r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14833
Expires: Mon, 28 Nov 2022 01:31:55 GMT
Date: Sun, 27 Nov 2022 21:24:42 GMT
Connection: keep-alive
f2b.co.in/3Ra8k
162.0.235.133200 OK 108 B IP 162.0.235.133:0
File type HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 1d66458ab9b4176f3b524b0f05775ac0
03bee2a64b4a97f2ec320e42eed98c980675f253
4c8bd0be74b1a6bf5e4504dc967f3ebf8a18cc171fbaf326621bfc6fafc68033
GET /3Ra8k HTTP/1.1
Host: f2b.co.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
content-length: 108
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 27 Nov 2022 21:24:42 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5118
Cache-Control: max-age=138709
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:42 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:56:31 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2407
Expires: Sun, 27 Nov 2022 22:04:49 GMT
Date: Sun, 27 Nov 2022 21:24:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 21:17:42 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 420
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 21:24:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: grFr9uIAZGHDI6C8Eefu2EAtGu50ao+ZMRVbQRafytsos9F0wD/1bYhdGr4hzW4zrhA5OuBMOFM=
x-amz-request-id: XYR8ATX4D0KKN0QB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 20:44:46 GMT
age: 2396
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31a44d3e34aeec809ba03260a8f6482c
8fccf09e6e5f3d2d1bbfde9184882c64f6815a25
26b1b9b2d87a395f71d5458567891a4a0e6cda8b677af69d016449a1860884b6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26B1B9B2D87A395F71D5458567891A4A0E6CDA8B677AF69D016449A1860884B6"
Last-Modified: Sat, 26 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 28 Nov 2022 03:24:43 GMT
Date: Sun, 27 Nov 2022 21:24:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 21:11:12 GMT
cache-control: public,max-age=3600
age: 811
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6343
Cache-Control: max-age=134872
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:43 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:52:35 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
bdecjeh.naughtymets.com/s/626798530efb3
178.162.199.80200 OK 3.4 kB URL HTTP/1.1 bdecjeh.naughtymets.com/s/626798530efb3
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (377)
Hash daef85505ed4b7cdcfd888ef25d2cf83
a367e533453428ad556e682a503e06a7f21563f0
7966c26d5ed5d2de069730df27119b6df95b66894b4758eb8c7af6282e4d8e2b
Analyzer Verdict Alert fortinet Phishing
GET /s/626798530efb3 HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://f2b.co.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI; expires=Mon, 28-Nov-2022 21:24:43 GMT; Max-Age=86400; path=/; domain=naughtymets.com
SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=naughtymets.com
ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=naughtymets.com
Content-Encoding: gzip
push.services.mozilla.com/
54.188.211.138101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.188.211.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TF2xrCQNu1xBiNZGxbYwMQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZW/l37+E9Qp59svk1IAfLOA6wi4=
bdecjeh.naughtymets.com/bundle/543/assets/css/style.css
178.162.199.80200 OK 14 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/css/style.css
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with CRLF line terminators
Hash 987c50793db09b784acc631533f05119
c8baba8c3fc532baf228736732c9d0e464bb92e7
492392aca6183e8cd3e99a7a800bbb8166119d3b3fe043b56be3766f80d37bd3
GET /bundle/543/assets/css/style.css HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: text/css
Content-Length: 14510
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:02 GMT
Vary: Accept-Encoding
ETag: "61b8bbfe-38ae"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdecjeh.naughtymets.com/bundle/543/assets/css/css.css
178.162.199.80200 OK 10 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/css/css.css
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
Hash f30ed39490382865b4494061ba36ab4b
808353988b35125f8e5efa73436884f5b2d9f6e6
586341b2e23993a5c8d45db157b5e2d287121303d207cddf4139a0e06c3b866d
GET /bundle/543/assets/css/css.css HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: text/css
