef9c7fd151374b9dc405f04d319e79ebe3e0
75fd87a0df95e7af50504811534dc19be2ff7b9e68cd329479d217232b6d1d52
GET /js-min/2ks9K/e8afi.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-344"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21888
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72afaa2b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/09c/00e/29b/xbig_lq/7115d3.jpg
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/09c/00e/29b/xbig_lq/7115d3.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash d3aa50bafae40418f8cf66556269e7f3
60601e3ac276a6de5ca25ee3ae686dd8b3833f34
9edb4152052154b2be04387e60a58d07f5dce6ceb972bc6d2f744a8121cc1bc5
GET /live/09c/00e/29b/xbig_lq/7115d3.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 15617
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4252-3d01"
expires: Fri, 10 Feb 2023 17:20:20 GMT
last-modified: Fri, 03 Feb 2023 17:20:18 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 9
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7328db8b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/398/1ba/xbig_lq/46890a.jpg
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/0a3/398/1ba/xbig_lq/46890a.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash cd0c0d4e6186e5bb993a333a29349ed6
f75a3c254f195e6fd95e2b805f0c13ebaa52c5d2
8658973ed44dee269dcdae51bde8b22f0dee8d0ab5d88e92a5c93fc17ef841bb
GET /live/0a3/398/1ba/xbig_lq/46890a.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16036
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd417f-3ea4"
expires: Fri, 10 Feb 2023 17:16:52 GMT
last-modified: Fri, 03 Feb 2023 17:16:47 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7329dd9b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/059/1ed/336/xbig_lq/733778.jpg
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/059/1ed/336/xbig_lq/733778.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash c02720092058e0e7bc8ac1815f57dca2
806f072720d197a7140dbb9a2e2bfa1e9a986a90
7375e94255c91bba51602e3dee2e069f322c282130a40f51dd3a58a1a1e796f8
GET /live/059/1ed/336/xbig_lq/733778.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16236
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41e7-3f6c"
expires: Fri, 10 Feb 2023 17:18:32 GMT
last-modified: Fri, 03 Feb 2023 17:18:31 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 142
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7329de2b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/85aac.js
195.85.23.226200 OK 28 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/85aac.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with very long lines (10760), with no line terminators
Hash ac07b9a9b61c5d871fb6e4b172e5f502
6083e87a9066e03fbb4bb311d9a0e000f10c45ff
745f719f56b738f0cb457f930bfb63bc14c0c7d590249c80aef6a1d72a037fb4
GET /js-min/2ks9K/85aac.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-2a08"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72e1ef7b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/09e/0ba/1f1/xbig_lq/1e07b9.jpg
195.85.23.226200 OK 27 kB URL HTTP/2 i.bcicdn.com/live/09e/0ba/1f1/xbig_lq/1e07b9.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 89b6e83c8fb6a46691a7aaeefe9c677c
144b035823552aa31b78a237fd9a35a46ed4dfe1
3a11415ea3185663e7d8199bf01c2061938091c7c7e287fef90cabc6f7250b33
GET /live/09e/0ba/1f1/xbig_lq/1e07b9.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 26591
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd419f-67df"
expires: Fri, 10 Feb 2023 17:17:22 GMT
last-modified: Fri, 03 Feb 2023 17:17:19 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7329de7b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07a/239/0a2/xbig_lq/9f9eaf.jpg
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/07a/239/0a2/xbig_lq/9f9eaf.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash a79f19405cee6312b7580a58bf6665c6
cfdc318507cdf172dfb39f39ac8c7a38e2b0b030
4598235731919f94e8cabead2e740269579e77b7a4d215e455a868bbb628ce20
GET /live/07a/239/0a2/xbig_lq/9f9eaf.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 18239
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41f2-473f"
expires: Fri, 10 Feb 2023 17:18:51 GMT
last-modified: Fri, 03 Feb 2023 17:18:42 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 129
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7329ddcb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/057/351/010/xbig_lq/df5728.jpg
195.85.23.226200 OK 19 kB URL HTTP/2 i.bcicdn.com/live/057/351/010/xbig_lq/df5728.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 94e3f22b19db5b5c73a76a81e839c3b2
f4751d5e662f76364b97f6d3e72a4b6be4a4b12d
775f134a89731972320f039dbfb358fd635999dfa502eacdf2db776eb51a2f5f
GET /live/057/351/010/xbig_lq/df5728.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 19437
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd412b-4bed"
expires: Fri, 10 Feb 2023 17:15:26 GMT
last-modified: Fri, 03 Feb 2023 17:15:23 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 323
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7329de9b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/38a/36b/xbig_lq/71e63a.jpg
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/0a3/38a/36b/xbig_lq/71e63a.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 164665f7828945f77f357816c9e31b80
d46fff7d9c077d0e3c2345731341945b7845ed11
27046341dcf2f8efa3f4204f89a58c18dab67dc8f91215da564536d86f84758d
GET /live/0a3/38a/36b/xbig_lq/71e63a.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 18226
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4150-4732"
expires: Fri, 10 Feb 2023 17:16:03 GMT
last-modified: Fri, 03 Feb 2023 17:16:00 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 256
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732be11b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/098/262/2c0/xbig_lq/36d28d.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/098/262/2c0/xbig_lq/36d28d.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash bb6b26a3c51331b03a1519b9a6749275
ae75d577d4df4e2418b5fd973e46d25d97bcef3d
e886933b71e98c919b9c16b166d7fec3cedb9e18953573fa6bf183b860deec14
GET /live/098/262/2c0/xbig_lq/36d28d.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14946
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41bf-3a62"
expires: Fri, 10 Feb 2023 17:18:02 GMT
last-modified: Fri, 03 Feb 2023 17:17:51 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 176
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732be0db4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/068/265/0c5/xbig_lq/8f8046.jpg
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/068/265/0c5/xbig_lq/8f8046.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 9da28e96d664e7d4e05d702ff37b77a7
175f54c65becac556b70f79fc0eeaa43a4a9c8aa
8cea5198ad47d6a04f5b68324b41c4cb2c649ab4ddcd3c4b5333d60875c944ea
GET /live/068/265/0c5/xbig_lq/8f8046.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 17289
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd417b-4389"
expires: Fri, 10 Feb 2023 17:16:50 GMT
last-modified: Fri, 03 Feb 2023 17:16:43 GMT
x-circle-r3: HIT