Content-Length: 10357
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:02 GMT
Vary: Accept-Encoding
ETag: "61b8bbfe-2875"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/js/functions.js
178.162.199.80200 OK 3.2 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/js/functions.js
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with CRLF line terminators
Hash 9bd0abbee27bf88c716b2643b36dc8f8
a5e4d47a013b594b51d11268dbb54dead636fdc0
0f885679990421d11d0f984fb9fb5f138d1f83a6fbb40e060fed7f453dfc1388
Analyzer Verdict Alert fortinet Phishing
GET /bundle/543/assets/js/functions.js HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: application/javascript
Content-Length: 3241
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:07 GMT
Vary: Accept-Encoding
ETag: "61b8bc03-ca9"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/js/click.js?8
178.162.199.80200 OK 5.3 kB URL HTTP/1.1 bdecjeh.naughtymets.com/js/click.js?8
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
Hash 8207d083c909c6386927c5197eff584c
a5f1148a0e9923191d3f8ed4c1750240374af2a9
f71ae9723255b00dcc8e3631fe419cbbb56a80b3034f184ca5292127d7b3eea9
GET /js/click.js?8 HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: application/javascript
Content-Length: 5260
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 12:43:08 GMT
Vary: Accept-Encoding
ETag: "63762c5c-148c"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/js/jquery.js
178.162.199.80200 OK 90 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/js/jquery.js
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert fortinet Phishing
GET /bundle/543/assets/js/jquery.js HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: application/javascript
Content-Length: 89476
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:07 GMT
Vary: Accept-Encoding
ETag: "61b8bc03-15d84"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p9_3.png
178.162.199.80200 OK 53 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p9_3.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 1c3a2dc3681b3e447263e8790608e334
74e77a8638a881d11f88af4b8733cb00dbb9d8bd
6c2bba41d4aea31e90741e2fa84107439011bd56963033734159d8c7f46d895b
GET /bundle/543/assets/images/p9_3.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 53318
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:06 GMT
ETag: "61b8bc02-d046"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p9_4.png
178.162.199.80200 OK 60 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p9_4.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 475389ca94897a28dafcc0f92631094f
d94dcab07cfdec16972a14c61d534a15ca8cb556
956dd0bba9897c9997c3f22604a603594342775cdd1aac6d1aea790f43f96b33
GET /bundle/543/assets/images/p9_4.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 59693
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:06 GMT
ETag: "61b8bc02-e92d"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/Tlogo.png
178.162.199.80200 OK 21 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/Tlogo.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 334 x 172, 8-bit/color RGBA, non-interlaced\012- data
Hash cf052695dcfea41b32891c6fe0db704a
04666c7589d5f76d4d83b25180be153c74fa12c4
b0323f64bf0cf04da9f58a4b09142954f6d7843dfb037826aca05125c1590e45
GET /bundle/543/assets/images/Tlogo.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 20691
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:07 GMT
ETag: "61b8bc03-50d3"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdecjeh.naughtymets.com/bundle/543/assets/images/bg1.jpg
178.162.199.80200 OK 64 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/bg1.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3\012- data
Hash a6c153fab3849ec0e3ba73f645433aec
f3747bf682252fef7befdf2870f19e16c6d4f77f
33215a1515c319a23598b30fea546e10dcb8cca455b42e20d8aa5e2eebd73bde
GET /bundle/543/assets/images/bg1.jpg HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/bundle/543/assets/css/style.css
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/jpeg
Content-Length: 64359
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:03 GMT
ETag: "61b8bbff-fb67"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/blob.png
178.162.199.80200 OK 23 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/blob.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 583 x 428, 8-bit/color RGBA, non-interlaced\012- data
Hash 5571d30924ae123918e9a192bdab268d
8456f8812e7f2a74b82c849a954c682e92dd8631
31cf63bfb1030bb5d36c6a84a8c5df57081e23481bde6f9fcb1ad78ccfea045b
GET /bundle/543/assets/images/blob.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/bundle/543/assets/css/style.css
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 23169
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:03 GMT
ETag: "61b8bbff-5a81"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p9_5.png
178.162.199.80200 OK 45 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p9_5.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c046ad61659ad83f18fb2d5349f274e
53526b692ba5ea4f318cae71cacdf7c7efb4712a
ac10817ac054c59733bd84b6c232b47e463b8557c479f534f3fbc609fdfd6314
GET /bundle/543/assets/images/p9_5.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 45353
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:06 GMT
ETag: "61b8bc02-b129"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/bg2.jpg
178.162.199.80200 OK 51 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/bg2.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3\012- data
Hash 37832c21ce4b202719cd33b6db45028b
a363710e7567d46202dd73b0761c46993bf68dca
431f71eb5f7842de8711739f0833a4c30e46ba8831dc8b209634ad48544b595d
GET /bundle/543/assets/images/bg2.jpg HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/bundle/543/assets/css/style.css
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/jpeg
Content-Length: 50733
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:03 GMT
ETag: "61b8bbff-c62d"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdecjeh.naughtymets.com/bundle/543/assets/images/p7_1.png
178.162.199.80200 OK 48 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p7_1.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash c37b1d71b49a4c8f8bf645d045f16985
548f445b73a87ed311986b78ad30ae585eb94d32
0940f506ad7a63a87d4094ed8982c9ced20a40f80968a8d60c413d9b5ecab79e
GET /bundle/543/assets/images/p7_1.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 47972
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:04 GMT
ETag: "61b8bc00-bb64"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p7_2.png
178.162.199.80200 OK 56 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p7_2.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d8f82b8f9aa4d840b186f45c58be648
b756e6fa8803f25ac91ed0091be37bfcabd70a78
7c62140581382ceef8fdc3fef780f94d132d2758a22393aec252d65373d74d86
GET /bundle/543/assets/images/p7_2.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 55991
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:04 GMT
ETag: "61b8bc00-dab7"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p7_3.png
178.162.199.80200 OK 40 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p7_3.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash b4c70525d55d14c65478b0f8b9c9954e
31e2063dc95f3d6a9995b76d382880f567246803
6f3f1d4003323a7f9135232b8cdca5f2cfde0e6b9b2988255c41a97c7b6fd163
GET /bundle/543/assets/images/p7_3.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 40337
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:04 GMT
ETag: "61b8bc00-9d91"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p7_4.png
178.162.199.80200 OK 60 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p7_4.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 746ac82d1374f51b4ceae516f69ab6ad
e3a378690b02af5732f3569ea71e00e666c46f1b
a44f12838759e2055800c0642603be1085c5120d6f5df276c2e0e87210e0b8ab
GET /bundle/543/assets/images/p7_4.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 59759
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:04 GMT
ETag: "61b8bc00-e96f"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p7_5.png
178.162.199.80200 OK 51 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p7_5.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 9407b587b816571fef24ea488fb29138
f7cc0874ccb7c8199fc2a078b507cb7497369c91
db27f7041801043061be15117bf82104786d53d8c3fcdd3165270efb87110f01
GET /bundle/543/assets/images/p7_5.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/png
Content-Length: 50867
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:04 GMT