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732be0fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09c/0fd/32f/xbig_lq/3a76e9.jpg
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/09c/0fd/32f/xbig_lq/3a76e9.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 6d71e87df5703d9b633a7d65c77159ab
331ac81e5efe9c252f7301fc9d894b9dd9176586
bfcace639b93795de01826391b958252051a073ac9dd757e45fbee492b830fb7
GET /live/09c/0fd/32f/xbig_lq/3a76e9.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 19554
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4175-4c62"
expires: Fri, 10 Feb 2023 17:16:41 GMT
last-modified: Fri, 03 Feb 2023 17:16:37 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 231
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ce27b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/151/39b/xbig_lq/5254e1.jpg
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/0a1/151/39b/xbig_lq/5254e1.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash c93eee6d9fb5d8839f56dfc89a2b588b
3ac2bbee5b7e645f153acd939e9791c4b36abfd9
4e5c82ad73e2eecbafb6e00a47b30be90e437444a0e89347cf2851aca1d1ebbc
GET /live/0a1/151/39b/xbig_lq/5254e1.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14493
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41e4-389d"
expires: Fri, 10 Feb 2023 17:18:31 GMT
last-modified: Fri, 03 Feb 2023 17:18:28 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 142
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ce2eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/070/330/31d/xbig_lq/5df21a.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/070/330/31d/xbig_lq/5df21a.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash b4e43b2b7b4ba277b1d42be26bcf9329
716116962df6c385f44d5ec8bcf0bdc786918f80
2787b6ea23e14239c9993bbc4370d7e2e1997faadf9c7cc8a51ea122466946ee
GET /live/070/330/31d/xbig_lq/5df21a.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 12327
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd417a-3027"
expires: Fri, 10 Feb 2023 17:16:50 GMT
last-modified: Fri, 03 Feb 2023 17:16:42 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732de38b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/2d3/1a1/xbig_lq/952fe7.jpg
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/0a1/2d3/1a1/xbig_lq/952fe7.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash e110d6b8b854531adbc95b83a323c33a
0531e9993e3caaf099c77cf81727bb762bae3921
ea20cb500e159ee163d1a46e7c65dee19eb832b109ebb0c08cf27d2ff43b09d5
GET /live/0a1/2d3/1a1/xbig_lq/952fe7.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 20153
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4243-4eb9"
expires: Fri, 10 Feb 2023 17:20:18 GMT
last-modified: Fri, 03 Feb 2023 17:20:03 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 20
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732de3eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/04d/2f3/3d0/xbig_lq/978260.jpg
195.85.23.226200 OK 24 kB URL HTTP/2 i.bcicdn.com/live/04d/2f3/3d0/xbig_lq/978260.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash dfd267dfd279de53ce5a3afc3ed2d78c
91b94a24ae6def97a16fec0cd7f841688a90e4ca
91c0bc6f5a9d1ad4dd81a5770371a1b24adc2e30a5e0196e953db5da9c05f4c9
GET /live/04d/2f3/3d0/xbig_lq/978260.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 24302
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4239-5eee"
expires: Fri, 10 Feb 2023 17:19:56 GMT
last-modified: Fri, 03 Feb 2023 17:19:53 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 50
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ee53b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/221/21d/xbig_lq/00c0a3.jpg
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/0a1/221/21d/xbig_lq/00c0a3.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 81f5d5ff70e77a9d00ddbe53b005fe02
0a24223be63526bc41817d7cb4a3b87fabc3724a
3d2141270705718bd862693acd2f53a8fb1dd13cafe2e87098e2ef5b6546ae5b
GET /live/0a1/221/21d/xbig_lq/00c0a3.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 18103
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd3c7d-46b7"
expires: Fri, 10 Feb 2023 16:55:28 GMT
last-modified: Fri, 03 Feb 2023 16:55:25 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 1512
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ee52b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/042/283/08a/xbig_lq/907fba.jpg
195.85.23.226200 OK 24 kB URL HTTP/2 i.bcicdn.com/live/042/283/08a/xbig_lq/907fba.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 4902d44af8712d08297cd8c42912892d
69323751332ca80471cab24bc5b284e0a49720f7
d6dd7cb97a733c74525217f956644258b794922dd282f865ced40aefb116fd96
GET /live/042/283/08a/xbig_lq/907fba.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 23655
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41aa-5c67"
expires: Fri, 10 Feb 2023 17:17:32 GMT
last-modified: Fri, 03 Feb 2023 17:17:30 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ee58b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06e/00d/20b/xbig_lq/d76904.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/06e/00d/20b/xbig_lq/d76904.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 345eebc15b1ba2580d32a848e9f97855
2c85dd29c3b5ba8926448c80f0ce48b1e91e1d74
58fcc5ccd513203264ab5dac8a806c5ea7ee15ac4c6512c8b2899d91fb8fbb21
GET /live/06e/00d/20b/xbig_lq/d76904.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11991
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd40a3-2ed7"
expires: Fri, 10 Feb 2023 17:13:09 GMT
last-modified: Fri, 03 Feb 2023 17:13:07 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 450
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ee62b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/153/2b7/xbig_lq/fd9361.jpg
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/0a3/153/2b7/xbig_lq/fd9361.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 5902a6bf369d7fdfa51bcf07ed3b20b0
57c1c776e6399814c48d1adb985acdcaa631850f
73ecda5302e130dc19b15ae8ede7d0645405b30d22eda4896a34a2721fb6ec2f
GET /live/0a3/153/2b7/xbig_lq/fd9361.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16185
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4222-3f39"
expires: Fri, 10 Feb 2023 17:19:45 GMT
last-modified: Fri, 03 Feb 2023 17:19:30 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 44
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ee50b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/048/066/21f/xbig_lq/a7ef3a.jpg
195.85.23.226200 OK 18 kB URL HTTP/2 i.bcicdn.com/live/048/066/21f/xbig_lq/a7ef3a.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash b83b3173bf51249718ab254f719035d7
e0abb46029223c1b77aa4f4fb66d45f0d9bec00c
39360d78d98b23a300e1331d4a16f2b5d83788dac8dfd9f215e3257038578af2
GET /live/048/066/21f/xbig_lq/a7ef3a.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 18246
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4122-4746"
expires: Fri, 10 Feb 2023 17:15:23 GMT
last-modified: Fri, 03 Feb 2023 17:15:14 GMT
x-bc-o: 02
x-circle-r1: HIT
cf-cache-status: HIT
age: 323
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7330e78b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09f/180/331/xbig_lq/ac3dfc.jpg
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/09f/180/331/xbig_lq/ac3dfc.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash eba0c203516eabd604a03beab6ebdf42
658007f452a3d47c82e9f0f558c60b9f66d3f732
01b4cbcc83897a9ecdb22f4567b15872475cfd7fd273046dbe1f255dae531395
GET /live/09f/180/331/xbig_lq/ac3dfc.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 13383
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41df-3447"
expires: Fri, 10 Feb 2023 17:18:26 GMT
last-modified: Fri, 03 Feb 2023 17:18:23 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 142
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732fe76b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a0/015/350/xbig_lq/978260.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/0a0/015/350/xbig_lq/978260.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 8bea1261e96c5eca43a02938a4a73c8e
1a1ed44cf41478e4f1389aba975ed8c6fb5be726
c6f444c93f848ba7eba87f0f207d15aa65bbd9237450298500f67fac21713389
GET /live/0a0/015/350/xbig_lq/978260.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11733
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd423b-2dd5"
expires: Fri, 10 Feb 2023 17:19:56 GMT
last-modified: Fri, 03 Feb 2023 17:19:55 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 50
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7330e86b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/093/258/0f7/xbig_lq/9726ff.jpg
195.85.23.226200 OK 19 kB URL HTTP/2 i.bcicdn.com/live/093/258/0f7/xbig_lq/9726ff.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 564c2ceeb7d7438f9fb7914ff5e33ab2
6a6a28e8cfe7b2b83a92cf74e5c1a1943a4ba871
40274661de0b7d4dee1d1ff2e5bb3afd96c29124d1beda838b358633179890c8
GET /live/093/258/0f7/xbig_lq/9726ff.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 19203
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd422f-4b03"
expires: Fri, 10 Feb 2023 17:19:49 GMT
last-modified: Fri, 03 Feb 2023 17:19:43 GMT
x-circle-r3: HIT
cf-cache-status: HIT
age: 44
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7330e8fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/587eo.js
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/js-min/2ks9K/587eo.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type ASCII text, with no line terminators
Hash 57bb7ec3f834138a885791ff4d7f6956
ef1d66fac146d4cde7b8079be133d6fa49b9bd4b
21f81c7b5352144aee800de881c896350109e057e3cedf331781b2ca0e745106
GET /js-min/2ks9K/587eo.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-ef"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72afaa6b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/live/07c/3de/002/xbig_lq/acd101.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/07c/3de/002/xbig_lq/acd101.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 9846734d22fe07d8d2d557896c67b40e
f7897e5914883e0c0d97d193d1664fc57b62eb1c
59aaf527f198d346d243f5a605739bfce69c9fe6c039ce24c96781f4ae93b3c5
GET /live/07c/3de/002/xbig_lq/acd101.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14753
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4260-39a1"
expires: Fri, 10 Feb 2023 17:20:35 GMT
last-modified: Fri, 03 Feb 2023 17:20:32 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd732ce28b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/097/164/1cf/xbig_lq/9d9c0c.jpg
195.85.23.226200 OK 11 kB URL HTTP/2 i.bcicdn.com/live/097/164/1cf/xbig_lq/9d9c0c.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 47983a305e81d6460a9bc603f6408586
8cf877ceb45ba83ee406ba4368afc3f2909cb32b
5ce4320b83e2c8fa53b4bf76961256837777f2a4b718e4017293f5b4a4d93197
GET /live/097/164/1cf/xbig_lq/9d9c0c.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11227
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4158-2bdb"
expires: Fri, 10 Feb 2023 17:16:12 GMT
last-modified: Fri, 03 Feb 2023 17:16:08 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 256
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7331e9eb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06c/05f/2b6/xbig_lq/f96248.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/06c/05f/2b6/xbig_lq/f96248.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 2b4d244364055c4a597ee4588ba5e464
665e6aa02f0bab9eba12537fe18aa3d464738999
5733919cf411d52fb762e48baf198447e7bbf2db81a224953983f96844ec1084
GET /live/06c/05f/2b6/xbig_lq/f96248.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 12123
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41ec-2f5b"
expires: Fri, 10 Feb 2023 17:18:48 GMT
last-modified: Fri, 03 Feb 2023 17:18:36 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 129
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7333eb3b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07b/281/055/xbig_lq/b6d491.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/07b/281/055/xbig_lq/b6d491.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 03566745c8b4b1eda2ec8cf433331117
038758607c6a67eae2f4b86c5c023f31afa99f28
4e01568ba4adf02238cd96dea92b48b348b7e93e82f5bd590bc66d56e5d71881
GET /live/07b/281/055/xbig_lq/b6d491.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11852
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41b0-2e4c"
expires: Fri, 10 Feb 2023 17:17:40 GMT
last-modified: Fri, 03 Feb 2023 17:17:36 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7333eb9b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a3/391/292/xbig_lq/c82677.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/0a3/391/292/xbig_lq/c82677.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash e288fc7bb6e60253a7205ce908622b15
3bff3363484ccc8daab56232ad61fb11e181b644
e7ffd3e731e0fdd206452a4fe73d404da0d62627551bd4d94bf84e8c67a31deb
GET /live/0a3/391/292/xbig_lq/c82677.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14575
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd36e1-38ef"
expires: Fri, 10 Feb 2023 16:31:30 GMT
last-modified: Fri, 03 Feb 2023 16:31:29 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 2944
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7333ebbb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/099/0ba/37f/xbig_lq/cbd882.jpg
195.85.23.226200 OK 24 kB URL HTTP/2 i.bcicdn.com/live/099/0ba/37f/xbig_lq/cbd882.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash e82c3665aefd35c5d9d343e3ad972355
696c32cf2f16790e2852ed9a25a840ba20d94a28
1611d3d469ec6f572dae4bda9d78f9cca512f70755199095300b31787c98a40f
GET /live/099/0ba/37f/xbig_lq/cbd882.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 23882
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4212-5d4a"
expires: Fri, 10 Feb 2023 17:19:27 GMT
last-modified: Fri, 03 Feb 2023 17:19:14 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 69
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7333ebfb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09f/0e9/0d2/xbig_lq/b6d491.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/09f/0e9/0d2/xbig_lq/b6d491.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash de80cadecccc5d47b656607cbaee08a2
4a13f749147f756af227b3774fc9f5ecc77623a7
b802a19f7824f9094a54e7d831e69813c2bd18e69509b0e717c1afa76a81b88f
GET /live/09f/0e9/0d2/xbig_lq/b6d491.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11608