ETag: "61b8bc00-c6b3"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/bg3.jpg
178.162.199.80200 OK 56 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/bg3.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3\012- data
Hash 4e2d83c4bf79c1e4c84aefc33a382f31
ffab591ef8385e851d2c17feeba2b2a22eeb6d12
e05a0702af3ef4e8d37e6c491e1478e0416cbdfc404fa5da52d135b4b8e04234
GET /bundle/543/assets/images/bg3.jpg HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/bundle/543/assets/css/style.css
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/jpeg
Content-Length: 56408
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:03 GMT
ETag: "61b8bbff-dc58"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/04.gif
178.162.199.80200 OK 388 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/04.gif
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type GIF image data, version 89a, 312 x 312\012- data
Size 388 kB (388375 bytes)
Hash f8db03d9bf7a637a23362df0914aabfc
5828fb6a2ca814a2aa7db0f0c6f8ff61561a5ac3
8618a596b8ff121219334e7680e60691712f054bec2c7d3ed28c1381e28c01b1
GET /bundle/543/assets/images/04.gif HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:43 GMT
Content-Type: image/gif
Content-Length: 388375
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:02 GMT
ETag: "61b8bbfe-5ed17"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p8_3.png
178.162.199.80200 OK 51 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p8_3.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash b44d52f1628ccbe49dea725a18667d74
80aacb07a91269756340ccfed0480ead57c6d54f
0057b6d4f57ea0dabd771f6358f10a231ae805436ee6fc6850a02135e8f13532
GET /bundle/543/assets/images/p8_3.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 51413
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:05 GMT
ETag: "61b8bc01-c8d5"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdecjeh.naughtymets.com/bundle/543/assets/images/p8_4.png
178.162.199.80200 OK 55 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p8_4.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 4dfe1a0253a15cd22e57b3eaab9116d2
8aa46e3d35632187a70e396c688293f6d7e688f4
62cc8f8b8dedacb8754b1ce93bc479ca3f6ae6246257928a4a0e1e0a281cf4a3
GET /bundle/543/assets/images/p8_4.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 55219
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:05 GMT
ETag: "61b8bc01-d7b3"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p8_1.png
178.162.199.80200 OK 58 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p8_1.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 63f74d7c97a74239d43d4418803b345a
2855449c3a816dfa892b75ce3b6a1415da740fec
a988dba1586aa8826577d9320678d3855d0d9d2e981d1073dd56b91a3859e3fb
GET /bundle/543/assets/images/p8_1.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 57903
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:05 GMT
ETag: "61b8bc01-e22f"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/js/fp2.min.js
178.162.199.80200 OK 31 kB URL HTTP/1.1 bdecjeh.naughtymets.com/js/fp2.min.js
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (30507)
Hash e7d6b85edb141824af8951e19333337c
76600b2cb1978ca24d9fe39b1412f052da855ddb
6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e
Analyzer Verdict Alert fortinet Phishing
GET /js/fp2.min.js HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI; CF=1LMBBBg84JPQjNHQ0wVnLA__
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: application/javascript
Content-Length: 30685
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 12:43:08 GMT
Vary: Accept-Encoding
ETag: "63762c5c-77dd"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p8_2.png
178.162.199.80200 OK 50 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p8_2.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 431679c0fdd060aeef69f2b8beec4169
0c7f0ef489e5e752c814420165bbd3941cb3fd70
ecee803291f0a56f17cbefc5c561f32d277226d4a25f331371109bdc0e1e27df
GET /bundle/543/assets/images/p8_2.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 49466
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:05 GMT
ETag: "61b8bc01-c13a"
Accept-Ranges: bytes
bdecjeh.naughtymets.com/bundle/543/assets/images/p8_5.png