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41b0-2d58"
expires: Fri, 10 Feb 2023 17:17:40 GMT
last-modified: Fri, 03 Feb 2023 17:17:36 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7333ecab4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/07d/082/3ad/xbig_lq/ef083d.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/07d/082/3ad/xbig_lq/ef083d.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash f8a1f5e689b384773beef759719c89c3
3802a30e9eecd64b062655d0370427cb96987a62
e0e957662b8956991964acc5376a64400f0677e1ff955a2295f3f8b3841647e7
GET /live/07d/082/3ad/xbig_lq/ef083d.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 15387
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41ba-3c1b"
expires: Fri, 10 Feb 2023 17:17:49 GMT
last-modified: Fri, 03 Feb 2023 17:17:46 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 176
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7334eccb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/026/1ac/07f/xbig_lq/473c6d.jpg
195.85.23.226200 OK 19 kB URL HTTP/2 i.bcicdn.com/live/026/1ac/07f/xbig_lq/473c6d.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 15a54667be9ea17a1f75b0e3a986abb0
ae7a5031ba4db896f99e17838d80244e373953f2
a0becb87aaaf67bc939cd8c546fe58521616e714595674a16d6836497fc43020
GET /live/026/1ac/07f/xbig_lq/473c6d.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 18964
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd422b-4a14"
expires: Fri, 10 Feb 2023 17:19:43 GMT
last-modified: Fri, 03 Feb 2023 17:19:39 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 44
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7334ed2b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/057/156/039/xbig_lq/679405.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/057/156/039/xbig_lq/679405.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 4bd2558b1889a12489fea5f0fd513833
5b1f9931ce5161c62c811e96e08a9c3594228562
641352b9d611271d7d15e7bee80f1d91f0d89a198165db513ac182cecac59949
GET /live/057/156/039/xbig_lq/679405.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 15424
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd418e-3c40"
expires: Fri, 10 Feb 2023 17:17:03 GMT
last-modified: Fri, 03 Feb 2023 17:17:02 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7334ed5b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/069/252/0ed/xbig_lq/9726ff.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/069/252/0ed/xbig_lq/9726ff.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash a7239da5b0cb72aa94079213961933ad
1acf4817256da0922631d549ed04720c4b1f514f
f97527877b9d07e1f359b2098ebbaa5f32c438019a122b0a7b284d6bc8d57c46
GET /live/069/252/0ed/xbig_lq/9726ff.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 11938
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4230-2ea2"
expires: Fri, 10 Feb 2023 17:19:46 GMT
last-modified: Fri, 03 Feb 2023 17:19:44 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 44
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7335ed9b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/037/2bf/1c9/xbig_lq/def781.jpg
195.85.23.226200 OK 21 kB URL HTTP/2 i.bcicdn.com/live/037/2bf/1c9/xbig_lq/def781.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash b9deea792b01773528c2c3bac79821f3
ee71c6ed93f6b2fa8adaf7bee93e9cdee5f78abc
ecfe7714500959826ba56c960b3dc6e2da675d240ed882a368f34a7a3dfeda08
GET /live/037/2bf/1c9/xbig_lq/def781.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 20889
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4252-5199"
expires: Fri, 10 Feb 2023 17:20:31 GMT
last-modified: Fri, 03 Feb 2023 17:20:18 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 9
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7335edbb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/000/1cb/273/xbig_lq/b4188f.jpg
195.85.23.226200 OK 22 kB URL HTTP/2 i.bcicdn.com/live/000/1cb/273/xbig_lq/b4188f.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 9c9c24e699696190bc4ce402f9f1ca2b
6f065fddd5cc3d18f085f070c16bc336402f9b19
c9f1e9203c637cee38f40105aac78d98dc2125b3c3aec9f821933019c1fbb885
GET /live/000/1cb/273/xbig_lq/b4188f.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 21781
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4225-5515"
expires: Fri, 10 Feb 2023 17:19:36 GMT
last-modified: Fri, 03 Feb 2023 17:19:33 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 69
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7335eddb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06b/15e/27f/xbig_lq/acfb90.jpg
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/06b/15e/27f/xbig_lq/acfb90.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 11d7b81dd69b75c559e63854cf09745d
73c1202e669a773ed84677a40a484166eb3150b4
21fc32ea602ce0f6e083bf309ab96dfffff7342c30959b05a03ba54bd50eb196
GET /live/06b/15e/27f/xbig_lq/acfb90.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14241
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4238-37a1"
expires: Fri, 10 Feb 2023 17:19:54 GMT
last-modified: Fri, 03 Feb 2023 17:19:52 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 44
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7336ef2b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/090/133/059/xbig_lq/c5426c.jpg
195.85.23.226200 OK 13 kB URL HTTP/2 i.bcicdn.com/live/090/133/059/xbig_lq/c5426c.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 563c874051799d88c6549c5363de85dd
dbc986868af8c0eee0ba01edfbf9ec213b652244
ecff428cf76c9ff02873f27aa9a5f8eb6292a269aceb71090cbc8431aac2eb9e
GET /live/090/133/059/xbig_lq/c5426c.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 12988
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd418c-32bc"
expires: Fri, 10 Feb 2023 17:17:07 GMT
last-modified: Fri, 03 Feb 2023 17:17:00 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7336efeb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/053/3db/3e6/xbig_lq/f9ff44.jpg
195.85.23.226200 OK 17 kB URL HTTP/2 i.bcicdn.com/live/053/3db/3e6/xbig_lq/f9ff44.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash d205a9fa3942bfe5dc727454c4cdd53b
4a14deb78e1c72b388648371da1b03a0824cf89c
c67f9d6ef4b186ecc32b8d4677ca95ffdf0e6779bedf8f26b5e52510f8e41a75
GET /live/053/3db/3e6/xbig_lq/f9ff44.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 16708
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41ac-4144"
expires: Fri, 10 Feb 2023 17:17:35 GMT
last-modified: Fri, 03 Feb 2023 17:17:32 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7336f01b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/06d/070/0a7/xbig_lq/262daf.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/06d/070/0a7/xbig_lq/262daf.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 552876282cada56e9eec110af3451c03
0add0301766c643426d0efc6d07c679cd88f30c4
c1d33ae9384f6e92f49e4a049ea46b82a23191657a5d3d0cb4f6974f64523771
GET /live/06d/070/0a7/xbig_lq/262daf.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 14909
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4204-3a3d"
expires: Fri, 10 Feb 2023 17:19:27 GMT
last-modified: Fri, 03 Feb 2023 17:19:00 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 69
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7336f07b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/0ba/371/xbig_lq/601b4f.jpg
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/0a1/0ba/371/xbig_lq/601b4f.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash b47b70e7a3aa56e89ab7136d35677527
fd8e7d12a78637e8c5599faeae7b3391b34acbad
5dc8439084cf1b8c4bb6c41bc21db2e9b1b9fe4a4916c75c848dcd761d71dec2
GET /live/0a1/0ba/371/xbig_lq/601b4f.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 13921
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4187-3661"
expires: Fri, 10 Feb 2023 17:16:58 GMT
last-modified: Fri, 03 Feb 2023 17:16:55 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 189
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7337f09b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/039/226/3a3/xbig_lq/121366.jpg
195.85.23.226200 OK 24 kB URL HTTP/2 i.bcicdn.com/live/039/226/3a3/xbig_lq/121366.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 4e2d97a8deaeffd49fc277443308b49e
b748ab825919ff0b2bcad18bb2d817a4391a767a
2cff04b57d059cd136ff2f616d6bfd3332cde6e49a6850d32814d07627635185
GET /live/039/226/3a3/xbig_lq/121366.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: image/jpeg
content-length: 24171
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4262-5e6b"
expires: Fri, 10 Feb 2023 17:20:36 GMT
last-modified: Fri, 03 Feb 2023 17:20:34 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7331ea4b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/061/2e9/082/xbig_lq/acfb90.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/061/2e9/082/xbig_lq/acfb90.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 2b0c1537db757beb4c6c720b17ad567f
c58c4e469dab792fe757a1e21174bda248c4f934
2a33ed6d184bc2d38215eeb69c1957222090c746f72f34eae23d8ab92c1376c7
GET /live/061/2e9/082/xbig_lq/acfb90.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 15159
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4238-3b37"
expires: Fri, 10 Feb 2023 17:19:54 GMT
last-modified: Fri, 03 Feb 2023 17:19:52 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 44
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7337f0fb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a2/2eb/1c6/xbig_lq/8eedb3.jpg
195.85.23.226200 OK 14 kB URL HTTP/2 i.bcicdn.com/live/0a2/2eb/1c6/xbig_lq/8eedb3.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash fc666f825292b68549f6130acf0f9184
aaf7fc4d138806e6a328726d8fbb914be878672e
2509bfaaf19472c3e3388dea6602d8058c0ba764761b9319af8bbe834266f21e
GET /live/0a2/2eb/1c6/xbig_lq/8eedb3.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 14392
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4190-3838"
expires: Fri, 10 Feb 2023 17:17:13 GMT
last-modified: Fri, 03 Feb 2023 17:17:04 GMT
x-bc-o: 02
x-circle-r1: HIT
cf-cache-status: HIT
age: 190
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7337f1cb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/015/338/269/xbig_lq/b36390.jpg
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/015/338/269/xbig_lq/b36390.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash c61840e5e6817b8939e98117f744ecc4
97e5977f10210fa568a14970b3ca680e0744ae0d
c259f53b0109faa81028fbfe2aec2bd97c2278d30fec2209484f80ed08c22528
GET /live/015/338/269/xbig_lq/b36390.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 20367
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4174-4f8f"
expires: Fri, 10 Feb 2023 17:16:39 GMT
last-modified: Fri, 03 Feb 2023 17:16:36 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 231
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7338f25b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/04d/2f3/3d0/xbig_lq/978260.webp
195.85.23.226200 OK 16 kB URL HTTP/2 i.bcicdn.com/live/04d/2f3/3d0/xbig_lq/978260.webp
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 5775cab639a59a230c6f6055a2276012
9f546a31aa5d509bb413950a1d3b8bd10dbf7bfd
525eb0457da05c70933186117d9d4fc83e818ff0ecbbd68eff789a7bbbf0341b
GET /live/04d/2f3/3d0/xbig_lq/978260.webp HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/webp
content-length: 24162
last-modified: Fri, 03 Feb 2023 17:19:53 GMT
etag: "63dd4239-5e62"
expires: Fri, 10 Feb 2023 17:19:54 GMT
cache-control: max-age=604800
access-control-allow-origin: *
x-circle-r3: MISS
cf-cache-status: HIT
age: 52
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf99b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/094/3e6/330/xbig_lq/f040c3.jpg
195.85.23.226200 OK 20 kB URL HTTP/2 i.bcicdn.com/live/094/3e6/330/xbig_lq/f040c3.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash f46dc2fe3b78a2f0faea01949ea8da91
6d6d97e45bc466c682b4aba228086ec2f69914ae
effe7c251866424b61d38a64d157d471818559a284e0e53c35b6301fa3e2c7ca
GET /live/094/3e6/330/xbig_lq/f040c3.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 20527
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41a2-502f"
expires: Fri, 10 Feb 2023 17:17:26 GMT
last-modified: Fri, 03 Feb 2023 17:17:22 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 190
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7338f2cb4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a1/203/16a/xbig_lq/36d28d.jpg
195.85.23.226200 OK 15 kB URL HTTP/2 i.bcicdn.com/live/0a1/203/16a/xbig_lq/36d28d.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 222241320d242bb2664275d928dd9d3a
ea316ccb584e6a72baeeee0356b2d95ff3becf37
54a5f93c351213621a38d2ce77dac623b27cd37aa4de358bc496bc36c2bca1c1
GET /live/0a1/203/16a/xbig_lq/36d28d.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 14731
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41bf-398b"
expires: Fri, 10 Feb 2023 17:18:05 GMT
last-modified: Fri, 03 Feb 2023 17:17:51 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 177
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7339f32b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/096/11b/2f1/xbig_lq/886bec.jpg
195.85.23.226200 OK 8.2 kB URL HTTP/2 i.bcicdn.com/live/096/11b/2f1/xbig_lq/886bec.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 321a4375762690b30162c454b4510b58
b613427bee8a164642401eb5f71481ba6b848e6d
d0505e0862949d8c288a458664a2c4db34c257c1cb0a207f636dffc726ba8cf6
GET /live/096/11b/2f1/xbig_lq/886bec.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 8224
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4212-2020"
expires: Fri, 10 Feb 2023 17:19:27 GMT
last-modified: Fri, 03 Feb 2023 17:19:14 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 70
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7339f36b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/09c/31d/015/xbig_lq/479cdf.jpg
195.85.23.226200 OK 12 kB URL HTTP/2 i.bcicdn.com/live/09c/31d/015/xbig_lq/479cdf.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 4b338b0dec4c37ab2faaab9543192ff4
7a94267da28b937c64b6da4df0ad01a3ed161775
f518a81639ff251f07c35ca4eaca00b8725826eb27ca66c3eb7cac32c8ec10d2
GET /live/09c/31d/015/xbig_lq/479cdf.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 12159
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd41ff-2f7f"
expires: Fri, 10 Feb 2023 17:19:19 GMT