178.162.199.80200 OK 54 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p8_5.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 621fa434f53e05bdff2819eaf6e5c9ed
1aa94b820cd55a353a569e8cb4b5302c784a6ae7
10309b3258647bc6866587d6bca464cc6619b5c54187c27116ff6f74b9edcf61
GET /bundle/543/assets/images/p8_5.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 54413
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:05 GMT
ETag: "61b8bc01-d48d"
Accept-Ranges: bytes
fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0b.woff2
216.58.207.195200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0b.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 14380, version 1.0\012- data
Hash 33543c5cc5d88f5695dd08c87d280dfd
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52
GET /s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0b.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bdecjeh.naughtymets.com
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14380
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:55:06 GMT
expires: Thu, 23 Nov 2023 18:55:06 GMT
cache-control: public, max-age=31536000
age: 354578
last-modified: Tue, 15 Sep 2020 18:09:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhp.woff2
216.58.207.195200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhp.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 14880, version 1.0\012- data
Hash 819af3d3abdc9f135d49b80a91e2ff4c
0fd9f29faa386a9c8de328f799d2698948ed3d25
1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc
GET /s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bdecjeh.naughtymets.com
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14880
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 23:40:03 GMT
expires: Sat, 25 Nov 2023 23:40:03 GMT
cache-control: public, max-age=31536000
age: 164681
last-modified: Tue, 15 Sep 2020 18:09:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bdecjeh.naughtymets.com/bundle/543/assets/images/p9_2.png
178.162.199.80200 OK 54 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p9_2.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 01769e8254253553da95a9280b5a6527
7e586cd317b68b14984106d1f17089302b97d6ec
8d20fec6e5cd6640741ebcc46609813b2e10e0fdba6757f6b2c0e56d7fea3e43
GET /bundle/543/assets/images/p9_2.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 53970
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:06 GMT
ETag: "61b8bc02-d2d2"
Accept-Ranges: bytes
fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
216.58.207.195200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15056, version 1.0\012- data
Hash 0edb76284a7a0f8db4665b560ee2b48f
02496387a5f7bf7b79df52c7b76ece4ebc7a0710
74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b
GET /s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bdecjeh.naughtymets.com
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 19:39:27 GMT
expires: Sun, 26 Nov 2023 19:39:27 GMT
cache-control: public, max-age=31536000
age: 92717
last-modified: Tue, 15 Sep 2020 18:11:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bdecjeh.naughtymets.com/bundle/543/assets/images/p9_1.png
178.162.199.80200 OK 54 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/p9_1.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 166 x 166, 8-bit/color RGBA, non-interlaced\012- data
Hash 37059e26c56db6eca0b25465101d4855
6540eb900095769de1a2e71516a48e54cd8173e1
cfc4151b42a93abddb3885a5d907ad7cf486149ec615e1c107759629c12cd49e
GET /bundle/543/assets/images/p9_1.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 54337
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:06 GMT
ETag: "61b8bc02-d441"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 21:24:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdecjeh.naughtymets.com/bundle/543/assets/images/favicon.png
178.162.199.80200 OK 5.5 kB URL HTTP/1.1 bdecjeh.naughtymets.com/bundle/543/assets/images/favicon.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 30c9e792a1ad6251ab3437d7da76e293
d440c16e6948c307382f67677d3561652b26275b
312e2177186abb7f162c20d5530fd4a4462e48ec6f611f374a497e73752ad523
GET /bundle/543/assets/images/favicon.png HTTP/1.1
Host: bdecjeh.naughtymets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/s/626798530efb3