last-modified: Fri, 03 Feb 2023 17:18:55 GMT
x-bc-o: 02
x-circle-r1: MISS
cf-cache-status: HIT
age: 70
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7339f38b4e8-OSL
X-Firefox-Spdy: h2
i.bcicdn.com/live/0a2/3a3/3b5/xbig_lq/8df3cd.jpg
195.85.23.226200 OK 19 kB URL HTTP/2 i.bcicdn.com/live/0a2/3a3/3b5/xbig_lq/8df3cd.jpg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 640x480, components 3\012- data
Hash 2eeb0f5a9697eeb750c983822a1a2cb5
8450b5adb0d9c541e9e9fe9e5531b81a82288676
7e311ded974132ac5789d081ea5a80238ebebe3f57dbf837a4528a3b8ef20763
GET /live/0a2/3a3/3b5/xbig_lq/8df3cd.jpg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: image/jpeg
content-length: 18934
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: max-age=604800
etag: "63dd4181-49f6"
expires: Fri, 10 Feb 2023 17:16:53 GMT
last-modified: Fri, 03 Feb 2023 17:16:49 GMT
x-circle-r3: MISS
cf-cache-status: HIT
age: 190
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7339f41b4e8-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cc5cae6b459a7e2c24da5d903034b626
85e2f72c8c093470186bae7fa36fba7d707fad62
d212bbc591496c906da532420a8ed2e7dcce403bf1791f0b5fde0cea6a9a95c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D212BBC591496C906DA532420A8ED2E7DCCE403BF1791F0B5FDE0CEA6A9A95C3"
Last-Modified: Wed, 01 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18284
Expires: Fri, 03 Feb 2023 22:25:46 GMT
Date: Fri, 03 Feb 2023 17:21:02 GMT
Connection: keep-alive
crprt.livejasmin.com/post/play/vip/tic?ms_rnd=1675444861.85174&pstool=400_320&psid=ed_trronintdtno&utm_source=tr&category=girl&site=jsm&utm_medium=network&subaffid=13951_publishers.clickadilla.com+RON
93.93.51.191200 OK 92 kB URL HTTP/2 crprt.livejasmin.com/post/play/vip/tic?ms_rnd=1675444861.85174&pstool=400_320&psid=ed_trronintdtno&utm_source=tr&category=girl&site=jsm&utm_medium=network&subaffid=13951_publishers.clickadilla.com+RON
IP 93.93.51.191:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash e51da7491773adf26566f70785241598
9d99dc2f544a6b4ef9b1bd3c5313a70d8b2a5344
52a140f7762211e6510d587d93145fbaeadfe95b13341a5bdbb813527213bced
GET /post/play/vip/tic?ms_rnd=1675444861.85174&pstool=400_320&psid=ed_trronintdtno&utm_source=tr&category=girl&site=jsm&utm_medium=network&subaffid=13951_publishers.clickadilla.com+RON HTTP/1.1
Host: crprt.livejasmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache
date: Fri, 03 Feb 2023 17:21:02 GMT
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 05-Mar-23 17:21:02 GMT; SameSite=None; Secure
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash da7ca30710cacb5a3c4e73b12254ee4d
793622a8e54db2c7b7331095f4ed98f8437c3074
e72118b5f0b766d30d4259791eb5d9ff1b4c9aa50d7844ed6d3dfd264b9cda7d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E72118B5F0B766D30D4259791EB5D9FF1B4C9AA50D7844ED6D3DFD264B9CDA7D"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6752
Expires: Fri, 03 Feb 2023 19:13:34 GMT
Date: Fri, 03 Feb 2023 17:21:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash da7ca30710cacb5a3c4e73b12254ee4d
793622a8e54db2c7b7331095f4ed98f8437c3074
e72118b5f0b766d30d4259791eb5d9ff1b4c9aa50d7844ed6d3dfd264b9cda7d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E72118B5F0B766D30D4259791EB5D9FF1B4C9AA50D7844ED6D3DFD264B9CDA7D"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6752
Expires: Fri, 03 Feb 2023 19:13:34 GMT
Date: Fri, 03 Feb 2023 17:21:02 GMT
Connection: keep-alive
pt-static3.jsmsat.com/npe/_common/script/adblock/advertisement-v686408.js
93.93.51.201200 OK 21 B URL HTTP/2 pt-static3.jsmsat.com/npe/_common/script/adblock/advertisement-v686408.js
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
File type ASCII text, with no line terminators
Hash 01c6e7ecb819ef28b0c9b962513a1596
1a49f493db7b91ed34a7040d36732352b9a5dc39
e97a9988dce8067f81f57557b349dd481e0335e75175179b6b01322be2ff13a5
GET /npe/_common/script/adblock/advertisement-v686408.js HTTP/1.1
Host: pt-static3.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: application/javascript
content-length: 21
last-modified: Fri, 03 Feb 2023 11:35:20 GMT
etag: "63dcf178-15"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 48ac9758c65b08ad4e1183c98adf70db
bef87b3e222bb18976e30d971f1fe13ab11dba6b
1df5edf1bbe21f2dc8f2eafa3cff8d30d60c2dde6e430b6f4fb1483b6bc3a52b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DF5EDF1BBE21F2DC8F2EAFA3CFF8D30D60C2DDE6E430B6F4FB1483B6BC3A52B"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6720
Expires: Fri, 03 Feb 2023 19:13:02 GMT
Date: Fri, 03 Feb 2023 17:21:02 GMT
Connection: keep-alive
pt-static4.jsmsat.com/npe/pu/tic-vip-show/script/pu.ticvipshow-v686408.js
93.93.51.201200 OK 82 kB URL HTTP/2 pt-static4.jsmsat.com/npe/pu/tic-vip-show/script/pu.ticvipshow-v686408.js
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash ed51751d3997b1667afe557c141905ca
d5b0d247f366c2fc254d81a621d2d7830344faad
c62672056b0dd8a2df36ea37cbd26fc80105f8408a8d6551a24c0338eb8beb2e
GET /npe/pu/tic-vip-show/script/pu.ticvipshow-v686408.js HTTP/1.1
Host: pt-static4.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:35:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dcf179-3831d"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
pt-static1.jsmsat.com/npe/bonuscredit/css/bonuscredit-v686408.css
93.93.51.201200 OK 9.3 kB URL HTTP/2 pt-static1.jsmsat.com/npe/bonuscredit/css/bonuscredit-v686408.css
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash aab8e40177cf2f2ffbc832169d6e107c
0e6c1f9f39d7915ca5c6908327a201b8534ae03d
ba351a67a9513079e1353aed448ba56e49707f94ca21e8edec31b0ead441f399
GET /npe/bonuscredit/css/bonuscredit-v686408.css HTTP/1.1
Host: pt-static1.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:35:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dcf179-961"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
pt-static5.jsmsat.com/npe/pu/tic-vip-show/css/ticvipshow-v686408.css
93.93.51.201200 OK 5.9 kB URL HTTP/2 pt-static5.jsmsat.com/npe/pu/tic-vip-show/css/ticvipshow-v686408.css
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash af8e9f72afa11328fb706067b93cd3cd
8bc2e4037e94d508aaa6282b3dd9a1dfc777bcd2
642f7eaf4028f8883c8c61673eba94d87d7bb64437b832802e55d742eba3aaa7
GET /npe/pu/tic-vip-show/css/ticvipshow-v686408.css HTTP/1.1
Host: pt-static5.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:35:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dcf179-7604"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
pt-static1.jsmsat.com/npe/bonuscredit/bonuscredit-v686408.js
93.93.51.201200 OK 9.3 kB URL HTTP/2 pt-static1.jsmsat.com/npe/bonuscredit/bonuscredit-v686408.js
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
Hash aa5bca91f7e20199b44dc58ee29727aa
727c7e74d94bbd5beda92e8e32b1069132178d10
410c937e33175110bed432debdf065079233db647f0566bfe6d24cdfaf749e2b
GET /npe/bonuscredit/bonuscredit-v686408.js HTTP/1.1
Host: pt-static1.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:35:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dcf179-61a9"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
no.bongacams.com/aet
195.85.23.95200 OK 0 B IP 195.85.23.95:0
ASN #209242 Cloudflare London, LLC
POST /aet HTTP/1.1