Cookie: s=wSvereGdFzbPTYFn2ykXoZ9p10ovnPo1vRpE900n3FpA1zz5CyYzrg41qtKPVUcCc1IwDm%2BKPpVZiIABiKZzRiB%2BNvgRH6NV%2FTdQQiJzDV5CSNHAIs5eAoUVAsXCqmuuqKJpuuqS0BiZU%2BRgtdRUfbHF2r%2BngvJlDS4fdWnCvHw9C99Jjj6wOeDGSRy64DEnv3dPcZSEWANjktpRvDqAxk220p8KKkmjoUETnpZbwOyovUfjeMCD9LLSytQvH7DfsrR2N7UgoXoYQOxl%2F1bk1%2F8S8%2FvCcBj0P99j8GTeu3isDkZAVV78QiY4T2vCW1OODcZjhjYXs7siYdEzVhlhyQWQ4EzeigY49P%2F2T%2BS4fW4TBzMBSpB94pifTfANPNbWN77uaxRR9jyZ5FbkGPLwSgE21AY5JHw4iujmOTRuYm7Rq66%2BqeHYUdaUuNDGWodpEoVp6Rru5%2FYGmLaCZ5LkLlhpswgN3d2ikeXbCpliEbkgXJ6S5XJEm8LULngPMU2%2BVkeuOIWPhyO17Fblf3B5G%2FMY0%2BvtenhA1NXwiAu%2Bajiy%2BU%2FVnvMuo2znb1wzBSMyvoBXWy518EkvcTsY%2ByuIPG8ksmP7WJ73S7C%2FCgCOapy%2B28fH4hMRQX%2BdbKcZnOthktEXCu7XwnSRjfDRLcok6r9wfzpgx6i61ZyGr1yg7h%2FHqLqL3SDBj0cYxCA1maxlf3H6UqiEwc16r5Sfau6D9nmsIXxhnGdmcJL%2F3pQGZgjyck2O6ZsJ11u9DYhNdQylqgKuLK7cSPAbvd6096x3OyCA8tdWrBie55PobGhLsHityLSV1Zxpbb1jCz1B%2BhxHfd0iXTmRFyi3uvXw3lLF6y88KUJQo1G5%2BVY%2BTrxLya4BUw8m%2FyFnLfh0xZ3CLDIAlJBqlCya6WBVyYnsly%2BYlqW0Fx9Nq5xfS1rwE8nunI2GGCuSyRbJ7AQqUUaJsy7772hqV%2Fbj5Z%2FuW2UjckbudsR3kvEZJG6mhutHWJ4r7sIt0qby9uSWMmYXCs3kRTuwkS0vTgj046gRRiDpb6n91DDQ08ZbthVh7lZGry1mW1XFbv%2BJTjeiO2dwNdlwQRvIH%2ByqnWih01bTN9dYFhK36qHIMrHwOnUbvGLFhtOBWFwsSfC6ouNXysFUkG92x%2BZEQufiwWlgAPKKj1i3ttiBAemsNDQDcnxiTdK8n8OhlJ11okb1T0LfB%2F8xJYI84TcUG13lLO7qxRgrR%2Bmm4v7yFGF7R3MKDUjVYYG%2FNF3ZIOYcjvQqlhNfXTEUzzeFdPDmt4%2F0kZgSGwneQ8ssv4%2Bec9y72Dh7KUnc9Sxebcmj0NdP%2FiOceLeZtJz9uz6hKZsxZFWBbYc4%2B2oJ5gC0e3ZCxpqfWto%2BUtcpwJlzcB0KMH3Z%2FXWi82Sn1h1x5TpKA0R75KoeRjAqdRoL7iLD1Kr9TYJ%2BBJHL2zg%2BvXnsRQPwaZIS%2FMq6Jx7r7%2FE4lR5GmHyB1ieMqIZ30z6dCan4ByyH24KA%2BC%2FSHejJ%2FnAeYN1%2BZ5lbfi2SQmEgGcO52Qw1lssSTgwcx8zw1mpCXh2lpPHRumrXDgLbJgLHfSbp10LT7LkI; CF=1LMBBBg84JPQjNHQ0wVnLA__
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sun, 27 Nov 2022 21:24:44 GMT
Content-Type: image/png
Content-Length: 5533
Connection: keep-alive
Last-Modified: Tue, 14 Dec 2021 15:45:04 GMT
ETag: "61b8bc00-159d"
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Sun, 27 Nov 2022 22:56:00 GMT
Date: Sun, 27 Nov 2022 21:24:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Sun, 27 Nov 2022 22:56:00 GMT
Date: Sun, 27 Nov 2022 21:24:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Sun, 27 Nov 2022 22:56:00 GMT
Date: Sun, 27 Nov 2022 21:24:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Sun, 27 Nov 2022 22:56:00 GMT
Date: Sun, 27 Nov 2022 21:24:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Sun, 27 Nov 2022 22:56:00 GMT
Date: Sun, 27 Nov 2022 21:24:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K2eKLQhrsCdd4ASsfEibRuZAYW4CpPTlO3fZs7xdoKrw1HBxfTGkEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
age: 85350
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 33d3ca17-7878-4897-a634-5f626a64e820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJ40OEOqIAMFaOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380a1b4-040288d571fc10b96d893fa4;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 11:06:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f_U8KSYET6kaKAPbEV7sHW0tO6JGijsqUvghniwzFCRd2YGQjVlFoA==
via: 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 10:16:35 GMT
age: 40089
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: fc238ea9-0169-47fc-b92e-f12b3ee27c72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b433YGtOoAMFexg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d362-2f97c67a2e5f05b6746cf858;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:12:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: oMrdB0NUGe5CqTY7eFd3u8xaSy9TyDdOrf1awBikFJzm3jWreD2irQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 12:30:20 GMT
age: 32064
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 433875a1b1fef34e45f2d8ac344c07e3
f2129466436cbbdd58abe42a47fb7af19eba58e6
ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
content-type: image/jpeg
age: 85350
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 05:54:16 GMT
age: 55828
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
age: 85350
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800
IP 142.250.74.10:0
GET /css?family=Open+Sans:300,400,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bdecjeh.naughtymets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 21:24:43 GMT
date: Sun, 27 Nov 2022 21:24:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2