Host: no.bongacams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no.bongacams.com/?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 111
Origin: https://no.bongacams.com
Connection: keep-alive
Cookie: __cf_bm=1Nhjy6ZgdSkRBdjAYASrrymaZ4sOOIwRaTZcLucYG8g-1675444859-0-AcQ834Tfoz49oe10L5I/qmAcdd4boSNNDem3JqGXjYnpmdvGVXKtvdrBBwaTZWQ/suB8qNepQ0RvVIwyaqMyXNI=; bonga20120608=a2008ba7a4f0d24def8aa079dead2b17; BONGAH_HIT=13f06627d03fb34c5b042913de2b3729%3A%3A191413%3A%3Ahttp%3A%2F%2Fpoweredby.jads.co%2F%3A%3A%3A%3A%3A%3A751666%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2023-02-03%2019%3A20%3A59; sg=295; warning18=%5B%22no_NO%22%5D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: application/json
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: origin-when-cross-origin
x-ua-compatible: IE=edge,chrome=1
cache-control: no-cache, no-store, must-revalidate
x-zone: 5a-web51
set-cookie: ts_type2=1; expires=Sat, 03-Feb-2024 17:21:02 GMT; Max-Age=31536000; path=/; domain=.bongacams.com
fv=ZwL4AQD0AGp2ZD==; expires=Sat, 03-Feb-2024 17:21:02 GMT; Max-Age=31536000; path=/; domain=.bongacams.com
uh=JyL0rR5an2cJZT41IHWGARILHIIzFN==; expires=Sat, 03-Feb-2024 17:21:02 GMT; Max-Age=31536000; path=/; domain=.bongacams.com
__ti=H4sIAAAAAAACAyWIPQ6AIAyFr2K6k7QPHXw9DYkOnTU4EO4u4vT99O4CpYG7LVkTNGUoZCQvl0M4-ZxRheun97-M4VKnN2YW3xSMNrq8pr1tZFQAAAA~; expires=Fri, 10-Feb-2023 17:21:02 GMT; Max-Age=604800; path=/; domain=.bongacams.com
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cd7342fd7b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/574d0.js
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/2ks9K/574d0.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /js-min/2ks9K/574d0.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-a652"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72b9bb6b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/2ks9K/cr.css
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/2ks9K/cr.css
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /css-min/2ks9K/cr.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-14ce1"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21887
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf5fb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/2ks9K/lt.css
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/2ks9K/lt.css
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /css-min/2ks9K/lt.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-1a9dd"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21887
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293876b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/1dca.js
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/2ks9K/1dca.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /js-min/2ks9K/1dca.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-303a"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21888
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72a9a11b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
pt-static5.jsmsat.com/npe/_common/script/incognito/di.min-v686408.js
93.93.51.201200 OK 0 B URL HTTP/2 pt-static5.jsmsat.com/npe/_common/script/incognito/di.min-v686408.js
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /npe/_common/script/incognito/di.min-v686408.js HTTP/1.1
Host: pt-static5.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:02 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:35:20 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dcf178-d47"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
bongacams.com/?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~
195.85.23.88302 Found 0 B URL HTTP/2 bongacams.com/?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~
IP 195.85.23.88:0
ASN #209242 Cloudflare London, LLC
GET /?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~ HTTP/1.1
Host: bongacams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://poweredby.jads.co/
Connection: keep-alive
Cookie: __cf_bm=1Nhjy6ZgdSkRBdjAYASrrymaZ4sOOIwRaTZcLucYG8g-1675444859-0-AcQ834Tfoz49oe10L5I/qmAcdd4boSNNDem3JqGXjYnpmdvGVXKtvdrBBwaTZWQ/suB8qNepQ0RvVIwyaqMyXNI=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: text/html; charset=utf-8
location: https://no.bongacams.com/?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~
cache-control: no-cache, no-store, must-revalidate
x-zone: 5a-web55
set-cookie: bonga20120608=a2008ba7a4f0d24def8aa079dead2b17; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None
ts_type=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.bongacams.com
ts_type2=1; expires=Sat, 03-Feb-2024 17:20:59 GMT; Max-Age=31536000; path=/; domain=.bongacams.com
fv=BGH4AQD0AGp2ZD==; expires=Sat, 03-Feb-2024 17:20:59 GMT; Max-Age=31536000; path=/; domain=.bongacams.com
uh=AyyHEUuSG0W1ZaEmFKMEpaSFHzulZj==; expires=Sat, 03-Feb-2024 17:20:59 GMT; Max-Age=31536000; path=/; domain=.bongacams.com
ratr=191413%3A%3A751666%3A%3A2023-02-03%2019%3A20%3A59%3A%3Ahttp%3A%2F%2Fpoweredby.jads.co%2F%3A%3A%3A%3A; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cd7244b170b06-OSL
X-Firefox-Spdy: h2
crprt.livejasmin.com/post/fslf?ms_rnd=1675444861.85174&pstool=400_18&psid=ed_trronintdtno&utm_source=tr&site=jsm&utm_medium=network&categoryName=girl&subAffId=13951_publishers.clickadilla.com+RON&rrc=3
93.93.51.191200 OK 0 B URL HTTP/2 crprt.livejasmin.com/post/fslf?ms_rnd=1675444861.85174&pstool=400_18&psid=ed_trronintdtno&utm_source=tr&site=jsm&utm_medium=network&categoryName=girl&subAffId=13951_publishers.clickadilla.com+RON&rrc=3
IP 93.93.51.191:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /post/fslf?ms_rnd=1675444861.85174&pstool=400_18&psid=ed_trronintdtno&utm_source=tr&site=jsm&utm_medium=network&categoryName=girl&subAffId=13951_publishers.clickadilla.com+RON&rrc=3 HTTP/1.1
Host: crprt.livejasmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: psui=a59f007fbf3384ccc33cc586d5d348f0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache
date: Fri, 03 Feb 2023 17:21:03 GMT
server: unknown
set-cookie: psui=a59f007fbf3384ccc33cc586d5d348f0; Path=/; Expires=Sun, 05-Mar-23 17:21:03 GMT; SameSite=None; Secure
content-encoding: gzip
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/42dcc.js
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/2ks9K/42dcc.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /js-min/2ks9K/42dcc.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-1b9c"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21885
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72aaa30b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/b02he.js
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/2ks9K/b02he.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /js-min/2ks9K/b02he.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-1e75"
expires: Sun, 05 Mar 2023 11:16:05 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21884
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72d0db6b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
bngtrk.com/hit.php?c=751666
31.192.112.221302 Found 0 B URL HTTP/2 bngtrk.com/hit.php?c=751666
IP 31.192.112.221:0
ASN #48684 Viking Host B.V.
GET /hit.php?c=751666 HTTP/1.1
Host: bngtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://poweredby.jads.co/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 17:20:59 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bongacams10.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com
BCH_H=13f06627d03fb34c5b042913de2b3729%7C2023-02-03; expires=Sat, 21-Jan-2073 17:20:59 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com
location: https://bongacams.com?bcs=bWlkcDEzZjA2NjI3ZDAzZmIzNGM1YjA0MjkxM2RlMmIzNzI5OjoxOTE0MTM6Omh0dHA6Ly9wb3dlcmVkYnkuamFkcy5jby86Ojo6Ojo3NTE2NjY6OjA6OjA6OjA6Ojo6MDo6ZGVmYXVsdDo6MA~~
expires: Fri, 03 Feb 2023 17:20:58 GMT
x-bcs: ded7383
strict-transport-security: max-age=0;
cache-control: no-cache, public
x-bc-bl: 102
X-Firefox-Spdy: h2
bg4nxu2u5t.com/get/1854721?zoneid=1854721&jp=_clhqqu379kwk767gewuqzf&nojs=0&ix=0&abvar=3&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=6865201397376049
62.122.171.6200 OK 0 B URL HTTP/2 bg4nxu2u5t.com/get/1854721?zoneid=1854721&jp=_clhqqu379kwk767gewuqzf&nojs=0&ix=0&abvar=3&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=6865201397376049
IP 62.122.171.6:0
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1854721?zoneid=1854721&jp=_clhqqu379kwk767gewuqzf&nojs=0&ix=0&abvar=3&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=6865201397376049 HTTP/1.1
Host: bg4nxu2u5t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=230203122091d2514e1e9840cabeadf926ea; Path=/; Expires=Sat, 03 Feb 2024 17:20:58 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/h.js
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/2ks9K/h.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /js-min/2ks9K/h.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-9ac61"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21886
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd728bf66b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
bg4nxu2u5t.com/aas/r45d/vki/1854721/105dadc5.js
62.122.171.6200 OK 0 B URL HTTP/2 bg4nxu2u5t.com/aas/r45d/vki/1854721/105dadc5.js
IP 62.122.171.6:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /aas/r45d/vki/1854721/105dadc5.js HTTP/1.1
Host: bg4nxu2u5t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thatpervert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:20:58 GMT
content-type: application/javascript
last-modified: Tue, 31 Jan 2023 12:39:48 GMT
vary: Accept-Encoding
etag: W/"63d90c14-120a1"
x-js-ab1: var3
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
i.bcicdn.com/images/replace/10/arial/999/bnct_v2.svg
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/images/replace/10/arial/999/bnct_v2.svg
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /images/replace/10/arial/999/bnct_v2.svg HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Mar 2022 11:31:04 GMT
etag: W/"6231ca78-345d"
expires: Thu, 16 Feb 2023 13:47:23 GMT
cache-control: max-age=2592000
x-o1-css: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 1481615
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd729386cb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
pt-static2.jsmsat.com/npe/pu/fslf/css/fslf.jsm-v686408.css
93.93.51.201200 OK 0 B URL HTTP/2 pt-static2.jsmsat.com/npe/pu/fslf/css/fslf.jsm-v686408.css
IP 93.93.51.201:0
ASN #34655 DuoDecad IT Services Luxembourg S.a r.l.
GET /npe/pu/fslf/css/fslf.jsm-v686408.css HTTP/1.1
Host: pt-static2.jsmsat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crprt.livejasmin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:03 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:35:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dcf179-5ee8"
access-control-allow-origin: *
server: unknown
x-cdn-node: sesto
x-cache-status: R-HIT
content-encoding: gzip
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/2ks9K/extra/listing_catrows.css
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/2ks9K/extra/listing_catrows.css
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /css-min/2ks9K/extra/listing_catrows.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-1408"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21887
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293872b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/2ks9K/extra/listing.css
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/2ks9K/extra/listing.css
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /css-min/2ks9K/extra/listing.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-11e8d"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21887
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293877b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/2ks9K/hg.css
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/2ks9K/hg.css
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /css-min/2ks9K/hg.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-c459"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21887
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293874b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/css-min/2ks9K/ft.css
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/css-min/2ks9K/ft.css
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /css-min/2ks9K/ft.css HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:00 GMT
content-type: text/css
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-3a14"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21887
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd7293871b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.bcicdn.com/js-min/2ks9K/c985j.js
195.85.23.226200 OK 0 B URL HTTP/2 i.bcicdn.com/js-min/2ks9K/c985j.js
IP 195.85.23.226:0
ASN #209242 Cloudflare London, LLC
GET /js-min/2ks9K/c985j.js HTTP/1.1
Host: i.bcicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no.bongacams.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:21:01 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 11:13:34 GMT
etag: W/"63dcec5e-4ffb"
expires: Sun, 05 Mar 2023 11:16:06 GMT
cache-control: max-age=2592000
x-o1-css: MISS
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 21889
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 793cd72f9902b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2